Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/A807146437E411EC9BA3E20AC4F9AE02.roa
File:                     A807146437E411EC9BA3E20AC4F9AE02.roa (raw, json)
Hash identifier:          PGLf8L8QiEjV7hVDA42GOFBiY+0vSEuMTlxgwCxlk10=
Subject key identifier:   C6:C7:DD:63:AC:F4:93:CA:DD:1B:83:D2:66:8C:E5:48:3D:3B:D8:CD
Certificate issuer:       /CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
Certificate serial:       0A85
Authority key identifier: 97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/A807146437E411EC9BA3E20AC4F9AE02.roa
Signing time:             Thu 02 Nov 2023 20:07:41 +0000
ROA not before:           Thu 02 Nov 2023 20:07:41 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     138183
IP address blocks:        103.129.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl
                          rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2693 (0xa85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
        Validity
            Not Before: Nov  2 20:07:41 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6544018c-2d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3c:f1:dd:dc:d4:8a:48:15:73:92:64:eb:e9:
                    e8:56:81:0f:ff:a0:21:ee:9d:6a:41:6b:c3:34:43:
                    04:29:ca:42:04:33:1d:36:72:b6:1b:29:16:c3:62:
                    d5:7b:8b:45:9d:2f:a4:39:d7:7b:c7:cb:83:ec:3c:
                    bb:48:44:02:79:82:48:86:83:e3:8d:ef:d9:18:65:
                    78:b2:0d:6a:fa:51:ae:82:f4:67:f9:e0:fe:75:67:
                    c8:78:8e:d8:84:ba:3c:d7:27:e4:8b:4f:ed:d2:8a:
                    9f:2e:63:8f:a6:44:03:00:ee:ea:76:6c:3b:e0:b8:
                    1a:d6:05:8b:1f:e6:c9:52:23:9a:68:cf:c6:21:f6:
                    95:4b:44:51:8e:5e:d8:f0:d7:f5:23:2c:0d:2c:ab:
                    5f:6e:29:49:97:1c:3f:8c:17:1a:1a:1a:48:ab:e2:
                    2c:06:8c:38:88:fd:2a:e9:85:fb:80:0b:ab:18:50:
                    b5:eb:63:ac:3b:5d:4c:41:22:f8:00:29:d8:af:20:
                    21:4e:88:9c:89:3d:7a:e4:e0:95:b3:cf:d0:06:5d:
                    54:b2:5b:e4:c0:b1:ec:9b:10:d7:45:1a:70:3e:f7:
                    72:0b:76:01:c5:e9:a0:26:1b:6d:b8:b3:d8:be:96:
                    07:b7:44:bf:fd:34:1e:d3:04:5f:7b:00:2f:b5:83:
                    7d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C7:DD:63:AC:F4:93:CA:DD:1B:83:D2:66:8C:E5:48:3D:3B:D8:CD
            X509v3 Authority Key Identifier:
                keyid:97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/A807146437E411EC9BA3E20AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:1a:4d:ac:32:4b:94:f1:20:06:f3:70:33:44:b8:23:0c:6d:
         58:90:5b:91:4c:c1:56:42:02:14:97:94:4e:52:4d:76:e7:5a:
         65:cd:50:ce:6a:7f:b7:59:6b:c7:ae:52:90:09:f0:9f:ee:c5:
         bf:86:a9:58:82:d7:45:ce:18:84:fa:e5:e3:97:68:f2:c9:61:
         69:42:a3:03:2f:4c:bd:12:59:3a:78:60:04:6c:7f:54:4d:e4:
         fc:ca:56:50:74:69:62:b9:6f:d3:80:f7:77:b0:cc:57:5e:fb:
         c1:92:f7:60:00:1d:a8:55:ec:b5:44:32:db:ac:ec:2c:f6:24:
         9d:79:7e:50:fa:70:78:c5:af:bc:df:65:40:c7:73:0a:5d:81:
         c2:b7:ff:56:94:60:21:5a:7a:bd:0c:94:48:63:c3:5c:21:66:
         7c:35:7e:d0:a8:a4:86:10:c8:c5:df:ab:1a:03:28:1d:8a:43:
         1d:9e:d6:c0:dc:04:18:99:d5:99:4c:ca:8c:8a:99:d6:bd:9d:
         72:1c:bb:a2:22:96:a6:53:1d:f1:28:8c:dc:14:0e:30:46:4d:
         57:33:89:65:ff:37:b8:15:bc:6a:f7:8c:d7:25:d7:81:e2:8e:
         57:74:6f:ed:b6:58:46:e1:c5:6b:1c:e0:f3:cd:5c:af:e1:13:
         cf:7f:aa:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 23:04:07 2024 by rpki-client on console-ams.rpki-client.org