Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/73E1CE72FCA411EE88B23A71C4F9AE02.roa
File:                     73E1CE72FCA411EE88B23A71C4F9AE02.roa (raw, json)
Hash identifier:          LovrQr0mUjcthPu/WYoue9gVRApOki+SAMOADrfZtvw=
Subject key identifier:   E7:FF:5C:08:16:EB:FB:3B:CF:5F:28:CF:64:AB:B1:9D:09:F4:76:C6
Certificate issuer:       /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5
Certificate serial:       01DA
Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/73E1CE72FCA411EE88B23A71C4F9AE02.roa
Signing time:             Wed 17 Apr 2024 10:22:54 +0000
ROA not before:           Wed 17 Apr 2024 10:22:54 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     152475
IP address blocks:        103.40.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl
                          rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5
        Validity
            Not Before: Apr 17 10:22:54 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=661fa2fe-82e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1c:5a:5c:c8:40:c9:b4:f5:26:cb:97:fa:f5:
                    f3:07:d1:f6:da:24:c3:9a:65:a4:98:02:7b:2e:bb:
                    83:c6:34:69:f4:8c:50:3c:98:83:ee:22:de:96:84:
                    17:6d:4c:d0:9f:44:80:6b:09:69:96:e2:9b:33:09:
                    12:38:36:18:42:71:a8:83:e8:e9:dc:d6:b0:4a:91:
                    1e:cd:9d:04:e3:62:d6:74:e3:07:fe:dc:d7:0c:1f:
                    4e:14:ec:5f:34:ed:2b:4f:69:41:a3:9b:62:50:15:
                    63:8a:e1:f5:8b:12:24:5c:57:4b:53:54:05:21:da:
                    d1:2f:1c:70:d6:89:76:b9:53:cd:11:bb:6b:6b:b3:
                    96:20:9a:f9:2a:00:6b:b6:2b:25:e2:d5:79:a7:fd:
                    a3:0f:72:3e:dc:c9:2b:04:1c:8d:8a:0f:f2:d3:4b:
                    ea:d8:af:7e:97:e9:f3:3f:36:26:14:3d:34:0f:2b:
                    bd:a5:ce:a8:f8:2f:a6:5b:2f:f1:bb:d6:51:bc:b4:
                    6b:99:1f:f9:92:f5:fa:61:72:9f:d6:0b:f7:14:89:
                    a9:43:f9:80:3a:af:a0:0e:0d:0e:5e:7f:c0:bf:1a:
                    91:6a:bc:50:d6:75:88:c4:ce:fe:5b:8a:00:0f:ab:
                    13:1f:13:db:cb:ec:65:56:89:8a:4b:ad:aa:8d:e7:
                    90:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FF:5C:08:16:EB:FB:3B:CF:5F:28:CF:64:AB:B1:9D:09:F4:76:C6
            X509v3 Authority Key Identifier:
                keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/73E1CE72FCA411EE88B23A71C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:8f:29:8f:97:31:ed:3a:c5:6d:bf:dd:ca:ce:44:07:68:21:
         16:58:da:7c:87:74:a8:0f:22:0d:be:c7:b0:9d:51:c3:4e:45:
         1b:e0:12:07:89:55:60:9a:f4:d9:2c:2c:5d:70:81:b5:d9:51:
         89:59:60:09:96:bf:08:53:71:be:4b:5f:d0:a3:5a:96:16:85:
         9c:78:cb:f9:6e:ee:4f:50:9a:e3:1e:50:83:33:27:7f:18:26:
         40:a1:d2:8d:b6:0f:4c:5b:a4:ee:7b:c3:28:00:ce:0d:28:f2:
         08:83:97:15:46:bd:be:65:95:46:5d:c1:da:51:2e:5a:22:8a:
         98:e1:2e:ed:b2:1f:5a:c0:6b:d3:21:a3:97:ed:ed:cf:ef:64:
         74:af:a4:d3:93:46:76:89:66:71:8f:88:01:d3:ca:34:ec:1a:
         38:53:17:c0:43:8e:c2:07:f5:96:09:6c:28:b5:76:5a:71:e5:
         86:79:96:34:e0:0f:c4:ed:bc:3a:8a:35:19:00:9c:2b:4d:b2:
         5a:5e:26:29:c4:d8:80:3f:a0:da:13:38:bf:2c:d6:a6:60:03:
         ab:76:84:3d:ee:73:02:c9:e2:a4:f2:e0:1c:fb:b3:29:aa:8c:
         78:e7:20:38:3b:06:cb:bb:40:f3:7b:01:18:63:50:60:7a:3a:
         f3:d0:af:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:11:58 2024 by rpki-client on console-fra.rpki-client.org