Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/A62A1B786E6911EF85E53E66C4F9AE02.roa
File:                     A62A1B786E6911EF85E53E66C4F9AE02.roa (raw, json)
Hash identifier:          L3HTbFeRfnXd8aker4hjWUQjIJnyuV60oQDdUGiSBi8=
Subject key identifier:   E9:A6:2B:7F:F8:3E:CD:63:16:BF:99:36:02:42:CF:B5:96:07:78:D2
Certificate issuer:       /CN=A9173F03/serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A
Certificate serial:       0B9C
Authority key identifier: C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/A62A1B786E6911EF85E53E66C4F9AE02.roa
Signing time:             Mon 09 Sep 2024 05:09:11 +0000
ROA not before:           Mon 09 Sep 2024 05:09:11 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     134480
IP address blocks:        103.135.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl
                          rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2972 (0xb9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173F03/serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A
        Validity
            Not Before: Sep  9 05:09:11 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66de82f7-6149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ff:99:74:8e:e6:37:d8:77:6a:0b:d5:de:3b:
                    0d:e3:2c:23:8d:b4:9b:6e:33:68:31:06:2a:cc:87:
                    b7:83:e0:8c:46:fd:7c:ec:42:a0:c8:39:f3:c9:52:
                    d5:61:5a:a9:ee:30:f0:9e:46:1f:e5:4a:9e:c6:91:
                    6e:27:c0:95:96:d6:be:19:b1:87:ea:1b:a4:6d:6f:
                    44:c6:f6:13:15:0c:95:05:92:d3:3e:d8:bf:dd:6f:
                    91:bc:87:0b:f3:87:50:6a:90:b1:c4:a6:ad:9d:ca:
                    ec:79:5c:4c:e0:f3:ce:aa:69:8c:66:a7:31:6d:c7:
                    f9:d3:7d:63:15:07:8d:3b:bb:19:54:fe:9f:f9:3f:
                    f4:8d:ff:ac:94:14:57:fc:ed:8a:d3:9a:99:97:f4:
                    95:fd:ad:9f:a4:42:2a:52:3f:9d:8e:6b:41:c4:a0:
                    2d:c3:02:16:05:63:6a:0f:49:9b:58:48:e6:f4:8c:
                    8a:3c:39:48:42:b4:8d:aa:0c:c1:03:1a:37:5f:21:
                    4d:18:d5:a1:91:53:7b:38:ef:1a:93:64:05:f5:63:
                    9d:eb:d0:eb:e3:1f:e7:74:37:aa:85:d0:d5:00:43:
                    af:a2:86:7b:22:b0:53:84:fc:81:a1:af:f6:f1:00:
                    68:46:50:d5:b2:bb:cb:61:51:09:ae:23:6c:55:f8:
                    48:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A6:2B:7F:F8:3E:CD:63:16:BF:99:36:02:42:CF:B5:96:07:78:D2
            X509v3 Authority Key Identifier:
                keyid:C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/A62A1B786E6911EF85E53E66C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:ea:cf:1e:f9:d5:13:66:2e:8f:4a:81:9e:97:63:74:3b:88:
         e6:0d:f0:37:fe:35:99:a7:30:71:07:2d:5b:cc:82:ab:7c:05:
         fc:b3:8f:68:27:86:de:91:1f:87:d2:60:9c:4b:e0:12:3e:82:
         bd:b6:db:42:08:a0:05:5b:3d:a2:88:08:18:02:c3:30:ce:c1:
         2a:97:8b:36:43:e6:eb:4f:44:a1:70:43:ab:50:95:6c:36:aa:
         24:36:0a:51:0c:f0:3f:05:f9:45:fc:a7:a8:df:e7:5d:6d:06:
         c0:9a:2c:a8:91:a4:de:63:53:64:ee:5b:d8:74:74:60:b6:a0:
         f6:13:9e:0b:d0:00:75:f7:36:5f:56:ba:d6:c4:ee:6f:ca:63:
         47:f2:26:a8:89:24:9f:39:d5:21:99:95:3d:34:89:fe:8b:ac:
         da:a1:f0:b3:06:85:0b:e4:3f:34:2a:6c:ec:61:3e:72:55:70:
         82:e0:e7:af:78:18:a5:04:76:88:76:5a:87:1b:83:6f:ee:4d:
         49:7b:f2:d4:55:a7:72:a4:21:5b:bd:9d:46:e5:a4:59:f9:e7:
         dc:f3:14:eb:e0:15:31:91:30:53:05:5b:f9:11:8a:de:27:b5:
         d9:e9:e8:ea:1a:97:60:73:8b:38:8a:b7:44:14:1c:84:55:08:
         e5:36:f6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:05 2024 by rpki-client on console-ams.rpki-client.org