Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/DC0002F687B511EB91F5691BC4F9AE02.roa
File:                     DC0002F687B511EB91F5691BC4F9AE02.roa (raw, json)
Hash identifier:          Dm24k5oSXxU308cuhimaoVSKUy3VoBNJ3O4FrVg4PHw=
Subject key identifier:   A1:7B:FD:C9:92:65:E6:59:AB:38:A3:61:FA:64:90:AD:B2:63:63:9E
Certificate issuer:       /CN=A9178297/serialNumber=9E1BA232737A3D00D7FAA0B4DC3834D9AAF06DF8
Certificate serial:       05A1
Authority key identifier: 9E:1B:A2:32:73:7A:3D:00:D7:FA:A0:B4:DC:38:34:D9:AA:F0:6D:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/DC0002F687B511EB91F5691BC4F9AE02.roa
Signing time:             Wed 29 May 2024 01:06:10 +0000
ROA not before:           Wed 29 May 2024 01:06:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     139904
IP address blocks:        103.164.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.crl
                          rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1441 (0x5a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178297/serialNumber=9E1BA232737A3D00D7FAA0B4DC3834D9AAF06DF8
        Validity
            Not Before: May 29 01:06:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66567f82-c438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:76:23:e4:6a:97:a6:16:b5:8b:57:59:cf:
                    0b:07:31:a0:38:32:20:5a:73:87:22:42:38:1d:55:
                    55:e0:c8:4c:df:92:87:de:1f:b1:8d:bd:46:26:35:
                    b4:42:1a:48:03:43:34:74:c2:49:06:ef:b4:80:0c:
                    3f:0a:c5:fe:5f:49:aa:7f:15:00:a8:83:e3:60:3f:
                    bb:51:d7:ef:15:2a:77:b9:fb:44:c3:08:ec:c8:06:
                    6d:68:a1:3b:44:33:0e:c6:f9:fd:c6:30:00:9b:e6:
                    78:d0:f6:e9:03:60:78:c3:d2:c4:4b:13:4a:6a:bc:
                    1e:da:5c:fd:f5:8d:77:f9:71:1b:6d:dc:88:dd:76:
                    f6:68:a3:c1:3c:c4:f3:cc:08:be:f0:34:1b:73:37:
                    7f:78:80:21:1c:29:6b:4b:6a:0e:8e:f5:7a:62:29:
                    ae:2d:78:41:15:d4:c5:df:ed:b8:4c:12:58:9f:e0:
                    de:ab:4e:84:82:4b:29:2b:1c:98:81:f1:b1:0d:db:
                    0c:02:89:40:08:b8:74:64:e3:7b:61:f6:6a:63:d2:
                    00:48:b2:b0:b9:9a:92:3c:0f:9c:7d:fd:f1:a2:30:
                    73:c6:01:10:43:49:4f:2b:94:d5:43:ac:64:69:fe:
                    58:85:45:c9:c2:e7:4d:5e:5d:cf:a4:42:d1:d5:36:
                    ab:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7B:FD:C9:92:65:E6:59:AB:38:A3:61:FA:64:90:AD:B2:63:63:9E
            X509v3 Authority Key Identifier:
                keyid:9E:1B:A2:32:73:7A:3D:00:D7:FA:A0:B4:DC:38:34:D9:AA:F0:6D:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/DC0002F687B511EB91F5691BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:e2:2c:3f:c2:8f:39:93:4b:b7:f1:5f:ff:c9:d6:b6:70:c6:
         c8:4d:f6:88:ca:f1:a3:83:29:e0:86:84:e7:59:19:e4:af:78:
         ba:c5:fb:c4:66:82:57:0d:db:4a:c7:a3:cc:93:fb:cd:3b:0a:
         ba:f2:2c:f2:50:ab:c2:81:9e:51:69:08:40:2d:85:cc:04:49:
         fa:86:78:8c:0a:98:0a:77:37:f4:af:5f:78:fe:ad:b9:03:1d:
         41:90:cd:06:2f:f6:00:72:83:a3:d5:c7:20:65:97:5f:3b:f7:
         4d:3e:aa:32:d5:c3:b6:a1:d7:1f:30:b6:4f:75:82:f3:5e:ea:
         3b:54:df:1b:48:c1:10:f2:f7:c5:4c:f2:0a:5c:9a:5d:21:d9:
         84:c5:99:65:e7:b2:8a:da:cc:3a:e7:f3:e6:11:9a:3b:1f:e3:
         22:97:78:45:1b:cd:9b:64:8e:98:46:71:b8:5e:87:3c:f6:85:
         78:e1:c8:b6:3d:0e:32:9c:e4:94:72:5d:cf:69:f9:52:92:98:
         5d:c5:2a:99:d3:7b:e1:08:70:83:bb:ac:f6:ac:ee:47:94:8d:
         0c:eb:d7:94:86:ef:ca:48:4c:cb:29:ef:f1:7a:59:cf:fb:ec:
         de:1f:4b:92:e7:4e:e0:58:0a:67:98:c3:75:e0:54:b0:89:cf:
         6d:ff:36:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:43 2024 by rpki-client on console-ams.rpki-client.org