Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/0CDA881EAF0311EB96FC344BC4F9AE02.roa
File:                     0CDA881EAF0311EB96FC344BC4F9AE02.roa (raw, json)
Hash identifier:          y01Dpux3/iKwZXDRv92g3i91QNG9oOahiRukT+wPDl0=
Subject key identifier:   1B:9D:3B:E6:4A:BF:BC:C9:E8:12:1B:DB:85:16:8C:8A:9D:8E:86:00
Certificate issuer:       /CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22
Certificate serial:       056D
Authority key identifier: 3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/0CDA881EAF0311EB96FC344BC4F9AE02.roa
Signing time:             Sun 21 Jul 2024 00:12:33 +0000
ROA not before:           Sun 21 Jul 2024 00:12:33 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     137969
IP address blocks:        103.119.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl
                          rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 22:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1389 (0x56d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22
        Validity
            Not Before: Jul 21 00:12:33 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=669c5271-f397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3b:04:da:38:bb:1a:46:94:14:ae:40:97:96:
                    24:92:61:3a:92:3c:c6:a0:10:19:2e:07:bf:c1:88:
                    4d:46:06:44:56:cf:de:2f:43:38:71:80:ef:df:b2:
                    98:7c:ca:57:27:27:b7:67:bf:0b:ad:13:44:96:ee:
                    a5:66:05:45:c1:a0:1c:2c:16:ce:64:1e:ac:ff:dc:
                    13:64:db:4f:69:a5:5c:6e:0d:4e:0a:90:4e:36:22:
                    76:e6:85:c6:9c:0c:2b:95:48:8e:03:12:47:14:db:
                    f0:90:64:47:98:f9:ba:0b:e5:7b:16:c1:d1:91:b8:
                    fa:f2:40:b4:ce:74:33:3e:25:04:a8:13:a2:dc:30:
                    f1:1f:19:78:53:b1:7d:9a:48:f0:21:c6:ff:ff:51:
                    58:e6:5b:1f:27:73:7f:8a:9a:a6:db:8d:dd:04:28:
                    13:fa:55:0e:a6:57:af:e2:14:a2:9f:22:e4:1d:c2:
                    ae:ae:ec:e2:a1:3a:a6:2a:39:60:67:f2:b3:0f:35:
                    51:92:c3:a8:71:96:ab:3d:8d:b9:00:fb:e2:a0:8a:
                    aa:5d:d7:2a:11:af:35:ff:eb:58:04:c4:60:04:76:
                    51:05:6d:55:75:df:f9:bd:80:69:ad:17:d5:6d:c3:
                    1b:e5:cb:b2:e3:5a:04:56:39:64:ad:74:f8:38:8e:
                    25:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9D:3B:E6:4A:BF:BC:C9:E8:12:1B:DB:85:16:8C:8A:9D:8E:86:00
            X509v3 Authority Key Identifier:
                keyid:3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/0CDA881EAF0311EB96FC344BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:b8:e0:c0:fd:0f:e7:88:4a:ed:da:44:f3:2c:67:50:90:f3:
         61:82:b2:d0:dd:9a:fe:a5:65:79:b3:bf:76:6b:a8:5f:7f:3a:
         c5:4e:a7:dd:05:d6:23:71:66:da:f1:c8:46:ee:ae:85:aa:25:
         bc:68:76:96:6f:e1:59:1f:20:21:56:b9:e5:99:69:9f:38:05:
         c8:39:b5:bf:6c:06:77:a5:8e:2e:8d:cd:1f:14:df:c3:0c:99:
         aa:50:d7:d2:44:37:bd:d7:5e:aa:ad:96:3c:d9:23:e1:5e:fd:
         c2:db:a2:57:8b:ab:1d:d7:2f:7a:30:3c:3c:94:f6:bf:53:3c:
         b6:f5:7d:d9:47:5c:b1:e1:64:9d:ce:3d:d7:70:01:93:55:dd:
         96:6f:a5:10:2f:05:ad:c2:c8:91:5d:e6:da:73:83:37:2b:e3:
         7f:98:35:71:11:c1:a3:1a:42:47:d9:75:b0:20:67:d3:10:09:
         b9:c1:77:88:a9:4c:a3:4c:00:f0:92:46:61:9e:e7:5e:f1:55:
         33:a9:06:94:d8:45:a5:a3:dd:62:3e:85:e8:49:ca:51:5e:8c:
         48:64:21:e3:8e:21:17:93:9f:3f:62:b8:a3:82:ab:c5:5a:96:
         14:ae:70:e4:ff:ae:0a:37:26:8b:48:36:71:40:f4:1a:73:00:
         c9:c2:9f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:01:29 2024 by rpki-client on console-ams.rpki-client.org