Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/9816AE202ED111EF9B668069C4F9AE02.roa
File:                     9816AE202ED111EF9B668069C4F9AE02.roa (raw, json)
Hash identifier:          TJla+6OU4JtW1zEWex9/TydUYGGDR5CR5xflmjoiF3Q=
Subject key identifier:   FE:CC:7E:A5:F7:0B:0B:25:6E:C6:FC:3E:88:17:19:B1:24:07:C9:03
Certificate issuer:       /CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
Certificate serial:       0124
Authority key identifier: 0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/9816AE202ED111EF9B668069C4F9AE02.roa
Signing time:             Tue 01 Oct 2024 04:17:41 +0000
ROA not before:           Tue 01 Oct 2024 04:17:41 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     207083
IP address blocks:        103.219.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl
                          rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 02:47:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
        Validity
            Not Before: Oct  1 04:17:41 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=66fb77e5-ddf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ca:42:36:c8:4f:c7:7f:74:e8:60:57:4d:b3:
                    54:23:3e:ae:a6:34:bd:7f:da:86:d8:7d:f5:77:29:
                    9c:ea:9b:ab:25:7b:28:2f:3e:aa:b6:18:e9:c8:2f:
                    10:a9:0e:c8:1f:48:8a:85:de:75:64:08:e1:d9:a2:
                    42:b7:54:da:9d:d9:1e:ba:cc:97:78:e1:71:50:38:
                    a4:7f:a7:fa:68:98:27:57:75:6d:57:12:be:83:83:
                    6f:73:2e:14:c7:92:4b:85:2a:92:cf:60:36:3c:d2:
                    00:f6:55:69:9d:a1:10:8a:c9:08:22:bc:c1:d7:bf:
                    cb:73:66:4b:98:ce:07:71:3e:cd:cb:5c:45:97:7f:
                    01:35:27:89:be:d5:c8:1e:f6:f7:10:a0:98:03:98:
                    82:1c:3a:fe:d7:a2:f0:37:b7:ca:78:fd:bf:3c:5c:
                    4b:0f:42:de:30:28:c3:4a:42:6c:76:12:8a:29:d8:
                    30:cd:d9:6c:75:65:68:d8:07:c1:dd:c0:30:e0:bc:
                    5a:7e:3d:3e:de:73:a9:44:c6:51:be:b3:a3:6b:5d:
                    83:59:7f:41:24:86:cf:10:9d:d8:7e:6b:05:bd:ff:
                    e7:11:2b:52:5e:52:92:a1:d2:e6:f1:19:c9:b0:e8:
                    94:97:f3:c5:55:15:3a:9c:12:0d:d7:6c:ba:2d:18:
                    3d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CC:7E:A5:F7:0B:0B:25:6E:C6:FC:3E:88:17:19:B1:24:07:C9:03
            X509v3 Authority Key Identifier:
                keyid:0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/9816AE202ED111EF9B668069C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:e0:39:4f:a5:44:1b:74:8e:e5:5e:32:75:c1:de:88:e9:11:
         12:fe:c6:45:d2:22:f5:7d:03:e7:98:40:be:15:38:73:80:e1:
         42:46:ad:f4:14:61:3b:cc:61:1a:12:5c:ff:4b:ab:8c:c9:17:
         3b:a9:ae:ed:3b:87:30:c7:b8:f5:98:d7:db:e5:39:2f:6c:42:
         1b:12:cc:90:e9:f4:59:68:31:24:87:1f:e9:60:c8:6b:3d:0e:
         4b:e4:6d:76:0a:fe:fa:71:63:08:c4:74:44:46:5d:cc:ad:e5:
         36:dd:07:9d:60:2b:36:bd:26:21:2b:9f:cc:a9:ec:c2:24:62:
         23:60:4a:a9:26:f5:a0:35:f3:a9:f2:71:f3:33:f0:9c:21:59:
         d8:d6:c7:0f:29:bf:f4:6c:1c:8e:a6:09:26:bb:41:0f:dc:d8:
         9e:a0:10:d1:ce:93:e9:43:24:13:cb:4f:65:a4:8c:45:a7:85:
         73:e7:86:6a:d7:f6:50:01:f1:02:40:6c:6d:48:b7:1a:ab:13:
         2c:f2:68:47:40:1f:5f:01:54:c7:68:47:fd:4d:53:1f:6b:6c:
         ed:dd:ed:59:fe:a5:d7:60:ab:f1:cc:de:f3:7e:9e:01:f1:96:
         d4:45:09:f1:78:c7:1f:5b:e0:7c:70:b8:68:30:1f:9a:db:82:
         2a:5a:7c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:54:33 2024 by rpki-client on console-fra.rpki-client.org