Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/ACFA076483A611EE9C62DE0CC4F9AE02.roa
File:                     ACFA076483A611EE9C62DE0CC4F9AE02.roa (raw, json)
Hash identifier:          W7paYsvVojxFFb75gMOnX6f6hb2aZgcIMEhFjPe0SMY=
Subject key identifier:   10:91:2F:55:5D:0F:47:99:7D:87:AA:B0:E2:14:2F:D0:7A:11:47:09
Certificate issuer:       /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Certificate serial:       0987
Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/ACFA076483A611EE9C62DE0CC4F9AE02.roa
Signing time:             Fri 26 Jan 2024 20:58:43 +0000
ROA not before:           Fri 26 Jan 2024 20:58:43 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     138492
IP address blocks:        103.127.0.0/24 maxlen: 24
                          103.127.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
                          rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2439 (0x987)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
        Validity
            Not Before: Jan 26 20:58:43 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65b41d03-63af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:46:f9:49:82:3c:1c:c1:64:8e:58:c2:68:10:
                    fe:0c:b4:0f:39:74:82:9a:b5:dd:6c:5d:d2:95:a6:
                    32:90:cb:fe:12:d8:36:4f:ce:5b:00:bb:99:25:03:
                    de:90:b3:d3:0d:a8:b9:78:26:f2:a6:12:9b:1d:c2:
                    3c:ed:29:95:cb:90:1a:1e:51:31:73:55:a6:10:68:
                    67:91:86:60:3c:8b:7c:4a:55:77:0d:30:00:6f:0f:
                    26:fa:be:7f:b1:fd:05:ff:d5:51:6c:d4:a8:03:c8:
                    cf:8a:85:54:3b:48:a2:f2:89:6d:87:d5:f2:cb:2a:
                    99:ab:bd:27:bc:5d:17:be:88:b9:c1:93:0e:73:db:
                    b7:c5:27:d1:e8:95:24:e0:fd:d6:0d:f4:76:d9:22:
                    bd:e0:4f:9f:0e:74:7f:a2:cf:cf:93:66:6c:d7:fb:
                    0e:81:94:e3:a9:f4:f6:b8:02:85:90:e2:a6:56:b9:
                    ec:d5:d9:9d:cc:74:94:ec:e0:52:8a:b6:40:b9:08:
                    85:d0:f8:3d:c2:e4:29:ea:16:1a:f3:04:6c:8e:ba:
                    25:4b:6d:a5:a3:15:dd:b0:05:ca:51:56:27:dc:73:
                    7a:40:66:39:2a:50:26:f3:b6:2b:61:31:5c:b1:cb:
                    bc:fb:f0:46:c3:73:b3:28:4e:05:0d:bf:34:64:c5:
                    73:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:91:2F:55:5D:0F:47:99:7D:87:AA:B0:E2:14:2F:D0:7A:11:47:09
            X509v3 Authority Key Identifier:
                keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/ACFA076483A611EE9C62DE0CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:fe:a6:40:8e:18:ea:da:e4:28:65:e0:09:fc:31:94:12:b8:
         d7:08:a6:aa:8b:e4:02:30:5f:e1:b1:db:a7:22:2b:f0:f2:20:
         f0:a7:68:60:6c:f5:54:d1:9a:a5:d5:70:e0:c8:9d:cc:49:79:
         81:4a:e0:2d:0d:45:07:d5:f1:89:91:0e:fb:fe:9c:fb:90:8d:
         ac:29:b1:04:93:fd:77:de:e8:84:cd:47:18:83:a3:9c:c0:8e:
         e1:b2:7d:f7:13:d7:7d:33:c7:d7:fd:fd:44:c1:bc:24:e2:01:
         3c:70:87:20:b2:f8:cb:d9:c8:65:8d:d9:43:ce:8b:32:f8:b7:
         2f:b7:da:dd:9d:23:01:09:6b:84:0d:a9:52:f4:d5:05:5e:ba:
         c4:75:a9:60:08:d2:d1:e8:b3:46:63:1a:d0:4c:d5:d8:be:98:
         c6:8a:d3:88:47:fb:4e:1f:c9:28:7e:9c:ee:85:45:77:de:71:
         cc:07:cd:9b:b3:d8:90:9f:54:c5:9d:66:85:a0:97:95:92:a8:
         f9:37:69:03:59:02:69:ce:f6:b4:d2:3f:df:8a:e5:e4:48:b9:
         86:41:19:19:84:c1:99:62:86:6e:30:21:ef:9b:c4:29:ff:1a:
         8a:a5:da:03:33:b3:c7:17:28:ed:ff:32:06:13:5e:9c:dc:86:
         cd:f2:11:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:29 2024 by rpki-client on console-fra.rpki-client.org