Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/314597D64EEF11EF8BACFA30C4F9AE02.roa
File:                     314597D64EEF11EF8BACFA30C4F9AE02.roa (raw, json)
Hash identifier:          NfFMnt+VEyqSWVwOi+J918td9eREww3K9CdjnLDT82w=
Subject key identifier:   F1:E5:EE:BB:D1:B3:AD:5E:82:B0:08:C8:A1:4E:88:93:03:9D:60:06
Certificate issuer:       /CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418
Certificate serial:       24
Authority key identifier: 66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/314597D64EEF11EF8BACFA30C4F9AE02.roa
Signing time:             Tue 01 Oct 2024 06:50:51 +0000
ROA not before:           Tue 01 Oct 2024 06:50:50 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     141016
IP address blocks:        103.154.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl
                          rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418
        Validity
            Not Before: Oct  1 06:50:50 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66fb9bca-7101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:60:ef:22:9f:17:85:28:22:e1:e7:1a:2a:fb:
                    7e:67:73:20:25:7d:01:7d:bd:04:2f:d8:d9:08:7d:
                    09:2e:75:03:cf:f3:9c:56:48:18:57:58:48:15:4a:
                    1e:d1:3a:f7:5e:19:e9:b5:3f:fa:d6:24:54:9f:31:
                    aa:73:85:ff:62:83:c9:12:cb:55:90:d4:68:00:98:
                    8c:13:bf:a3:9e:c6:b1:6a:0f:13:c7:82:6e:03:1c:
                    ff:b3:b2:76:7d:95:f5:3f:95:d2:cf:3a:6d:12:28:
                    5b:c3:93:05:df:01:77:31:9a:8b:6b:20:ee:56:0b:
                    92:c8:be:4d:bf:a7:6a:32:e0:93:37:7c:d2:7f:e4:
                    a1:1e:23:ce:82:12:42:71:80:fe:67:44:b0:28:48:
                    ef:75:4f:5e:10:aa:85:e7:df:0c:55:6c:8b:dd:87:
                    13:39:44:87:5f:81:3d:45:67:19:fa:22:b6:19:02:
                    08:de:f5:50:98:c0:75:72:29:2a:25:aa:24:07:f8:
                    89:7d:1d:f0:c3:7e:92:99:0c:34:8c:46:46:9e:54:
                    60:64:6f:32:89:1b:15:30:b3:49:68:94:16:38:af:
                    70:d4:92:24:84:c2:88:79:5b:9e:b8:1f:1c:5d:29:
                    ef:81:3b:e2:73:10:70:35:89:12:cd:70:92:bc:c6:
                    f5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E5:EE:BB:D1:B3:AD:5E:82:B0:08:C8:A1:4E:88:93:03:9D:60:06
            X509v3 Authority Key Identifier:
                keyid:66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/314597D64EEF11EF8BACFA30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:92:56:6c:b8:15:75:8c:fe:cc:27:d3:52:85:5f:74:e1:c1:
         fd:f9:a3:27:42:16:49:4d:24:02:a0:bb:3f:36:86:4f:09:57:
         ee:56:6f:34:00:65:63:5e:ad:0f:27:05:ba:6d:13:2b:5d:1e:
         36:0e:c6:a0:77:fd:4d:12:84:2b:6a:d2:e0:e0:d3:c9:97:90:
         26:b8:8a:d1:da:fa:0d:a8:4d:89:44:d8:81:1e:1e:5e:6c:32:
         de:d6:9b:58:7a:ad:0c:62:c4:a8:ec:cd:5a:40:fa:e4:43:d0:
         6a:a7:66:40:55:46:a2:88:b8:ce:ad:18:d9:7c:4c:ed:90:0c:
         3b:cd:33:fa:eb:8d:d2:13:d9:c2:3d:ed:c8:1e:d5:6f:c1:86:
         af:46:4c:e3:33:12:1d:2a:5b:d9:a9:e7:93:3a:7b:17:f1:53:
         bc:1f:8f:17:7b:fe:34:f8:f7:54:86:3a:3a:1b:70:a9:e7:6f:
         fd:4f:49:93:b3:f5:93:6c:f7:0c:ba:23:e2:08:3a:c9:16:56:
         c9:72:11:d3:47:09:b4:1c:9f:93:e0:67:35:85:cc:14:9b:9c:
         80:78:4e:9b:e8:05:ff:af:44:4d:a1:cf:4f:f8:50:0f:b5:09:
         d2:91:d0:38:f9:e8:34:ac:b0:44:48:ec:9c:a4:b5:ac:83:79:
         72:a1:82:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:10 2024 by rpki-client on console-ams.rpki-client.org