Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/3C9FF554699A11ED98B1CA19C4F9AE02.roa
File:                     3C9FF554699A11ED98B1CA19C4F9AE02.roa (raw, json)
Hash identifier:          BAGpvHqv4mqk/4UMdWdyuzergLrde3LFf+uyo/FYd+0=
Subject key identifier:   52:30:7A:3D:D5:02:41:9B:75:A3:E4:43:E1:FC:B7:4A:3D:63:D1:50
Certificate issuer:       /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Certificate serial:       11FE
Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/3C9FF554699A11ED98B1CA19C4F9AE02.roa
Signing time:             Fri 28 Jul 2023 17:34:47 +0000
ROA not before:           Fri 28 Jul 2023 17:34:47 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     136030
IP address blocks:        103.120.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
                          rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4606 (0x11fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
        Validity
            Not Before: Jul 28 17:34:47 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64c3fc37-7e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:45:25:03:b7:03:f3:02:94:64:3d:f7:5d:4f:
                    26:71:c5:d5:e0:f2:df:a4:03:a8:f0:92:3d:3a:3f:
                    e5:05:44:75:4c:ed:a8:5b:bf:15:a7:76:d4:24:8c:
                    e2:99:fc:dc:91:cb:5f:5d:19:e0:80:80:17:bb:d7:
                    66:d5:2c:18:4d:e8:b9:49:05:df:79:f6:19:cc:24:
                    67:34:22:ef:e7:28:af:00:17:45:d2:63:f1:3f:ce:
                    6e:f3:63:5d:e3:4a:e2:0c:65:12:7c:a9:4b:00:b1:
                    cf:d7:c0:65:9b:fd:e1:c0:0c:55:24:a9:dd:66:e3:
                    e1:65:6e:bf:08:d9:91:29:38:0f:6e:e7:da:7a:9d:
                    48:1e:ed:84:d0:8a:d6:2a:7e:05:3a:36:31:2d:04:
                    25:77:86:f1:b2:a3:00:18:49:64:3d:2e:aa:cb:48:
                    08:7e:a3:56:97:14:6e:18:cc:ae:d8:dc:ef:b6:62:
                    29:b9:a1:06:6d:cb:a1:e7:a3:8b:12:ff:ff:d0:36:
                    12:f0:7b:78:2c:e3:e6:7f:70:a7:54:75:cf:28:3f:
                    d1:53:e4:45:b6:b9:73:ab:8b:a3:8a:86:73:7f:63:
                    f3:b0:6b:94:73:8b:26:f6:f8:70:2a:85:df:b6:9a:
                    45:d5:64:e1:a7:5e:e1:2c:d8:5f:4a:40:e2:89:4a:
                    a4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:30:7A:3D:D5:02:41:9B:75:A3:E4:43:E1:FC:B7:4A:3D:63:D1:50
            X509v3 Authority Key Identifier:
                keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/3C9FF554699A11ED98B1CA19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:30:3b:07:a7:55:db:f9:e0:01:27:ea:1a:ef:b2:4a:bc:7c:
         af:15:66:8e:e1:af:f0:64:38:81:75:e2:4d:af:6e:66:2b:5a:
         96:8d:e4:72:95:c9:dd:55:a3:8b:33:41:8d:36:0f:86:c0:ea:
         0c:19:15:c1:16:92:dc:af:6b:25:f3:c7:29:9e:26:52:79:6c:
         c2:58:57:23:72:2d:06:40:2e:a3:c0:27:f3:b4:7c:95:5b:41:
         ec:0e:29:c0:79:8b:5c:34:85:99:c5:a0:6a:74:6a:d6:8a:a1:
         27:75:9a:a0:39:da:d2:0f:ca:5e:22:f4:68:3b:79:61:7f:3b:
         ad:33:f9:0f:96:44:66:6c:d4:a6:10:d6:1d:3e:58:1c:b0:27:
         da:10:89:52:bd:22:e8:59:ea:13:de:0f:86:55:ea:80:bd:e2:
         17:8d:3b:a4:d3:9b:28:d1:50:83:4f:f6:23:61:47:b4:14:e6:
         7b:2c:81:10:49:12:5a:b4:db:2f:cc:9f:d1:ef:98:ba:16:63:
         a3:78:04:96:ea:3d:b6:a6:9c:55:44:ff:82:94:41:d4:08:0d:
         2d:b0:14:cf:47:94:a5:0f:98:d2:25:30:e3:bd:5e:9b:ac:26:
         f3:ad:b5:a4:d3:c2:42:da:6f:a8:27:9c:3e:0f:5d:99:26:ea:
         36:e5:f1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 18:21:37 2024 by rpki-client on console-ams.rpki-client.org