Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/5EFDF18AC6A111EA988EB242C4F9AE02.roa
File:                     5EFDF18AC6A111EA988EB242C4F9AE02.roa (raw, json)
Hash identifier:          6DkFP3nYBr+2SEGoQVsTj3Uh0N/hGIVIrOQGZ8hgWRk=
Subject key identifier:   31:C3:09:B0:28:F2:2A:3A:7E:37:55:E7:F5:91:49:4A:36:50:A9:B0
Certificate issuer:       /CN=A9182DEA/serialNumber=CDA99E7BD33F8EC771FD139CD6B3700C9C98F230
Certificate serial:       0768
Authority key identifier: CD:A9:9E:7B:D3:3F:8E:C7:71:FD:13:9C:D6:B3:70:0C:9C:98:F2:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/5EFDF18AC6A111EA988EB242C4F9AE02.roa
Signing time:             Mon 22 Jan 2024 21:59:57 +0000
ROA not before:           Mon 22 Jan 2024 21:59:57 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     51747
IP address blocks:        103.146.80.0/24 maxlen: 24
                          103.146.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.crl
                          rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1896 (0x768)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182DEA/serialNumber=CDA99E7BD33F8EC771FD139CD6B3700C9C98F230
        Validity
            Not Before: Jan 22 21:59:57 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65aee55c-9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1e:5d:53:55:e1:5d:5a:3c:a3:fb:88:2c:1a:
                    d5:42:78:e2:71:ac:4e:4f:95:a3:d2:92:ac:00:1b:
                    77:8a:8a:d5:bf:5b:39:81:a2:f7:ce:cd:7a:77:54:
                    dd:1c:dc:d5:fa:2a:c6:ff:32:1a:41:c8:0d:56:9e:
                    2c:91:15:4b:4d:d2:e7:e3:9a:d3:92:b2:26:6e:7c:
                    3f:8e:1b:57:11:bd:3f:d3:d3:cc:52:72:0b:54:14:
                    8c:64:04:c9:e0:29:c1:f3:3b:4a:44:ca:a9:16:80:
                    d0:23:02:aa:29:d2:49:7f:4c:dd:05:4c:92:d2:54:
                    e1:19:39:52:a6:5a:34:47:03:73:df:c0:54:cb:3b:
                    4c:80:09:9f:44:ed:88:5e:cc:bc:12:d7:ab:4f:70:
                    91:73:8b:33:62:29:cc:c2:26:fd:de:2f:0c:ce:05:
                    28:96:f2:8d:89:99:98:11:f7:74:c0:8a:eb:d7:c8:
                    44:8b:98:80:ac:d4:13:41:ae:44:55:b3:8c:97:57:
                    2b:7b:25:76:85:c7:5a:ed:38:6e:40:ea:50:ea:35:
                    63:e6:1b:8d:64:52:6b:69:fa:d9:40:fa:1d:d0:89:
                    42:b2:70:43:11:b6:c2:94:01:89:df:c5:c3:66:a1:
                    3d:37:62:09:ad:13:47:bb:31:e9:dd:f1:88:5b:e6:
                    45:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C3:09:B0:28:F2:2A:3A:7E:37:55:E7:F5:91:49:4A:36:50:A9:B0
            X509v3 Authority Key Identifier:
                keyid:CD:A9:9E:7B:D3:3F:8E:C7:71:FD:13:9C:D6:B3:70:0C:9C:98:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/5EFDF18AC6A111EA988EB242C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:6a:b2:e3:00:d3:17:4a:1d:63:41:07:97:49:10:83:e1:e7:
         9d:2b:e5:80:4a:5b:ef:c0:12:21:86:93:ec:37:c7:8a:e2:a7:
         a9:26:76:f0:4d:52:ce:ac:43:a2:e9:63:f9:19:2c:a5:c5:92:
         33:5e:2c:db:1c:45:85:7b:21:f3:ca:78:1e:f8:fb:8a:ca:55:
         ba:4d:c1:38:22:a2:b4:a7:88:8f:6b:5f:cc:1d:2a:69:c6:cb:
         9f:90:6d:86:39:12:d1:dc:77:11:ba:79:83:d1:7d:17:df:2c:
         c2:e7:d4:d9:e1:96:cf:66:6e:0f:97:9f:3d:c2:1f:5e:48:a9:
         78:dc:71:d3:aa:9d:6b:58:31:22:ec:4d:40:c0:a0:7e:6b:4c:
         8f:7c:44:01:88:08:e3:4a:47:bf:c8:34:1f:22:bd:be:70:77:
         14:92:1b:13:0d:77:f4:e1:45:8a:f7:f4:7d:6e:13:64:dd:1a:
         b3:1b:2a:8b:1e:40:b7:27:99:97:32:ec:80:38:b3:7e:5b:77:
         03:88:b4:fd:3d:29:55:6c:56:e5:e1:7f:5d:de:74:f9:0b:2e:
         6f:65:5d:d7:20:80:3a:0a:75:b3:7a:64:ce:1d:c8:f3:60:e8:
         d3:c8:db:9e:3f:53:fa:7f:95:f5:5f:c1:e0:34:0f:8c:c9:b3:
         da:76:6c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:33 2024 by rpki-client on console-ams.rpki-client.org