Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/6A5EC93A70DE11EC8B944928C4F9AE02.roa
File:                     6A5EC93A70DE11EC8B944928C4F9AE02.roa (raw, json)
Hash identifier:          pfOPMFW4kQhWgEqFAOwq3YPcCBwScpJaJmY0T/CFlyo=
Subject key identifier:   DB:AC:FB:D0:AC:50:49:84:95:31:EF:EA:2A:4F:E7:F1:F1:36:2E:52
Certificate issuer:       /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
Certificate serial:       0D73
Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/6A5EC93A70DE11EC8B944928C4F9AE02.roa
Signing time:             Wed 02 Oct 2024 18:26:33 +0000
ROA not before:           Wed 02 Oct 2024 18:26:33 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     398542
IP address blocks:        103.141.214.0/24 maxlen: 24
                          103.141.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl
                          rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:54:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3443 (0xd73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
        Validity
            Not Before: Oct  2 18:26:33 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66fd9059-d13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:c8:46:9e:c6:10:5b:99:82:63:1a:79:a8:
                    68:d2:93:2e:2a:6d:6a:18:47:d5:4a:70:6c:15:d5:
                    f4:1e:27:65:bd:8e:83:1c:ce:9d:01:40:83:b4:2a:
                    55:55:46:93:db:49:5a:f5:6d:b7:6e:f0:6d:ac:f0:
                    f3:02:39:95:8e:b7:48:12:04:5b:22:57:8b:ec:ab:
                    05:51:e5:28:c1:b1:86:2e:67:3e:fd:ad:c9:29:bb:
                    73:e2:ba:67:75:a5:cf:17:70:40:a7:6b:bd:b4:8d:
                    89:e0:e3:0c:93:30:bb:d6:1b:5c:be:2f:85:28:bb:
                    1b:7e:7e:da:27:da:0f:9f:2f:9e:15:44:57:ae:66:
                    94:fa:f2:ae:bd:4f:bb:d6:10:0c:51:0e:3c:f6:39:
                    6f:da:87:c2:a9:b9:84:fb:cc:4b:18:87:7a:aa:d0:
                    b7:fe:86:7a:9f:59:5e:1f:5d:64:21:fa:46:9a:3c:
                    59:19:4c:09:99:3b:ad:e5:11:33:e3:06:48:df:14:
                    8d:ad:4d:21:5e:e8:2d:07:0d:6d:6c:10:b5:22:c5:
                    b3:23:15:32:04:d7:4a:a3:62:31:1c:8d:19:c0:80:
                    12:09:57:7d:33:13:3f:62:88:0d:79:c2:01:b9:ad:
                    8d:fd:66:cd:2b:90:42:43:6d:b7:cf:03:f5:b7:a9:
                    bc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AC:FB:D0:AC:50:49:84:95:31:EF:EA:2A:4F:E7:F1:F1:36:2E:52
            X509v3 Authority Key Identifier:
                keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/6A5EC93A70DE11EC8B944928C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:f9:ea:6b:db:21:a2:d4:ee:06:de:58:49:f0:dc:1a:12:e9:
         48:40:73:00:a7:f5:9e:88:64:96:8f:98:d9:65:50:80:91:af:
         ad:68:73:02:0a:0f:3d:a0:50:b2:4c:ff:62:f2:f1:f3:11:6c:
         26:36:ed:3d:aa:93:06:65:8a:11:63:0e:c1:91:ba:d2:5b:1a:
         a7:42:ef:a8:3f:50:7a:bb:20:c8:30:4a:33:f7:79:6e:63:54:
         1f:e0:a5:b6:d9:d7:45:65:6f:8b:11:6e:6a:fb:5d:6f:25:c1:
         4a:f8:d1:0a:26:7e:81:48:68:6e:c7:25:eb:e1:4a:93:56:2e:
         38:12:97:88:e0:a0:1d:85:f0:89:b8:91:8f:ae:83:ec:69:8f:
         0b:47:0c:be:f1:09:d9:f5:e4:57:f3:d7:d4:2d:c3:80:cd:5b:
         31:60:4f:5f:77:c5:05:cc:1b:46:b8:8d:92:be:a4:46:7c:08:
         cf:f2:92:68:c7:37:33:b0:b1:88:9a:75:9d:44:cb:24:75:d6:
         51:2f:23:54:6b:10:c9:c0:2a:f1:22:d2:2c:c9:e3:8d:6c:86:
         66:ca:c7:66:1f:9d:a1:78:8e:99:e6:78:dd:a6:88:c8:24:d9:
         1d:46:80:66:5d:c9:83:31:38:64:29:c1:a5:50:ab:8c:cf:96:
         c5:9f:c0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org