Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/9591475A4F6011EFAF26AF63C4F9AE02.roa
File:                     9591475A4F6011EFAF26AF63C4F9AE02.roa (raw, json)
Hash identifier:          jD0yN6uuFJ5mI/OZ4NsQia/Tm8YVXocqzyMVWBg9ukI=
Subject key identifier:   D2:C0:01:08:37:4E:6C:48:A9:A3:BF:D0:48:2D:AD:4D:B4:B0:0E:B4
Certificate issuer:       /CN=A9184569/serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6
Certificate serial:       0BB0
Authority key identifier: BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/9591475A4F6011EFAF26AF63C4F9AE02.roa
Signing time:             Wed 31 Jul 2024 17:16:12 +0000
ROA not before:           Wed 31 Jul 2024 17:16:12 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     138614
IP address blocks:        103.134.168.0/24 maxlen: 24
                          103.134.169.0/24 maxlen: 24
                          103.134.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl
                          rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2992 (0xbb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184569/serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6
        Validity
            Not Before: Jul 31 17:16:12 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66aa715b-5143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:54:a9:8a:47:fc:cb:45:ed:32:a3:a5:dc:93:
                    27:33:88:94:ca:8b:80:f7:4e:98:c9:50:19:76:d3:
                    1d:6c:18:a1:e6:35:05:38:52:e6:9b:54:a0:a0:b6:
                    c7:bc:e4:16:06:c4:84:90:fc:73:67:a9:ac:e5:9b:
                    8a:53:9f:51:45:a9:12:9e:19:24:e6:a3:d3:9e:05:
                    90:f1:a8:f9:ad:ca:ef:79:96:d0:6b:fe:45:06:a4:
                    63:00:29:e3:40:81:66:98:6a:d6:04:fc:82:ca:44:
                    f5:37:be:73:4f:79:9f:1a:f2:54:90:29:26:e4:b5:
                    a1:ee:64:ff:12:bc:e1:42:84:09:ee:ad:9e:54:0b:
                    67:6f:10:df:23:9c:56:fc:a2:c7:22:63:a3:a8:ca:
                    4f:39:4b:00:20:6d:e1:44:4d:15:c5:66:52:09:b4:
                    08:60:6c:f4:74:97:80:84:3d:45:2d:e8:6b:c2:52:
                    f8:e4:4c:f6:85:0c:a9:72:5b:5e:5c:7a:c2:06:2e:
                    e5:67:fc:a6:a8:17:f9:88:3a:a6:a6:04:e1:23:91:
                    af:34:69:81:98:07:6f:5d:c8:1b:11:c6:bc:6f:f7:
                    27:7c:6d:8e:9e:23:38:1b:ed:dd:8a:04:ae:c8:98:
                    47:3c:01:6d:b4:ed:db:9a:f4:3a:a6:7c:33:a8:f8:
                    b0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C0:01:08:37:4E:6C:48:A9:A3:BF:D0:48:2D:AD:4D:B4:B0:0E:B4
            X509v3 Authority Key Identifier:
                keyid:BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/9591475A4F6011EFAF26AF63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.168.0-103.134.170.255

    Signature Algorithm: sha256WithRSAEncryption
         27:74:50:cc:0a:04:fd:ab:53:bb:24:4d:43:f9:e5:d7:41:14:
         f0:a7:5f:58:38:0b:53:64:81:c0:d1:e3:78:63:b5:6f:fb:6e:
         ac:f4:bf:ee:05:e5:c4:21:78:74:3d:69:45:62:88:45:2c:ff:
         67:d5:89:12:e6:7e:8b:44:da:6d:74:f1:4f:b0:d1:d5:39:59:
         c2:d1:65:7e:9a:3d:7a:cc:c4:5f:87:0e:13:8d:5f:55:a5:47:
         ea:29:85:22:a7:64:6c:c3:fe:bf:4b:40:1c:16:fa:43:11:49:
         68:26:c5:38:33:21:dd:02:ee:e9:2d:9c:98:66:26:3b:1c:20:
         08:b0:33:e5:09:5d:63:4b:b5:3a:79:40:6c:20:65:b5:97:a4:
         3f:f2:73:03:48:00:22:b9:24:7e:99:d9:ad:36:33:a9:8b:bb:
         8a:0a:23:89:82:97:7e:a1:22:2a:f7:4e:87:44:7e:22:c0:2e:
         ce:9c:96:c2:85:d0:f4:ad:06:87:6b:f3:0c:20:9d:21:1b:a3:
         45:95:58:3f:0f:6f:62:01:9f:c4:23:16:00:92:cb:97:40:c1:
         91:9a:3b:c2:8e:55:d4:92:fb:bd:67:62:ea:84:bc:4e:a6:6c:
         ab:81:7a:7e:38:0f:fb:9e:b8:8c:e0:a4:88:f5:41:87:56:ef:
         28:55:b0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org