Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/81DED04C065411EFAAF0D25DC4F9AE02.roa
File:                     81DED04C065411EFAAF0D25DC4F9AE02.roa (raw, json)
Hash identifier:          PM+dQHiuzPJ4TjqXf8laXn6T0B+DAOl9u0Z/i0Jm5/0=
Subject key identifier:   D1:25:A9:77:A9:0A:7F:97:4D:78:1B:96:96:FD:DF:8C:0D:63:82:65
Certificate issuer:       /CN=A9184A0A/serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899
Certificate serial:       02
Authority key identifier: F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/81DED04C065411EFAAF0D25DC4F9AE02.roa
Signing time:             Mon 29 Apr 2024 18:15:50 +0000
ROA not before:           Mon 29 Apr 2024 18:15:50 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     138602
IP address blocks:        103.134.84.0/24 maxlen: 24
                          2001:df7:c100::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.crl
                          rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Oct 2024 05:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184A0A/serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899
        Validity
            Not Before: Apr 29 18:15:50 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=662fe3d6-9752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:88:fa:5c:dd:d5:d8:4d:0b:6f:8b:1a:bd:99:
                    4f:f3:81:2a:aa:d3:4e:ba:2b:45:e2:c8:d1:e8:b7:
                    42:bc:c6:52:1f:3f:61:7a:0b:1f:48:30:6e:57:27:
                    3d:38:0e:4d:25:0b:a6:c5:8e:5b:70:da:f5:f9:b7:
                    2e:01:f9:23:25:b5:03:f1:e6:97:8f:5d:99:c8:5a:
                    d9:d6:80:f9:cb:d3:92:11:fd:0e:0b:01:6f:8f:21:
                    1c:fe:48:47:3d:14:61:82:b9:4f:14:1f:9a:f8:2a:
                    bb:ea:d7:c9:3d:1d:78:fa:e6:8a:fd:78:e1:72:8d:
                    60:f2:2d:0e:ee:7b:37:8c:99:3d:05:c5:34:ea:83:
                    ed:1f:61:18:3c:38:d0:72:85:44:d4:bf:fa:48:ad:
                    73:0c:95:ce:45:46:70:69:83:64:49:cd:09:b6:3a:
                    ea:f6:30:84:f6:0e:94:a4:89:15:94:fe:60:b8:6c:
                    fd:ad:99:6a:a9:ba:53:c0:26:02:53:ab:77:40:a5:
                    cb:a0:f5:f0:88:a2:0e:7f:e7:06:06:31:7f:d9:9e:
                    c2:da:7f:47:c0:ad:0f:47:52:0a:ac:1e:9a:57:cb:
                    60:07:25:63:91:67:ee:3b:0b:15:3b:a6:b5:2a:cf:
                    5a:97:47:8c:aa:f0:ce:9b:8d:20:f8:21:9a:b0:9e:
                    23:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:25:A9:77:A9:0A:7F:97:4D:78:1B:96:96:FD:DF:8C:0D:63:82:65
            X509v3 Authority Key Identifier:
                keyid:F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/81DED04C065411EFAAF0D25DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.84.0/24
                IPv6:
                  2001:df7:c100::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:f9:03:99:f5:c1:a7:7e:e8:af:ff:14:30:2c:91:a6:8c:b2:
         19:9f:5f:3a:16:a0:7a:7c:7d:21:95:dd:b2:6d:a8:f2:be:38:
         f3:4f:ee:0c:52:df:9f:66:aa:7e:d3:3f:79:d3:7c:f3:89:c9:
         b1:8d:32:50:af:36:d8:7d:6c:1e:0d:f7:93:6c:51:b9:bb:de:
         57:7a:81:32:5e:90:21:3e:f6:18:4e:d2:91:dd:7e:87:fc:bd:
         e4:31:e6:6f:b0:01:56:aa:a7:d7:34:45:f8:8f:b3:a1:ba:d8:
         a9:c0:f5:5d:ec:66:98:ae:3f:8e:43:93:53:5a:9e:d5:2a:3e:
         49:79:08:2d:eb:89:a1:0f:ee:01:cb:c7:f5:bc:5e:76:aa:03:
         59:13:b0:64:68:16:23:3c:1c:f4:aa:84:a7:bc:6c:c0:b8:b3:
         1f:63:bf:45:99:93:d6:fe:40:56:21:9c:ed:f5:8b:16:68:26:
         08:a7:90:84:ae:91:f8:c0:ae:50:33:a2:56:cc:d6:63:92:5e:
         55:9c:12:cc:03:d7:89:4d:08:88:9a:07:94:31:43:f3:77:1e:
         f0:bd:85:3e:d4:84:bb:51:54:92:5c:b7:5d:06:6a:b4:05:70:
         28:4b:ed:88:ee:97:ac:c1:17:dc:a8:55:7c:0c:f4:ca:51:1a:
         4b:d6:80:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 08:05:48 2024 by rpki-client on console-ams.rpki-client.org