Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/C4D5BB009B5411EFBBEFF384C4F9AE02.roa
File:                     C4D5BB009B5411EFBBEFF384C4F9AE02.roa (raw, json)
Hash identifier:          uCME1nI1G2tg6HGgZkpUoMU0QH2pLpOuIsCEhG/KhIQ=
Subject key identifier:   2D:AE:F8:2C:A3:6A:C8:E3:BE:69:3B:10:E8:A4:B2:68:B2:48:97:50
Certificate issuer:       /CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Certificate serial:       F0
Authority key identifier: AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/C4D5BB009B5411EFBBEFF384C4F9AE02.roa
Signing time:             Tue 05 Nov 2024 09:03:06 +0000
ROA not before:           Tue 05 Nov 2024 09:03:06 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     24413
IP address blocks:        103.166.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
                          rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
        Validity
            Not Before: Nov  5 09:03:06 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6729df49-9f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1f:b6:75:bb:ce:cd:46:22:d8:42:9d:b7:ad:
                    96:ba:27:bc:6f:e8:8d:5c:89:02:bb:92:51:72:3f:
                    fb:1e:e1:9c:f4:64:42:e0:24:b4:19:0d:5b:7a:0f:
                    e9:60:cb:74:73:6d:72:b9:2a:34:6c:c1:a6:f7:ea:
                    19:b3:3c:9c:f5:4b:ad:1b:4f:81:76:50:95:e1:03:
                    ba:45:11:84:fe:b0:45:3e:17:d9:1e:3a:70:12:68:
                    56:0a:d3:3e:f6:59:8c:4b:39:2c:6b:3d:92:d9:b8:
                    ed:e7:1b:a8:34:98:ea:85:c5:f5:f1:34:b8:2b:ee:
                    a1:ef:f2:55:0b:f7:02:70:e1:91:d1:5e:51:af:f0:
                    08:84:7e:93:75:7a:1a:1b:98:dc:2a:2c:28:2b:94:
                    f9:87:00:d9:56:f1:20:bc:f6:40:56:bf:2a:9e:87:
                    6d:08:4e:26:37:45:8c:d8:ad:4a:28:43:27:26:cb:
                    1e:2c:15:4d:df:32:b1:57:bb:2f:88:60:48:a3:29:
                    8b:f2:9d:67:34:b7:eb:32:5b:58:74:52:34:8c:4d:
                    a1:2a:45:0a:03:41:0b:1f:ce:13:dc:2a:bb:a2:3d:
                    14:00:09:db:d3:30:64:ef:04:74:12:fc:14:6b:39:
                    36:55:d1:e4:b8:33:8a:06:22:6a:13:4c:42:a4:f3:
                    1e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AE:F8:2C:A3:6A:C8:E3:BE:69:3B:10:E8:A4:B2:68:B2:48:97:50
            X509v3 Authority Key Identifier:
                keyid:AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/C4D5BB009B5411EFBBEFF384C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:54:a6:be:43:6f:a2:e8:27:02:c1:0d:62:3a:db:22:e4:55:
         6a:a6:a2:74:11:3c:ac:85:01:9a:27:4b:30:95:2b:1d:93:e8:
         0c:c4:c6:1d:83:0f:a5:90:96:57:33:00:7a:21:25:94:55:45:
         6d:63:7f:b1:53:18:8f:12:b2:82:f5:a1:db:6e:c1:bc:67:5c:
         29:0e:bc:d2:71:bb:71:aa:f7:55:f4:ad:d3:39:a1:9c:d5:47:
         c4:28:48:1d:ba:16:ac:6a:3a:8a:c7:f7:ff:71:0c:87:86:17:
         2c:29:2e:c1:02:39:4e:8b:65:e9:04:ec:9c:18:4c:f2:4d:1d:
         da:68:d7:a1:cb:33:c9:0e:d9:01:b9:93:0b:c7:8e:00:93:78:
         d8:0c:a9:b8:b4:c5:6d:f9:59:d1:d6:3d:c8:9e:91:72:0e:39:
         eb:e1:33:8b:4a:20:a9:ee:61:41:a1:9b:a9:7d:a2:b4:ba:00:
         1e:81:e3:49:01:50:55:78:2c:f6:35:f2:cb:07:2e:5f:00:59:
         3a:ce:d1:f1:6b:5c:b2:6d:ec:94:3b:d5:8e:49:f7:93:5d:04:
         a0:93:81:f0:25:89:35:47:2e:b3:70:f6:f9:ae:63:79:7c:a2:
         f0:be:d1:f2:d6:cb:55:36:74:da:cd:76:bb:41:05:b7:d6:d9:
         c4:fe:1a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:08 2024 by rpki-client on console-ams.rpki-client.org