Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/9787989A777011E7BF7EED10C4F9AE02.roa
File:                     9787989A777011E7BF7EED10C4F9AE02.roa (raw, json)
Hash identifier:          y3ghXyFRCacdpqDozL1dHnRn5VnIW5O8UMNzKQMsfws=
Subject key identifier:   70:3F:49:5B:90:BA:F9:53:C4:7E:BF:A9:B0:62:86:C6:E2:36:18:F9
Certificate issuer:       /CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
Certificate serial:       18CC
Authority key identifier: E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/9787989A777011E7BF7EED10C4F9AE02.roa
Signing time:             Wed 14 Aug 2024 16:53:53 +0000
ROA not before:           Wed 14 Aug 2024 16:53:53 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     136801
IP address blocks:        103.95.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl
                          rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6348 (0x18cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
        Validity
            Not Before: Aug 14 16:53:53 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66bce121-6e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:61:f9:d6:eb:de:5d:ff:90:d6:73:29:c2:a9:
                    e5:dd:4b:00:d7:a1:c4:b3:65:19:f3:a1:b0:c8:ac:
                    70:82:ce:84:4e:25:9d:1a:e2:88:9b:fc:0c:50:51:
                    8c:9b:ef:88:3a:20:9a:62:b4:28:de:f3:f2:b2:0e:
                    5a:9d:67:fe:b8:c5:29:96:40:5c:c6:8a:aa:60:ff:
                    ac:55:db:a3:29:9a:45:9d:6b:bd:c8:09:c8:f2:fd:
                    0e:ba:96:5b:7d:0b:47:1c:b7:1f:ba:cb:3f:a2:7d:
                    07:9e:64:ca:11:7c:ff:50:3c:e1:ab:07:f6:c6:a9:
                    9a:5e:c2:96:d0:c0:17:f1:8e:24:45:78:d0:77:b9:
                    4a:1c:bd:7d:59:f5:4d:e3:f1:a8:9c:7a:b0:ba:fb:
                    02:2e:94:e4:5b:d4:7f:f5:1b:dc:fd:ec:90:9b:e0:
                    4c:21:75:07:e5:7a:8d:95:83:b0:2d:3d:94:18:69:
                    f4:ad:68:c8:9a:a3:6b:60:95:3f:4a:18:89:f6:af:
                    8a:41:2a:fc:b7:4c:48:01:43:67:0a:63:0c:8b:44:
                    4c:22:1e:14:8e:80:59:bc:91:6d:4b:a3:8e:8c:8b:
                    12:4f:3f:b0:6c:98:55:22:a3:d1:b3:b0:9f:0d:8b:
                    63:d7:8b:7e:75:00:84:82:1b:f6:aa:aa:06:89:8d:
                    c4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3F:49:5B:90:BA:F9:53:C4:7E:BF:A9:B0:62:86:C6:E2:36:18:F9
            X509v3 Authority Key Identifier:
                keyid:E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/9787989A777011E7BF7EED10C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:df:90:b5:eb:54:f4:15:10:e1:57:24:39:98:e0:24:17:1b:
         69:1f:0e:4e:94:64:7a:88:f3:9c:1e:55:08:1b:5c:d2:3b:69:
         c8:07:15:50:46:0d:a1:2e:38:38:1e:51:57:03:09:4d:b0:9a:
         b3:24:f5:85:3b:38:3d:3b:d2:a4:7e:60:3c:96:d4:e9:07:f8:
         5c:53:6d:36:c5:0a:58:3d:76:ad:9b:c4:52:d3:8f:3f:12:45:
         df:89:88:84:74:e2:41:82:86:9d:a4:34:90:94:52:94:cb:15:
         11:bb:8d:20:15:4f:80:fc:b0:43:a5:bd:72:04:9c:e4:2c:31:
         34:4b:2b:03:e0:09:88:49:47:90:7e:ad:b6:1e:d6:32:ac:16:
         6f:97:f4:d0:51:75:d3:a6:aa:6c:9c:60:4c:67:5d:37:31:41:
         07:2a:94:fb:a8:bc:2a:6e:44:bd:34:81:ff:9e:7f:43:72:12:
         f6:9d:73:ec:03:a1:65:de:69:76:c9:30:83:6e:90:e9:5f:69:
         fa:d7:77:14:d4:2d:ac:da:1d:2a:9f:96:17:b2:53:9a:33:cc:
         de:fd:97:dc:e0:af:14:71:4e:82:b8:77:e8:bd:d5:86:fb:e8:
         e1:cc:5c:f8:f7:b5:b9:da:10:25:e8:27:9d:fc:af:62:a0:bb:
         0e:1e:e8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:51 2024 by rpki-client on console-fra.rpki-client.org