Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/DAB789C65B6D11EEA95BF025C4F9AE02.roa
File:                     DAB789C65B6D11EEA95BF025C4F9AE02.roa (raw, json)
Hash identifier:          2kS0OWTGFXukQK/9Cb/H9mnSUIUYEGmhm7BUDWiVisg=
Subject key identifier:   2C:8E:18:CC:B2:C2:75:6E:34:34:96:B2:F6:19:24:32:82:A3:F1:37
Certificate issuer:       /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
Certificate serial:       08
Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/DAB789C65B6D11EEA95BF025C4F9AE02.roa
Signing time:             Fri 29 Sep 2023 12:15:17 +0000
ROA not before:           Fri 29 Sep 2023 12:15:17 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     955
IP address blocks:        103.203.242.0/23 maxlen: 24
                          2401:4020::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl
                          rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:42:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
        Validity
            Not Before: Sep 29 12:15:17 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6516bfd5-9bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b4:02:22:27:db:4a:b1:ed:50:a1:8b:f9:2a:
                    69:7f:7f:07:4b:88:83:a1:bb:97:a8:40:2c:df:09:
                    7b:39:4e:11:10:66:26:d2:86:5b:65:f5:ac:89:15:
                    da:8b:10:2b:dd:8b:96:cc:fc:b0:b5:9d:4c:c2:33:
                    f7:b8:8c:79:4a:70:af:57:4b:fe:82:d1:ee:40:49:
                    72:d4:56:cc:eb:ad:22:84:ff:f1:b0:fc:3d:ae:29:
                    6e:77:2a:af:29:b5:be:99:bc:64:e5:78:1f:a2:4d:
                    5c:5b:4d:81:05:1b:f0:09:63:7c:9f:42:fd:32:02:
                    e8:b9:07:2e:90:7d:7c:ed:d4:ca:f9:91:52:b9:f8:
                    ad:84:92:43:0a:e3:ee:74:83:85:16:a9:d0:99:6b:
                    aa:28:d7:4f:c9:5d:72:f6:7b:b4:50:51:7f:89:af:
                    76:62:98:28:cf:41:67:1f:52:71:49:a8:21:b5:59:
                    b4:8e:a2:2f:dc:31:9c:79:fa:c1:3e:c6:74:59:84:
                    ca:87:76:bd:1a:18:51:94:49:29:5a:9a:1b:21:56:
                    5f:46:f6:5d:3f:67:d7:f9:a4:2d:38:bc:f4:d3:3b:
                    a2:5a:2c:4d:b4:e1:dd:d3:f5:27:63:cf:a5:a4:b0:
                    9a:c8:ea:84:5a:06:09:62:6d:49:67:27:ca:ab:a0:
                    bf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8E:18:CC:B2:C2:75:6E:34:34:96:B2:F6:19:24:32:82:A3:F1:37
            X509v3 Authority Key Identifier:
                keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/DAB789C65B6D11EEA95BF025C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.242.0/23
                IPv6:
                  2401:4020::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:4c:1c:44:4d:fa:24:4a:da:db:a8:07:22:22:76:b2:99:47:
         d2:34:34:09:c9:aa:54:76:89:a7:66:98:6c:9b:7f:28:0f:0d:
         f7:5c:00:79:00:6a:6b:55:b6:47:f1:24:b6:6e:cb:c0:c3:17:
         bc:54:23:cf:bd:68:d4:28:22:33:8c:8a:d1:cc:69:50:5e:61:
         f6:ee:45:3b:5d:4b:17:0b:94:75:3f:8a:4f:6c:97:6b:c7:ae:
         55:da:cd:2e:78:92:61:4f:f7:07:a9:a9:0e:f0:45:1d:00:d5:
         0e:e6:a3:95:e7:0a:f4:df:9e:68:f7:d5:72:2d:76:a7:2d:1f:
         2e:7f:65:c2:8c:ef:d4:b7:71:ae:27:d5:f7:38:5e:88:c6:28:
         4a:b0:a1:ac:b1:3c:7e:8b:1a:3e:44:60:8f:bf:62:1b:41:08:
         cc:e5:29:1f:d9:04:96:1b:28:d0:38:08:50:3a:44:ad:10:b4:
         e2:64:79:2f:bb:16:f7:08:7c:79:40:6b:84:b9:b0:ad:47:57:
         f9:17:1a:18:18:8c:24:21:d7:ab:2a:18:15:49:93:2c:14:36:
         ff:a2:85:6f:a4:5d:c1:cb:7b:fc:e0:85:3e:c0:82:7c:ca:fb:
         2f:b9:c7:e5:5f:4e:9a:0b:a5:2f:75:f9:76:e1:6d:10:a3:07:
         97:6e:35:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:06:01 2024 by rpki-client on console-fra.rpki-client.org