Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/9F1777A406BD11EFB27FA94FC4F9AE02.roa
File:                     9F1777A406BD11EFB27FA94FC4F9AE02.roa (raw, json)
Hash identifier:          /DiL7fsaC6fY9lff2JZZK7Yh+rRZRWI9dVgzlNELU4U=
Subject key identifier:   26:FF:59:A8:0F:68:6D:88:CE:6A:E2:28:4E:93:EA:9B:D1:FE:E4:D4
Certificate issuer:       /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C
Certificate serial:       0C43
Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/9F1777A406BD11EFB27FA94FC4F9AE02.roa
Signing time:             Mon 06 May 2024 19:27:57 +0000
ROA not before:           Mon 06 May 2024 19:27:57 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     138417
IP address blocks:        103.113.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl
                          rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3139 (0xc43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C
        Validity
            Not Before: May  6 19:27:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66392f3d-2ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f6:1e:68:a9:c0:54:81:c6:a2:4a:29:be:5f:
                    08:4e:39:7b:b9:44:bb:b5:19:e5:dc:8a:32:7c:f0:
                    c5:17:8f:f1:8f:26:f0:3e:c8:20:da:f0:e5:2a:df:
                    16:0d:7f:52:91:15:27:1d:a2:81:fa:9a:03:a1:78:
                    ee:55:7b:89:73:03:3a:44:1d:00:77:2b:15:5e:c1:
                    e0:b4:82:3e:43:fb:93:da:29:a1:59:67:ad:3d:d2:
                    f3:45:33:3c:37:36:82:20:63:78:ab:47:1f:99:bf:
                    a0:28:17:0e:8b:e0:64:d0:b5:73:df:03:12:02:2f:
                    bb:96:28:39:60:3a:18:41:c6:b2:9d:0d:dc:96:2b:
                    12:5c:a6:bb:ce:19:d0:ff:9a:6f:83:88:3b:5c:49:
                    e4:60:a2:97:d8:ce:f1:13:fa:a1:7b:6a:80:f0:43:
                    07:05:d7:d6:40:3d:d8:46:86:df:95:26:e3:55:60:
                    8c:f0:e7:e5:59:9f:09:74:70:93:e6:9c:fd:cb:24:
                    a1:9e:8d:81:da:cb:1a:27:b0:bb:d2:e0:47:2f:ee:
                    13:25:51:7d:ec:fd:c8:07:7f:f5:8e:e6:9f:b3:0c:
                    d1:30:1d:dd:54:16:bb:63:63:c3:0c:94:72:b5:31:
                    0d:3d:94:36:67:e4:8b:fa:da:10:79:22:4f:32:76:
                    a0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FF:59:A8:0F:68:6D:88:CE:6A:E2:28:4E:93:EA:9B:D1:FE:E4:D4
            X509v3 Authority Key Identifier:
                keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/9F1777A406BD11EFB27FA94FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:97:ce:4e:a9:0c:b9:f4:5a:5c:55:ba:38:1f:d5:4a:0b:12:
         a2:17:a8:36:0f:e6:59:c8:5b:d8:02:57:d9:21:c5:e7:62:30:
         94:87:0c:b3:21:97:15:37:b9:6e:1c:7f:07:6f:c7:6a:b5:9b:
         d8:b4:4a:89:85:30:d4:cd:fb:17:73:eb:cc:8e:95:ca:5e:31:
         5e:50:ab:a0:97:24:e1:80:31:53:c4:bb:c3:3a:00:9f:90:73:
         d1:e6:2a:5e:d7:61:8b:4d:bb:ca:75:c3:7c:09:bf:22:46:2e:
         e4:7d:9a:ef:e2:5a:69:52:45:48:40:b9:e5:18:be:97:75:e3:
         19:7c:c0:68:af:4a:df:a6:18:97:08:14:07:50:77:28:5e:3c:
         c5:3c:09:ad:ad:65:eb:dc:b5:35:9d:af:90:5e:1a:5e:75:a1:
         69:64:ab:0d:72:ae:79:60:a4:de:54:02:95:74:7c:a1:1e:ed:
         57:6d:1f:47:c2:4e:2c:c2:04:5e:81:38:7e:81:6e:2c:52:df:
         90:a9:27:39:74:73:7b:c4:87:1b:94:ef:0a:68:51:29:0d:f8:
         6c:82:8b:ba:c2:64:09:e7:3e:cb:0a:91:17:4d:78:68:4b:2f:
         8f:3b:6e:bb:cf:52:5c:86:47:d1:2a:09:ed:6b:c4:ee:c2:7a:
         29:b2:b2:3e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTA5RDcxMTAvBgNVBAUTKEYyN0IxMTVCRjUwOTgwQkI5RDg0RkM1Q0REMkMzQjVB
RUQ4REVBNUMwHhcNMjQwNTA2MTkyNzU3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjM5MmYzZC0yZWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoPYeaKnAVIHGokopvl8ITjl7uUS7tRnl3IoyfPDFF4/xjybwPsgg2vDlKt8W
DX9SkRUnHaKB+poDoXjuVXuJcwM6RB0AdysVXsHgtII+Q/uT2imhWWetPdLzRTM8
NzaCIGN4q0cfmb+gKBcOi+Bk0LVz3wMSAi+7lig5YDoYQcaynQ3clisSXKa7zhnQ
/5pvg4g7XEnkYKKX2M7xE/qhe2qA8EMHBdfWQD3YRobflSbjVWCM8OflWZ8JdHCT
5pz9yyShno2B2ssaJ7C70uBHL+4TJVF97P3IB3/1juafswzRMB3dVBa7Y2PDDJRy
tTENPZQ2Z+SL+toQeSJPMnagnQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCb/WagP
aG2IzmriKE6T6pvR/uTUMB8GA1UdIwQYMBaAFPJ7EVv1CYC7nYT8XN0sO1rtjepc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDlENy80QTQyODI5NEUy
QjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdMdWRoUHhjM1N3N1d1Mk42
bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhuc1JXX1VKZ0x1ZGhQeGMzU3c3V3UyTjZsdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTA5RDcvNEE0MjgyOTRFMkIxMTFFOUJDRUE0RjUzQzRGOUFFMDIvOUYxNzc3QTQw
NkJEMTFFRkIyN0ZBOTRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABncW0wDQYJKoZIhvcNAQELBQADggEBACmXzk6pDLn0WlxV
ujgf1UoLEqIXqDYP5lnIW9gCV9khxediMJSHDLMhlxU3uW4cfwdvx2q1m9i0SomF
MNTN+xdz68yOlcpeMV5Qq6CXJOGAMVPEu8M6AJ+Qc9HmKl7XYYtNu8p1w3wJvyJG
LuR9mu/iWmlSRUhAueUYvpd14xl8wGivSt+mGJcIFAdQdyhePMU8Ca2tZevctTWd
r5BeGl51oWlkqw1yrnlgpN5UApV0fKEe7VdtH0fCTizCBF6BOH6BbixS35CpJzl0
c3vEhxuU7wpoUSkN+GyCi7rCZAnnPssKkRdNeGhLL487brvPUlyGR9EqCe1rxO7C
eimysj4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org