Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/27A298A00C6C11EC82638A40C4F9AE02.roa
File:                     27A298A00C6C11EC82638A40C4F9AE02.roa (raw, json)
Hash identifier:          ZOGuixDCVeX/4v0j6cC8sQBiF3FmFSZajNCheI8FjlY=
Subject key identifier:   F8:21:A9:E1:E5:5F:7A:55:4D:E0:87:E3:AB:F7:DD:31:EB:92:D5:BA
Certificate issuer:       /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
Certificate serial:       0E8E
Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/27A298A00C6C11EC82638A40C4F9AE02.roa
Signing time:             Tue 28 Nov 2023 18:25:46 +0000
ROA not before:           Tue 28 Nov 2023 18:25:46 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     9009
IP address blocks:        103.131.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl
                          rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 16:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3726 (0xe8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
        Validity
            Not Before: Nov 28 18:25:46 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=656630aa-24d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e4:86:f2:0b:1d:d1:42:cf:35:69:32:65:c8:
                    c2:a2:fc:ae:4e:dd:bd:60:d2:e8:26:72:ea:26:3b:
                    f3:01:a4:bd:cc:7f:67:57:b4:57:d0:98:c2:f7:38:
                    46:18:ab:4e:32:27:7b:e3:17:fc:f6:52:a2:01:2c:
                    b3:10:e0:54:61:33:1e:6f:db:a0:cd:50:c5:71:7a:
                    e9:25:20:62:aa:fb:48:46:63:c2:2d:a6:f2:8a:f4:
                    cb:bc:1e:fd:d2:70:bb:7d:28:15:e5:7c:1d:c1:31:
                    ec:b8:31:39:77:62:e2:93:9d:af:6e:24:64:ab:9d:
                    f2:6f:c6:db:d2:0f:88:9f:37:ba:75:28:86:ec:52:
                    39:a9:95:f4:5d:5e:f0:6c:6a:57:8a:52:8e:c0:76:
                    a9:b9:79:7f:cf:8d:fd:4f:a8:d9:00:11:dd:bb:0c:
                    31:24:02:cc:8f:39:f0:fe:12:71:54:78:33:c9:b6:
                    49:43:fa:20:b9:f6:68:e5:6c:cf:34:73:75:40:80:
                    69:7a:30:57:7b:21:ac:57:2c:9e:32:f6:6c:59:1c:
                    27:ad:fa:89:0f:c5:ad:61:bc:09:70:33:de:e7:9c:
                    95:88:e2:6f:87:cf:da:55:11:04:89:b8:22:6c:f1:
                    b7:36:1c:02:36:88:c4:8a:c8:71:fc:1c:10:59:48:
                    1b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:21:A9:E1:E5:5F:7A:55:4D:E0:87:E3:AB:F7:DD:31:EB:92:D5:BA
            X509v3 Authority Key Identifier:
                keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/27A298A00C6C11EC82638A40C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:45:f9:6a:af:2e:cc:17:51:8d:6c:ad:86:d2:d4:ff:7b:6c:
         f4:44:ea:c3:36:b5:02:8a:f2:c6:81:03:37:42:0d:87:30:00:
         02:9c:a5:6b:9e:52:2b:d3:25:de:6b:54:27:d4:35:25:42:85:
         da:1b:50:07:50:86:1f:14:78:87:1d:09:f2:f6:d7:cb:f9:ec:
         a6:42:83:07:61:22:1c:87:4b:bd:19:ad:bd:92:d7:d9:02:bd:
         bd:24:98:2a:88:f6:90:8d:be:1f:96:69:38:eb:de:d6:d3:69:
         e3:b2:1f:26:bc:ee:62:6a:0f:d3:be:e8:04:d2:4b:cf:bd:f9:
         92:32:36:f0:90:d8:48:82:79:64:28:99:85:ea:6f:02:d1:97:
         bc:63:54:04:97:93:ff:ad:fc:0b:09:c4:42:cf:5b:0a:4d:30:
         1d:eb:f9:17:e9:72:b8:a5:59:a2:38:1c:d6:4a:df:a1:62:f2:
         b6:06:a2:be:e1:bd:5d:32:b5:24:4f:21:8a:35:c4:c2:a5:7a:
         bd:2c:ec:d2:e1:a7:f3:0d:7d:4a:00:a3:0b:f1:7b:9e:58:6f:
         0f:8d:85:a7:12:4b:58:61:b9:1d:db:4b:7c:da:d2:fd:51:d8:
         ba:67:18:a4:7c:59:4c:64:ad:e7:0c:ba:fc:27:84:76:7c:6b:
         e9:b4:e3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 18:47:59 2024 by rpki-client on console-ams.rpki-client.org