Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/B19EF9D8AA4211EE844BD455C4F9AE02.roa
File:                     B19EF9D8AA4211EE844BD455C4F9AE02.roa (raw, json)
Hash identifier:          Q6VoHbMlLAd6inTDwJh61QqIQS2XKIz150gLyNxUsl0=
Subject key identifier:   08:62:A2:7B:E6:F1:5B:BE:EA:5B:B6:2A:A9:C4:58:AB:1D:A8:9D:1A
Certificate issuer:       /CN=A9197501/serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127
Certificate serial:       01E7
Authority key identifier: 9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/B19EF9D8AA4211EE844BD455C4F9AE02.roa
Signing time:             Sat 31 Aug 2024 04:06:24 +0000
ROA not before:           Sat 31 Aug 2024 04:06:24 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     58655
IP address blocks:        103.80.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl
                          rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487 (0x1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197501/serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127
        Validity
            Not Before: Aug 31 04:06:24 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d296bf-4f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6b:e0:f7:31:50:f8:66:2e:cf:dd:d2:03:17:
                    c4:e0:44:97:a4:66:11:56:f3:ac:8b:92:e1:90:c8:
                    71:0e:22:65:5a:c5:13:c8:4e:b0:cb:e6:5e:05:47:
                    5b:ea:17:43:35:9b:c9:a7:98:6a:04:8e:0e:90:c6:
                    f2:59:0c:ae:36:8b:da:20:d9:9a:02:43:f1:97:24:
                    f9:94:f0:8d:1b:83:10:cb:dc:8d:22:fe:b9:f7:14:
                    e3:20:49:09:c3:a7:d5:c5:16:a7:d9:1a:6f:be:59:
                    c1:04:3b:e9:5f:4c:99:45:e6:8c:9a:94:9f:06:6a:
                    f5:f6:b0:49:fc:3e:71:cd:e7:4f:db:fe:a6:0d:a4:
                    f6:e0:2f:8b:83:3d:2b:cd:31:2a:15:de:31:6c:f4:
                    3b:b9:82:11:06:71:66:54:b8:e5:67:29:5d:be:d8:
                    df:2d:5e:a2:e1:b0:e8:50:0e:c5:86:b4:e9:fd:9e:
                    de:9f:6d:a1:fd:da:cf:f2:c8:75:60:a6:d8:75:60:
                    32:bc:c8:13:3c:48:15:85:55:64:49:15:9f:71:cc:
                    13:26:ad:8b:0f:e7:66:ec:fe:03:4a:26:f4:f4:f8:
                    e1:7d:a8:5c:6d:28:64:e4:03:96:30:20:37:84:cd:
                    1c:36:8d:ba:26:40:5a:ce:c7:9b:c1:00:75:b7:4c:
                    dc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:62:A2:7B:E6:F1:5B:BE:EA:5B:B6:2A:A9:C4:58:AB:1D:A8:9D:1A
            X509v3 Authority Key Identifier:
                keyid:9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/B19EF9D8AA4211EE844BD455C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:d8:d0:64:e7:d3:0f:d1:16:b3:a8:97:93:dc:be:d4:b3:91:
         1f:92:a3:32:f0:3c:20:4e:29:d9:fe:92:7e:1d:0e:e1:f2:f2:
         6b:e0:31:55:36:ec:e8:ae:32:9f:84:cf:63:47:28:ca:2a:10:
         87:49:f6:3d:8f:7c:59:fd:ad:7b:eb:d7:ed:a6:08:a6:78:24:
         e7:b4:fe:11:d3:b1:4a:a8:b4:9d:b1:19:f7:f6:2a:53:60:50:
         5e:90:11:c9:8a:00:65:70:c3:31:4f:4a:af:3f:ca:a4:c8:71:
         e0:cd:d9:d8:92:47:67:a9:ca:42:d5:de:82:44:19:1b:69:08:
         22:af:f6:aa:55:f3:9c:50:dd:f2:70:4f:af:10:79:53:1d:46:
         6a:40:b5:bb:9c:d1:75:c8:d1:1d:91:d4:67:da:bd:2b:72:52:
         83:f5:a0:f4:a2:63:11:39:0e:c0:3a:23:69:72:84:64:16:98:
         cb:70:12:5b:ee:d0:a3:8e:d0:03:9b:a7:39:2a:90:f2:fc:3d:
         a5:5b:46:40:11:82:a4:d0:f0:d7:8b:76:39:03:a7:c8:05:8d:
         d2:9e:33:ec:42:d6:5d:43:46:93:22:fe:0b:b8:98:8b:d5:3c:
         17:6a:a8:e9:6c:1c:f6:18:91:cc:b9:b5:02:6c:c4:6d:ef:de:
         28:cd:f5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:45 2024 by rpki-client on console-ams.rpki-client.org