Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/994A883AE06511EEA8CEC61EC4F9AE02.roa
File:                     994A883AE06511EEA8CEC61EC4F9AE02.roa (raw, json)
Hash identifier:          LjsOflVWx2ASLq3Z//t4WARlGyPly5HO69O4zsWdHy0=
Subject key identifier:   27:46:01:A7:47:4A:02:85:74:B3:AA:AE:6D:95:B1:85:00:E1:BD:B7
Certificate issuer:       /CN=A9198D95/serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
Certificate serial:       58
Authority key identifier: FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/994A883AE06511EEA8CEC61EC4F9AE02.roa
Signing time:             Tue 27 Aug 2024 06:51:09 +0000
ROA not before:           Tue 27 Aug 2024 06:51:09 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     55501
IP address blocks:        103.155.4.0/23 maxlen: 23
                          103.155.4.0/24 maxlen: 24
                          103.155.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl
                          rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198D95/serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
        Validity
            Not Before: Aug 27 06:51:09 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66cd775d-3d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0b:13:21:b4:d8:b7:de:6d:0c:bd:32:ab:62:
                    c1:6c:be:0f:a6:80:70:eb:95:95:90:98:a7:d6:81:
                    09:ac:cc:50:2a:d9:e3:bb:0c:9f:e1:d8:6b:80:a9:
                    82:d0:4c:11:38:1a:4c:ca:02:d3:db:d7:52:72:26:
                    c2:8c:69:09:6e:9a:78:25:14:b7:15:f1:30:3a:9a:
                    f3:01:fd:53:42:5a:7b:4f:60:a9:7c:2b:93:7b:81:
                    4e:db:10:53:f7:bd:0b:ef:9c:46:b0:f4:28:d9:f5:
                    19:8d:9e:2d:4a:21:4b:f9:ec:28:8a:ca:e4:16:3e:
                    34:9f:64:c7:de:e4:1f:50:97:5c:56:c2:99:3f:db:
                    8e:58:07:bf:9f:69:7f:e2:ec:a5:0b:fb:b9:56:66:
                    4f:69:88:83:32:d5:98:c7:96:41:e2:5b:5c:0e:54:
                    f5:3c:9e:91:c1:b8:5f:c5:85:88:e6:0a:72:db:51:
                    9c:97:be:68:d9:b4:1b:82:1a:f3:45:90:19:e7:c7:
                    8d:5d:a9:65:e2:79:2f:fb:3b:f6:d8:e3:0a:d4:7c:
                    75:59:12:90:f2:38:a7:c1:df:ee:b2:67:54:5d:78:
                    6f:b4:df:d0:36:ad:41:91:ab:47:4f:cb:9d:5e:9e:
                    39:e1:80:82:87:f1:4b:53:dd:fe:62:c3:6d:06:78:
                    9b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:46:01:A7:47:4A:02:85:74:B3:AA:AE:6D:95:B1:85:00:E1:BD:B7
            X509v3 Authority Key Identifier:
                keyid:FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/994A883AE06511EEA8CEC61EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:79:12:ae:f2:bb:ad:72:5d:06:00:d7:c2:b7:e5:2f:24:04:
         9a:bd:ef:b1:16:fa:1e:cc:91:ba:07:ef:fb:b5:d2:4c:7b:4c:
         92:a1:4b:ea:67:90:bb:c0:05:65:38:9f:cf:40:52:73:81:a3:
         63:c9:17:ea:35:cd:52:e4:04:90:15:72:94:67:b5:36:49:13:
         d7:ec:14:b4:b7:e2:e9:59:91:0f:1f:0e:90:af:1e:38:b5:de:
         5e:0c:0e:ad:e6:a6:87:cd:ab:bf:4a:0b:ef:d2:28:bf:df:bf:
         6c:6b:38:41:22:30:b0:8c:e6:ba:33:fa:e6:21:2f:7d:7c:d3:
         11:74:ae:ef:97:da:a7:56:40:96:5e:bf:55:8b:51:61:5e:be:
         19:c2:32:ab:d0:3e:54:6b:af:c7:aa:24:32:48:70:84:56:63:
         c3:4e:a3:4b:db:d3:70:49:d7:14:5e:a2:19:4c:75:94:e5:62:
         34:cb:dc:2c:4e:f0:f1:91:8e:70:19:12:20:e4:38:2b:d8:fc:
         f8:49:8c:2d:28:a2:e5:a8:25:7b:55:65:9d:7c:4f:f3:86:cb:
         34:73:7f:ed:a0:71:5f:82:aa:1d:50:f3:a9:49:c6:02:b2:c5:
         0e:4e:a7:d6:8a:71:17:27:11:c6:7b:f9:39:e0:4a:c4:da:00:
         dc:db:79:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:27 2024 by rpki-client on console-fra.rpki-client.org