Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/9830B6D8663D11EE8CBBAE7CC4F9AE02.roa
File:                     9830B6D8663D11EE8CBBAE7CC4F9AE02.roa (raw, json)
Hash identifier:          Wa8VD0lmDOwdth5KoUIOfMLBdB57aoMl1cYAfCOjMXs=
Subject key identifier:   DB:67:FC:80:04:88:77:6D:43:C4:8E:A2:C2:AE:FD:B8:EE:DA:14:A2
Certificate issuer:       /CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
Certificate serial:       C5
Authority key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/9830B6D8663D11EE8CBBAE7CC4F9AE02.roa
Signing time:             Wed 07 Aug 2024 06:07:26 +0000
ROA not before:           Wed 07 Aug 2024 06:07:26 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     1221
IP address blocks:        203.6.127.0/24 maxlen: 24
                          203.11.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl
                          rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
        Validity
            Not Before: Aug  7 06:07:26 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66b30f1e-6c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:56:19:df:8f:ff:2c:c9:1a:cb:79:55:45:bf:
                    64:f4:6a:0e:d7:66:b8:14:9a:79:0c:c1:90:66:bb:
                    4b:8b:d6:a4:6e:7a:13:c5:9f:18:b6:af:70:1f:0d:
                    77:15:32:21:69:ea:d7:b5:ce:1a:b3:45:84:ac:81:
                    32:72:87:07:63:ee:d0:a4:dc:79:ec:a8:16:93:bd:
                    39:81:a1:4e:41:12:04:52:42:bc:75:21:5f:53:c8:
                    10:9b:ea:94:e2:9d:5b:2f:7b:33:d3:88:a8:b3:04:
                    12:34:58:41:83:ab:ba:50:63:b1:3f:5a:cc:3a:86:
                    82:5b:dd:ad:84:4e:13:5e:25:6f:50:2c:f9:b3:f0:
                    b6:63:ae:b6:10:3f:c1:ac:c6:18:c7:ff:a3:ad:b7:
                    a7:f0:04:2f:69:e9:a2:64:20:37:57:9c:63:93:3d:
                    68:2b:c4:d1:af:28:71:67:03:1c:1e:03:6b:e3:24:
                    29:41:4e:ab:1d:94:cb:b7:ba:ca:83:78:f1:3b:96:
                    fb:3a:6c:d2:24:2c:47:73:bf:e5:c7:63:be:6b:80:
                    ff:27:39:3a:0d:c2:4f:78:6a:50:46:22:ce:bb:93:
                    d9:bc:b3:75:9f:64:ea:03:66:a7:a5:ec:25:be:6e:
                    b3:db:7a:45:2a:be:d5:9e:50:a5:ec:ae:df:0e:05:
                    c3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:67:FC:80:04:88:77:6D:43:C4:8E:A2:C2:AE:FD:B8:EE:DA:14:A2
            X509v3 Authority Key Identifier:
                keyid:5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/9830B6D8663D11EE8CBBAE7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.6.127.0/24
                  203.11.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:1b:63:61:54:3f:f2:7c:69:6e:fa:7e:fb:ca:4c:ad:21:16:
         5d:d6:f2:f8:aa:97:27:4a:0a:76:00:5e:3c:c9:47:f9:dd:a3:
         3e:c7:f3:dd:00:8f:76:8a:7a:cb:6a:ae:8f:f1:e9:57:73:4f:
         b7:75:2a:3a:cc:e1:37:c6:4a:58:b0:7b:0f:10:5d:77:94:b2:
         35:61:bc:ef:e9:1d:2f:72:e7:c8:ea:59:64:97:4f:56:17:89:
         8a:57:08:81:80:e9:54:53:99:df:00:6c:ed:00:ef:be:1b:e6:
         69:7f:59:cd:e5:b2:2b:f4:c8:fb:94:d0:99:90:09:a3:fa:ef:
         74:cd:73:b0:8c:22:ea:cc:10:6b:e2:35:42:49:29:dc:9c:91:
         3e:36:a1:26:3f:fb:62:88:9a:d5:7c:d9:10:bb:81:12:ce:d5:
         36:cc:ea:48:85:12:77:51:cc:32:73:7c:5a:d7:c8:66:b1:ff:
         b8:24:58:8b:22:ed:7a:32:0e:c6:79:21:71:ef:07:6e:97:ea:
         54:d5:08:5f:06:88:3f:dd:e9:f4:16:c1:7c:c7:8e:c9:95:93:
         04:17:03:b9:e4:eb:e4:f8:59:4a:0c:90:54:5d:c5:68:39:c2:
         3d:1a:95:a6:a5:82:6a:18:f8:f8:0d:e6:47:12:4d:07:44:1b:
         2a:0b:c6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:06:04 2024 by rpki-client on console-fra.rpki-client.org