Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/F1999E04EB4211EDB83DE270C4F9AE02.roa
File:                     F1999E04EB4211EDB83DE270C4F9AE02.roa (raw, json)
Hash identifier:          CEGzbb8mbwbCceZtpxGKn27etBkh86Y23v6fJ7nUYK8=
Subject key identifier:   07:FE:E5:CF:E9:98:FD:B3:C1:FE:3A:2F:9B:39:75:11:FA:8F:61:9A
Certificate issuer:       /CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8
Certificate serial:       8E
Authority key identifier: 0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/F1999E04EB4211EDB83DE270C4F9AE02.roa
Signing time:             Wed 31 Jan 2024 06:46:30 +0000
ROA not before:           Wed 31 Jan 2024 06:46:30 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     31050
IP address blocks:        103.110.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl
                          rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8
        Validity
            Not Before: Jan 31 06:46:30 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65b9ecc6-28b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8e:73:44:93:3b:3b:de:08:b4:63:08:1c:db:
                    e8:c0:57:43:df:cd:d9:21:a9:fe:ce:80:07:f1:f6:
                    c5:8b:64:07:c1:11:9b:66:15:6f:4b:80:54:f0:0d:
                    19:34:b9:48:63:2c:01:9e:34:79:51:8d:b8:05:4b:
                    bf:c5:92:54:3a:12:4a:fd:e0:6f:87:ee:bb:39:7d:
                    51:92:25:fe:d1:6e:b9:be:77:75:4a:60:19:40:77:
                    c0:b0:22:fc:07:62:8a:58:7d:b6:63:34:2d:4d:63:
                    eb:df:0b:5b:d3:c2:95:17:3a:31:f0:f1:02:7d:d4:
                    b9:aa:81:89:41:c6:9c:c1:6c:5f:5c:2b:f7:31:38:
                    32:a7:4a:16:7b:65:2a:ad:eb:f7:5e:83:ed:d6:d8:
                    fb:7b:1d:4e:f4:09:e2:5f:d2:e8:5b:01:b0:83:8e:
                    16:3e:0e:12:55:e6:f0:f3:0e:3c:39:5b:34:6b:da:
                    26:64:38:08:bf:2b:1a:80:37:8f:52:0e:34:92:7e:
                    f7:ac:9d:2f:e1:1f:9c:4a:05:71:ec:d5:e1:77:4f:
                    b8:e7:49:76:f1:c9:2d:48:28:3b:3f:29:8d:8f:55:
                    f9:c2:c3:31:66:4b:40:8e:6d:d4:35:c4:9f:1c:e8:
                    05:9f:41:f7:9e:dc:96:8b:94:96:e1:86:c1:0d:77:
                    87:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FE:E5:CF:E9:98:FD:B3:C1:FE:3A:2F:9B:39:75:11:FA:8F:61:9A
            X509v3 Authority Key Identifier:
                keyid:0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/F1999E04EB4211EDB83DE270C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:70:aa:ec:f9:bb:c8:9a:d3:9f:21:96:80:96:0e:fa:f9:74:
         88:6d:0f:ce:5d:4a:90:14:aa:a5:37:e0:03:c9:e8:bb:f2:fc:
         a0:76:d8:5d:62:21:b2:35:60:64:37:10:ac:63:19:c1:71:b2:
         94:76:43:78:8d:a7:c4:11:a5:16:fa:c0:49:94:7c:31:93:e0:
         c6:c7:0c:c5:d9:d5:b1:40:ed:eb:e2:12:e2:72:ac:32:ab:0f:
         9f:d1:7c:90:c3:6e:dd:7b:11:20:d7:75:0c:ab:b3:80:43:fb:
         af:45:1d:68:6e:7c:9e:40:93:01:d5:e1:1b:bc:85:50:68:25:
         dc:d2:95:58:ae:a3:04:c0:b8:89:e8:c1:64:cf:a6:a3:9e:89:
         ff:99:a7:77:b1:9a:c9:c5:8b:c9:98:a1:2d:f3:ed:c8:ab:0c:
         a0:aa:d8:a0:2c:4e:ee:d1:e7:5a:e1:c4:07:a3:e4:11:4e:91:
         da:50:8c:61:ca:b0:12:96:b2:9f:cb:1c:d3:22:07:d6:ba:eb:
         25:d6:63:98:60:1c:af:27:27:a3:07:13:9e:f8:60:18:0b:a6:
         8a:7f:1d:e3:63:31:cf:97:9d:8d:ed:41:91:27:d1:0b:8d:33:
         ba:3b:88:c2:93:2e:ea:76:43:d2:18:e1:0c:d7:21:0f:67:65:
         aa:75:d7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:32 2024 by rpki-client on console-ams.rpki-client.org