Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/FD900592D48311EEBDE90527C4F9AE02.roa
File:                     FD900592D48311EEBDE90527C4F9AE02.roa (raw, json)
Hash identifier:          lIOCW7Fw9YZNv17dxnRG3SAZ1pN964vukL1FlB4NL4U=
Subject key identifier:   87:EF:16:63:AA:43:4C:DA:90:39:2D:5D:44:95:8D:3E:4E:C8:24:D2
Certificate issuer:       /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Certificate serial:       9E
Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/FD900592D48311EEBDE90527C4F9AE02.roa
Signing time:             Mon 26 Feb 2024 08:49:45 +0000
ROA not before:           Mon 26 Feb 2024 08:49:45 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     210107
IP address blocks:        103.120.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl
                          rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
        Validity
            Not Before: Feb 26 08:49:45 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=65dc50a9-8e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f8:cb:06:46:7a:b4:40:e2:a7:85:0f:ea:cd:
                    89:7c:64:17:39:ce:05:ab:1d:92:3a:73:15:aa:7e:
                    e1:88:56:ae:9c:c6:47:1c:a8:3e:56:c0:3e:9d:70:
                    34:ae:9a:53:f3:f3:6f:5e:a2:9e:49:2f:65:f0:5b:
                    eb:1b:73:42:95:42:a9:06:bc:5a:59:b1:f2:d0:6b:
                    af:fc:fa:f7:20:74:4d:94:43:29:b6:e3:ea:25:14:
                    4d:32:3c:97:2d:18:2b:df:3c:e6:b2:52:61:18:ee:
                    64:21:be:b4:ab:40:14:ce:3c:e9:9e:a6:43:e5:88:
                    97:51:f0:d0:fe:f0:16:6f:7c:1c:09:19:68:7c:da:
                    c3:a6:af:59:c6:0a:a0:5b:21:1c:74:51:01:60:ff:
                    ca:45:28:1a:23:61:09:3f:f0:58:97:d0:75:40:ff:
                    2c:41:e4:e8:cf:bc:d1:62:76:71:8e:91:25:6a:58:
                    ed:ff:58:a0:0f:ae:8b:8f:0c:af:8d:d5:f3:96:fc:
                    93:34:1a:74:04:46:0a:8d:33:85:1c:bd:d7:9c:a4:
                    a6:ff:47:14:bf:ec:f7:14:12:4d:9b:15:af:4d:06:
                    83:bc:61:ed:8b:18:60:1f:03:4e:b4:ce:b6:02:b3:
                    e9:87:b3:11:13:6c:71:7c:91:24:76:d5:24:e3:53:
                    e2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EF:16:63:AA:43:4C:DA:90:39:2D:5D:44:95:8D:3E:4E:C8:24:D2
            X509v3 Authority Key Identifier:
                keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/FD900592D48311EEBDE90527C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:ee:13:5e:2b:dd:e9:c8:1b:b2:8b:1a:10:f7:2d:d2:c0:3c:
         dc:a4:d9:25:08:04:26:93:cb:c8:44:14:8f:32:2f:f6:be:0c:
         03:7c:5b:bf:5e:74:7e:7b:5b:e2:ad:6a:bf:43:e4:cd:c0:c8:
         97:e2:b0:6b:3b:20:68:05:28:b3:be:97:bf:b9:d4:34:d4:d2:
         50:2a:af:31:e0:6e:ff:ce:e5:5e:6b:68:fd:1a:e3:65:74:d6:
         f2:52:34:27:25:d9:d3:c0:58:0a:f2:0a:f8:7e:19:f4:0e:da:
         3a:a4:b3:36:9d:a6:5c:d1:35:f9:2d:c4:00:28:03:82:e7:c9:
         7c:12:10:97:74:5a:48:56:43:e2:e4:49:d2:6f:50:b8:d2:f5:
         09:bf:95:62:e8:fa:27:fb:fc:9e:33:c2:dc:40:06:71:45:db:
         4d:03:2b:71:49:5a:32:cf:93:48:5a:68:dc:f1:c4:b5:01:e0:
         ee:a4:62:54:a2:10:3e:74:0f:ae:69:f5:39:1b:64:4f:06:30:
         2c:ff:4c:9d:26:f9:d5:49:86:ca:83:fc:5e:a1:b6:5f:8e:40:
         9a:7a:d2:83:ab:a3:30:29:f7:51:42:03:61:f3:dd:a1:b4:a4:
         25:5f:b0:4d:12:8a:ee:30:ba:01:16:f8:4b:33:03:31:8d:ea:
         10:e4:4d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:28 2024 by rpki-client on console-fra.rpki-client.org