Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/AE735F98E19D11ECA439802EC4F9AE02.roa
File:                     AE735F98E19D11ECA439802EC4F9AE02.roa (raw, json)
Hash identifier:          7Tpt5XBbvIKMRBeKrshKHxigWKiSIuH37QbViPhZVRs=
Subject key identifier:   96:1F:08:2B:39:07:FA:DE:59:9C:55:31:DF:F2:A8:31:D2:83:45:51
Certificate issuer:       /CN=A911EB2D/serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF
Certificate serial:       07F4
Authority key identifier: C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/AE735F98E19D11ECA439802EC4F9AE02.roa
Signing time:             Fri 31 May 2024 22:59:31 +0000
ROA not before:           Fri 31 May 2024 22:59:31 +0000
ROA not after:            Tue 01 Oct 2024 00:00:00 +0000
asID:                     140849
IP address blocks:        103.152.104.0/24 maxlen: 24
                          103.152.105.0/24 maxlen: 24
                          2001:df4:a80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl
                          rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:25:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2036 (0x7f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EB2D/serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF
        Validity
            Not Before: May 31 22:59:31 2024 GMT
            Not After : Oct  1 00:00:00 2024 GMT
        Subject: CN=665a5653-be1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:13:5f:62:e8:4e:37:71:e7:3c:58:34:dc:9d:
                    95:f4:5e:23:9a:5d:68:99:9b:ef:ab:a4:d6:68:dc:
                    21:a7:39:10:78:00:f4:a1:7c:06:6d:87:d5:f2:fe:
                    d5:6a:70:48:92:73:70:72:5c:da:fa:2c:92:65:61:
                    14:a6:f3:ab:ef:0a:78:54:30:2a:cd:b3:21:be:1f:
                    57:1d:58:16:a7:a5:c6:4e:79:4f:63:42:0a:e5:01:
                    09:1c:90:44:26:c4:04:f9:88:7f:3f:2d:f7:00:73:
                    b2:6b:06:61:68:c2:de:6d:68:f9:46:6e:f0:6e:2d:
                    37:6f:81:09:70:63:72:91:31:53:e4:75:8f:c1:e6:
                    81:11:e2:78:10:5b:a3:14:a5:52:13:68:a0:d8:9b:
                    3f:11:5c:61:9f:53:65:b1:55:fc:08:23:5b:15:77:
                    28:71:93:a1:8e:fb:04:76:7b:fb:5d:8e:b5:17:e3:
                    bd:31:cb:14:f0:79:01:fa:f0:f2:75:4c:ac:2c:42:
                    dc:63:91:48:16:b0:f2:d5:9b:8d:2c:5f:c3:39:b1:
                    52:44:c7:5a:77:10:da:35:a4:87:2d:52:4f:c8:c9:
                    2d:e6:6f:b0:b9:24:3f:2c:da:49:14:41:9f:61:62:
                    d8:7e:d8:d4:5b:9d:db:d0:cc:22:6b:20:3f:98:24:
                    64:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1F:08:2B:39:07:FA:DE:59:9C:55:31:DF:F2:A8:31:D2:83:45:51
            X509v3 Authority Key Identifier:
                keyid:C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/AE735F98E19D11ECA439802EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.104.0/23
                IPv6:
                  2001:df4:a80::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:c4:bb:80:3a:c5:fd:28:79:2f:40:5b:2c:dd:87:36:5c:10:
         9c:f9:b0:35:4c:b1:c2:ec:98:f0:36:c8:db:3e:69:00:1b:f0:
         ce:9f:3a:01:70:9b:02:8b:46:f0:b8:df:1e:c8:d3:c3:b8:7e:
         e4:f5:51:d9:ba:ea:be:2c:d6:c5:d9:95:eb:1b:9f:f4:d1:9c:
         31:ca:ff:86:c4:a5:f9:24:7b:a2:6f:e0:9e:28:b6:68:b6:a9:
         35:4b:15:99:ab:cf:dc:5f:01:42:ca:0f:57:3f:48:06:4f:52:
         08:1c:25:9e:b7:24:9c:a8:86:2f:6e:e3:66:15:66:88:2a:63:
         21:8e:31:06:10:ee:4c:74:8f:15:84:52:18:40:ef:98:a1:a2:
         4a:dd:43:6a:3f:6d:37:2a:75:f6:a8:3b:a1:16:21:88:c5:e6:
         a9:55:24:47:a9:b5:42:d5:e7:7e:a0:2e:0e:d5:58:25:83:29:
         9e:eb:1e:cf:2c:f1:2a:39:a6:5e:91:9c:84:92:e3:db:09:c7:
         e4:34:a2:0f:10:25:75:a8:1d:e5:1b:a3:cc:53:29:06:41:83:
         bd:88:2a:77:79:55:5c:11:c5:d4:a2:c5:08:6a:99:58:0d:5f:
         a0:3a:57:26:fc:69:15:05:43:cb:37:3b:90:25:d7:a7:4b:e1:
         23:b1:64:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 23:31:22 2024 by rpki-client on console-fra.rpki-client.org