Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/62923A1EF2B711EDAA29717AC4F9AE02.roa
File:                     62923A1EF2B711EDAA29717AC4F9AE02.roa (raw, json)
Hash identifier:          ZZdPnVowwXd341PXeuTZoAzmaTvlltdwYKchQCyVQrk=
Subject key identifier:   51:A3:4E:9E:21:F5:EF:79:B2:C8:00:4F:F9:8D:AE:A6:DD:27:73:29
Certificate issuer:       /CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3
Certificate serial:       D2
Authority key identifier: 3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/62923A1EF2B711EDAA29717AC4F9AE02.roa
Signing time:             Fri 21 Jun 2024 05:07:18 +0000
ROA not before:           Fri 21 Jun 2024 05:07:18 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     151208
IP address blocks:        103.133.88.0/23 maxlen: 24
                          2400:faa0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl
                          rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3
        Validity
            Not Before: Jun 21 05:07:18 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66750a85-4baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d2:dd:22:c2:6f:b6:46:27:58:37:b0:7c:3e:
                    8b:8f:f6:9a:e3:18:ee:b6:5c:59:57:84:1f:c0:ca:
                    2a:02:f1:6c:41:57:cb:29:c0:23:71:3b:c9:80:5f:
                    87:4f:ae:24:e4:44:2b:0a:8c:04:6c:eb:bb:17:1f:
                    7a:b7:f6:28:47:9a:fc:74:cc:bd:fa:f0:29:40:b2:
                    2e:60:17:d7:c4:95:dd:ae:3e:15:28:a9:53:39:a3:
                    17:82:25:ae:a8:04:34:e6:a0:77:5d:21:fe:80:04:
                    a0:4a:11:f6:99:ca:39:f0:d3:37:9d:1c:7d:b2:be:
                    3e:a4:4a:d4:e6:a6:ab:5c:3f:c8:d0:8d:fd:d5:93:
                    8d:e4:53:48:c4:30:ad:45:58:3c:16:41:80:23:51:
                    32:e2:41:b7:e4:4c:a2:0d:bf:cb:9b:68:1a:00:cf:
                    81:6d:82:2c:4d:15:90:e5:d6:54:2c:61:a2:54:44:
                    0f:d1:ab:dc:92:30:54:6a:3d:8a:f1:5b:26:b9:ec:
                    3b:0b:5b:20:13:e1:00:d4:02:b0:0e:e5:4e:b3:97:
                    f0:98:28:3d:e8:44:61:25:99:40:b9:da:4c:7f:73:
                    0f:d2:64:ba:ca:bc:88:30:33:6a:fb:bd:70:40:01:
                    46:dd:48:85:23:89:cc:ee:61:7a:f1:7e:b9:88:af:
                    30:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A3:4E:9E:21:F5:EF:79:B2:C8:00:4F:F9:8D:AE:A6:DD:27:73:29
            X509v3 Authority Key Identifier:
                keyid:3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/62923A1EF2B711EDAA29717AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.88.0/23
                IPv6:
                  2400:faa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:9f:9f:cb:16:25:53:0f:29:93:3d:08:75:4b:9b:6e:ce:19:
         9d:4b:2d:56:5a:57:c9:29:8d:9d:a2:cf:ff:78:8a:ae:a1:9e:
         c5:27:29:dc:d3:87:2f:02:39:98:5b:98:b4:86:f2:4e:42:29:
         78:e1:11:c0:2d:5a:cd:6d:e5:ba:bf:0c:d1:e9:3e:9c:cd:91:
         d1:eb:b9:09:72:fe:4f:15:ef:6f:b9:c7:eb:1b:12:ee:6c:ad:
         26:e2:20:5c:b5:0b:25:c4:2c:df:5e:1d:16:69:83:35:e7:2e:
         f5:f4:51:68:8e:bd:b6:8e:a8:4e:35:ed:07:fd:06:1f:e3:2c:
         ce:eb:02:7d:06:cb:f5:92:42:5b:2f:b8:ea:55:43:b7:81:d6:
         78:ff:0d:84:36:89:74:7c:2a:f4:e0:1e:c2:ca:f4:52:3a:5a:
         b0:e5:04:14:7c:36:f1:c3:5a:c7:14:01:f4:9d:22:9e:8a:a1:
         ca:a3:77:aa:ed:72:1e:97:73:b6:46:a7:fd:b6:e4:96:a5:c8:
         36:b9:41:a8:13:02:f1:df:40:81:6f:c4:68:95:f2:fd:9d:c9:
         ea:9d:36:18:5c:58:92:02:76:7d:81:97:59:41:7a:8a:6d:59:
         03:0e:d5:9c:db:d0:8a:fd:16:7a:13:21:81:44:7f:72:7a:b9:
         56:5a:7d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:48 2024 by rpki-client on console-fra.rpki-client.org