Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/865AA3E400FC11EDAA69A61DC4F9AE02.roa
File:                     865AA3E400FC11EDAA69A61DC4F9AE02.roa (raw, json)
Hash identifier:          I0Mc6NCaKERxjLfv71auPL3ymTInkZe4oBL6OqbtYzw=
Subject key identifier:   B7:FB:59:4C:08:17:8F:DB:93:D8:F3:EE:78:94:C7:6E:08:C2:C6:07
Certificate issuer:       /CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC
Certificate serial:       020D
Authority key identifier: 3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/865AA3E400FC11EDAA69A61DC4F9AE02.roa
Signing time:             Wed 17 Jul 2024 03:25:14 +0000
ROA not before:           Wed 17 Jul 2024 03:25:14 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     149998
IP address blocks:        103.190.90.0/24 maxlen: 24
                          2001:df0:e8c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl
                          rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC
        Validity
            Not Before: Jul 17 03:25:14 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66973999-d4e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0f:07:cc:e0:24:d8:ec:41:b1:88:11:fc:bc:
                    c7:f4:82:e4:ea:39:e0:eb:90:f6:4e:32:82:07:99:
                    b9:eb:28:a9:6c:3a:5b:44:b3:30:b7:dd:f5:22:6d:
                    ef:18:ba:8c:0d:03:fa:9b:30:27:7b:c2:25:ef:ae:
                    d7:19:66:bb:3a:6b:ab:30:da:51:96:f1:f2:10:d8:
                    e4:98:bc:57:72:0b:84:e0:09:4b:59:ff:5c:14:4b:
                    c0:d2:56:ac:ec:dc:38:40:31:99:f5:3c:4b:c4:b9:
                    66:63:e6:a0:e4:fe:21:0f:9a:a8:9c:a7:6c:d0:5a:
                    eb:f9:11:cb:32:ab:62:f2:63:a3:31:e0:02:a1:d6:
                    31:69:a3:63:00:da:bb:34:36:5c:08:f8:34:75:35:
                    f0:e6:39:8b:7a:59:ee:71:a3:2e:9c:eb:fb:3b:72:
                    76:dd:8f:d4:fc:e7:3c:d7:ff:bc:6b:c5:cf:ad:29:
                    15:11:c9:4b:71:9f:77:01:ea:d9:d7:63:30:3a:cd:
                    41:44:d4:19:e4:37:52:6c:72:07:0a:c9:eb:a5:70:
                    04:c3:8d:51:72:39:cf:20:cd:77:b0:15:fe:91:62:
                    e2:b3:ec:1d:07:9c:f1:d1:7b:06:4b:3b:9c:97:7f:
                    d3:ed:20:78:b3:cf:72:52:22:68:53:83:85:3b:2f:
                    1d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FB:59:4C:08:17:8F:DB:93:D8:F3:EE:78:94:C7:6E:08:C2:C6:07
            X509v3 Authority Key Identifier:
                keyid:3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/865AA3E400FC11EDAA69A61DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.90.0/24
                IPv6:
                  2001:df0:e8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:d4:e8:7f:b7:ee:2c:b8:a9:30:2c:5f:97:b2:f1:e8:97:24:
         bd:39:11:04:ee:42:3a:21:43:84:cc:05:73:be:33:05:c1:7b:
         0d:34:a6:bd:be:24:e4:65:e8:bd:b6:a3:e6:48:5b:b1:a5:95:
         40:d5:a0:cd:c6:da:96:6f:ec:60:33:8f:12:6a:55:4d:57:91:
         a4:0d:86:60:27:d1:ef:03:14:c0:34:60:a4:28:5b:00:84:38:
         b6:a8:25:15:6e:5a:32:ae:4f:43:57:8d:09:88:9c:cb:54:3c:
         93:9a:d2:a9:0d:3f:c1:d2:89:b8:f6:1d:a5:2b:da:4b:aa:1a:
         ff:41:32:30:e2:c5:38:79:73:73:fd:6b:00:66:ed:19:71:6b:
         31:02:aa:3d:b4:a6:4b:37:0c:58:69:62:8b:59:89:89:c9:01:
         1a:62:4d:5f:45:51:07:90:ff:5c:f7:0e:fb:c0:43:ff:f8:de:
         4c:d6:d0:bd:18:38:74:a7:8e:e1:fc:3a:07:bc:8c:95:7b:c8:
         80:38:2f:13:2f:73:56:7b:6a:3f:30:31:0f:ae:d1:e7:83:4e:
         ea:cc:bf:06:5e:ac:50:44:ab:33:9f:19:ed:a0:0a:28:3a:78:
         15:a6:b8:b4:a4:58:cb:ca:f1:bc:4e:00:2e:63:9c:10:eb:12:
         cd:57:b8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:43 2024 by rpki-client on console-ams.rpki-client.org