Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/5D5A631E93D211EBAABA8D6AC4F9AE02.roa
File:                     5D5A631E93D211EBAABA8D6AC4F9AE02.roa (raw, json)
Hash identifier:          NdtTSEnj2R92n5sFgVINSflAuh16AqM9tMAdy5Ki084=
Subject key identifier:   0B:B6:BA:49:36:E5:31:7C:23:87:63:D8:6C:0D:83:06:E2:EA:14:3F
Certificate issuer:       /CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2
Certificate serial:       1E11
Authority key identifier: DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/5D5A631E93D211EBAABA8D6AC4F9AE02.roa
Signing time:             Fri 30 Aug 2024 16:53:39 +0000
ROA not before:           Fri 30 Aug 2024 16:53:39 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     399502
IP address blocks:        103.70.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl
                          rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:58:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7697 (0x1e11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2
        Validity
            Not Before: Aug 30 16:53:39 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d1f913-a993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ee:80:5c:2c:79:38:10:c4:b0:c5:20:ec:03:
                    72:00:c2:7e:15:a2:6a:1a:f7:f4:59:9f:03:1a:77:
                    62:3a:21:0f:9b:3a:91:96:83:fb:c5:d5:77:d0:d5:
                    f6:4f:44:1d:67:5e:d6:dd:04:5c:12:41:b5:26:d4:
                    5f:e1:d5:53:c3:4e:3a:8f:57:4c:e8:6b:c5:26:5a:
                    dc:b1:29:8a:5b:98:15:61:1c:90:d3:79:d3:de:a8:
                    a2:ba:04:15:79:fa:51:a5:d4:67:12:9e:94:e6:c5:
                    08:a9:63:95:5b:08:90:6a:5c:cc:fc:b6:51:a5:b0:
                    49:27:ed:26:28:db:cc:d2:b3:31:a3:6c:7d:81:aa:
                    48:d1:12:1d:ae:05:aa:d5:9e:4f:9d:2d:ed:3f:14:
                    d7:25:de:81:13:ad:d2:b7:d8:94:80:e4:ca:c4:01:
                    bf:67:88:00:a4:fa:d4:b5:8d:3a:7c:78:bd:b5:28:
                    b6:87:ce:31:fd:bf:fb:28:9c:f1:c1:ae:ec:b2:35:
                    d6:82:a7:65:ed:b4:97:1b:42:b4:3f:df:55:21:b7:
                    f2:4d:ca:90:81:b6:c3:73:25:60:0c:10:7f:ad:da:
                    e3:14:c0:ea:51:b2:03:8d:37:89:e0:09:49:60:2e:
                    63:e7:c3:c7:87:ef:24:95:b4:3b:03:58:13:33:50:
                    7e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B6:BA:49:36:E5:31:7C:23:87:63:D8:6C:0D:83:06:E2:EA:14:3F
            X509v3 Authority Key Identifier:
                keyid:DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/5D5A631E93D211EBAABA8D6AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:4d:90:ac:9d:1a:b2:43:16:ff:33:60:5e:72:6f:97:39:68:
         96:ab:64:00:bd:c0:8a:49:52:89:7a:cf:52:0b:1a:ea:ee:65:
         d9:e9:4b:8a:26:2b:6d:88:31:b8:9e:52:ce:88:fa:e3:52:bf:
         7d:54:a1:5f:0c:13:02:4e:02:a3:5f:a6:9c:30:1b:9b:d0:18:
         f7:e0:15:d6:2f:a8:6a:bb:f8:cf:31:7e:8d:4e:83:e2:26:13:
         b6:52:45:28:8a:e7:a1:4d:99:65:72:b3:22:9d:74:6c:70:40:
         ba:9d:18:5f:c6:bb:0c:8c:63:f8:99:26:7e:da:14:72:35:02:
         64:67:ea:ba:55:4d:55:a2:ca:dd:43:78:d1:7f:53:ff:85:83:
         0b:a2:67:1c:50:d3:44:54:f3:f5:ac:18:c8:54:0a:e7:18:5d:
         8a:33:70:86:4e:88:24:cc:f5:52:92:80:a7:5e:9b:8a:30:05:
         c5:eb:87:29:c2:5f:b5:5d:5c:c5:e1:27:81:7d:ec:1b:8a:82:
         ad:12:a8:60:c6:ad:0b:e5:42:af:fe:80:79:a8:39:2d:b5:c0:
         7b:4d:9a:61:79:04:58:62:4b:12:dc:b5:6a:a0:d1:d5:bf:4f:
         48:75:05:92:6b:9c:35:35:a8:71:98:62:2d:63:b7:79:f0:78:
         5c:1c:a0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:24:17 2024 by rpki-client on console-ams.rpki-client.org