Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/6B9615FCD6E311EE94842842C4F9AE02.roa
File:                     6B9615FCD6E311EE94842842C4F9AE02.roa (raw, json)
Hash identifier:          /eoW8QKQOWUt9baYsgJXn/Eg+8n5SW4VvRwwx2fZyY0=
Subject key identifier:   DC:5F:C4:FA:63:38:B1:9B:D3:3C:BD:9B:BE:87:66:0A:12:C2:44:D0
Certificate issuer:       /CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
Certificate serial:       D0
Authority key identifier: 5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/6B9615FCD6E311EE94842842C4F9AE02.roa
Signing time:             Thu 29 Feb 2024 09:17:54 +0000
ROA not before:           Thu 29 Feb 2024 09:17:54 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     150324
IP address blocks:        103.12.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl
                          rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 06:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
        Validity
            Not Before: Feb 29 09:17:54 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65e04bc2-2e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:61:b8:18:50:38:9f:15:f8:f4:de:61:12:5a:
                    87:06:21:e2:5f:1b:76:c3:93:e6:c3:3b:82:31:80:
                    7d:a4:b6:ba:09:6d:52:fd:a8:8a:cb:e8:4f:c6:08:
                    aa:a9:9f:c8:af:aa:17:33:67:e7:55:4c:f4:6a:4f:
                    ba:fb:1b:d4:11:f1:a9:09:e0:6a:49:86:08:17:a4:
                    0c:f4:30:2e:87:ac:7e:59:c0:cd:7f:68:44:a2:19:
                    d2:c3:32:2c:2f:27:41:52:5d:5a:71:55:8f:eb:f0:
                    63:d9:9a:fe:7b:28:3c:a3:1c:9b:ee:f2:41:6a:c5:
                    f5:41:40:73:f9:3a:9d:e0:07:aa:b6:3a:2e:e5:02:
                    68:f1:27:f4:13:c5:66:9a:73:85:f4:60:4b:ca:46:
                    6e:0c:20:a1:4d:c1:ab:ec:30:69:58:5a:97:6c:bd:
                    23:0c:dd:c2:e1:3b:f9:52:43:22:6f:6b:7c:96:8d:
                    9e:e0:c0:b6:e8:76:8d:1c:a3:54:52:a7:26:92:56:
                    a9:09:9b:bd:85:4d:58:f9:29:b4:2c:6a:af:f6:7f:
                    c0:5e:b1:0f:37:e1:b5:46:39:f7:a0:ab:41:50:41:
                    81:47:c1:24:19:7d:5a:9c:ce:99:ca:1a:e6:e7:f7:
                    b1:b6:f3:7f:86:98:66:da:fb:e6:bd:38:5a:f2:e1:
                    b7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5F:C4:FA:63:38:B1:9B:D3:3C:BD:9B:BE:87:66:0A:12:C2:44:D0
            X509v3 Authority Key Identifier:
                keyid:5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/6B9615FCD6E311EE94842842C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:00:2e:85:22:8a:29:52:da:e6:61:a0:d0:00:85:55:61:1e:
         eb:65:7f:38:e2:49:c1:6f:a4:4b:5e:e2:4e:7b:00:54:32:94:
         57:23:9a:f7:7d:fd:7a:ef:5d:92:b8:2a:24:98:1a:9c:e0:3d:
         cc:7e:44:5b:0b:46:a1:fb:29:fc:66:0d:38:15:5c:89:a9:e4:
         99:7a:3d:66:a9:5c:72:6c:cd:fc:7e:fa:b9:9e:c4:c9:65:64:
         4e:7f:14:26:0d:7f:83:ac:47:5f:90:ba:59:77:e5:92:ee:51:
         81:78:6e:19:42:37:55:73:69:d3:51:4a:73:78:7e:cb:f0:73:
         e3:29:8c:2c:7a:77:6c:45:85:2c:34:fc:15:19:bc:ce:f5:1a:
         82:d3:17:02:36:38:d1:28:23:e5:3c:ca:c1:9c:c9:d0:47:8f:
         70:cf:bb:a0:6e:b2:dd:41:68:f8:fa:c0:f3:e3:09:75:d2:d9:
         1a:76:7a:c1:04:ff:7d:19:f2:3a:1e:cf:a1:1a:67:25:cb:cb:
         b1:d4:79:d9:c9:e2:53:e2:73:a9:12:ec:6b:8d:47:a6:eb:82:
         e6:a3:1e:84:eb:2a:97:61:fc:c5:60:04:ff:95:c6:99:61:43:
         85:95:6e:f6:2c:8c:8c:cf:ed:86:47:a6:4f:7b:9e:d8:d1:a8:
         40:f1:9b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:34 2024 by rpki-client on console-fra.rpki-client.org