Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/E5502F78772411EE8659D21FC4F9AE02.roa
File:                     E5502F78772411EE8659D21FC4F9AE02.roa (raw, json)
Hash identifier:          nIeveHqzY8IyETLM0F2uy8t9PYzf3G6mHt7Vhh6frsc=
Subject key identifier:   B6:0D:D1:2B:F8:9E:94:4A:C9:BD:19:22:7A:15:5D:7B:5E:D1:87:69
Certificate issuer:       /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Certificate serial:       72
Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/E5502F78772411EE8659D21FC4F9AE02.roa
Signing time:             Fri 17 May 2024 07:41:31 +0000
ROA not before:           Fri 17 May 2024 07:41:31 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     9420
IP address blocks:        103.121.64.0/24 maxlen: 24
                          2400:efa0::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
                          rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:53:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
        Validity
            Not Before: May 17 07:41:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66470a2b-d2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7a:29:94:96:7c:46:da:0b:38:dd:56:96:c5:
                    ff:96:a0:28:22:8e:55:ff:79:66:b9:b8:ad:50:ed:
                    ba:18:13:9d:bd:a1:3a:56:f6:f6:4d:63:f5:85:47:
                    17:e2:60:04:4e:94:74:42:09:50:1a:e9:cf:26:14:
                    3e:42:b9:f5:f7:24:d4:20:ea:ce:b7:1d:4a:ec:4e:
                    c9:cf:02:72:87:3a:3b:9d:1d:13:fa:e4:12:90:62:
                    ae:c7:15:ef:a9:be:4a:48:5a:cc:a7:55:22:7b:66:
                    1e:a0:23:ad:b6:62:1d:43:1d:e1:92:75:03:72:e2:
                    0d:d3:1e:e5:f8:a8:74:b1:fe:74:d4:85:24:a0:7b:
                    7f:e1:d8:e0:e2:64:b1:4e:3e:0b:75:c1:78:3f:39:
                    21:8f:6a:90:b0:61:e3:74:21:f9:c1:22:c1:8e:4f:
                    e3:fd:6e:e0:42:60:32:12:aa:af:36:58:01:ef:42:
                    75:95:45:5d:ae:4b:9c:6c:4c:f6:4d:cc:51:4d:2c:
                    a6:f2:8b:f4:9a:c7:8e:22:1d:89:a0:a9:e9:a6:13:
                    b5:c5:9a:d0:98:db:b4:82:cb:6f:17:f3:b4:09:db:
                    1b:f8:4f:fa:58:d5:79:59:be:ab:ee:59:07:6f:a6:
                    9e:f2:91:81:cb:b2:89:01:94:7b:8c:3a:da:2c:e6:
                    ed:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0D:D1:2B:F8:9E:94:4A:C9:BD:19:22:7A:15:5D:7B:5E:D1:87:69
            X509v3 Authority Key Identifier:
                keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/E5502F78772411EE8659D21FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.64.0/24
                IPv6:
                  2400:efa0::/64

    Signature Algorithm: sha256WithRSAEncryption
         3e:6c:15:2b:89:39:de:68:79:40:a4:5a:0b:87:7b:47:6e:ed:
         22:ad:db:69:19:7c:82:50:c1:db:d5:e6:c5:9f:33:20:cd:e9:
         c6:73:62:c2:c4:6f:1e:a9:d1:13:39:51:f6:bd:35:07:84:c9:
         c1:ac:3f:b9:a6:3b:db:d8:8c:c3:12:06:0f:36:f5:d2:a9:77:
         09:be:47:3c:05:86:b4:b3:a4:e7:7b:d9:dc:11:29:9f:ad:23:
         74:18:50:18:e2:3e:a1:d2:64:86:4b:0f:b7:7e:a5:b9:b3:b0:
         8c:d3:33:7d:7b:9f:a0:4c:d1:06:32:2b:ed:dd:a3:13:ce:14:
         18:03:6c:50:c3:e5:2a:17:c3:e6:5c:e0:56:14:da:d9:36:cc:
         93:8f:f1:eb:f5:c2:96:9b:bb:a4:a3:16:02:85:97:2b:f0:5f:
         2b:a2:4a:c3:19:22:11:30:3f:28:c6:f2:78:c4:aa:93:b1:f6:
         e4:46:04:ca:38:fe:bd:82:98:d5:7f:8e:8b:88:b0:d8:81:b3:
         3e:57:c9:83:d9:87:99:ce:44:e9:9a:ca:ec:e5:07:17:65:13:
         a3:5c:3c:e8:bd:9d:f1:eb:7f:d5:b2:b6:1c:48:e5:21:cc:ed:
         67:d1:de:17:55:62:f8:93:4e:85:bd:94:8a:c6:65:8e:55:84:
         21:bf:ec:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:20 2024 by rpki-client on console-ams.rpki-client.org