Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12F01CC0702D11EF90827585C4F9AE02.roa
File:                     12F01CC0702D11EF90827585C4F9AE02.roa (raw, json)
Hash identifier:          1Oa7QeABXFZ8fahxrvHpPN89rnFIKBHI7QhdnpOWVWs=
Subject key identifier:   7A:DF:83:55:DA:A6:7B:BE:E1:90:F7:77:B5:45:62:60:A6:46:0B:0A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       9862
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12F01CC0702D11EF90827585C4F9AE02.roa
Signing time:             Wed 11 Sep 2024 11:00:37 +0000
ROA not before:           Wed 11 Sep 2024 11:00:37 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     135204
IP address blocks:        103.216.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39010 (0x9862)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep 11 11:00:37 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66e17854-7834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:66:08:e4:70:5c:c0:db:43:f6:f5:96:ad:
                    27:9a:53:58:a4:3c:b9:93:e9:a2:88:98:53:91:9f:
                    44:2e:89:50:3f:fb:ae:3a:c7:2a:db:69:c7:c9:01:
                    0f:e5:22:0f:64:5f:e5:cf:40:d9:ea:cb:db:39:d1:
                    ed:f3:b0:20:df:ed:96:51:b0:2d:e0:00:e3:78:eb:
                    b5:25:51:6e:71:77:f1:42:f5:d8:40:9f:2e:0f:7e:
                    c6:0b:b7:a1:51:cc:27:f6:b6:83:92:f0:c6:2a:2a:
                    83:c3:a4:ce:1f:a0:56:df:b3:7f:b9:08:8f:6e:83:
                    9e:d9:c8:8a:31:1e:bc:9d:27:f2:9b:07:aa:e9:95:
                    37:5a:0d:52:ee:4b:c4:1b:f6:59:34:6f:47:d1:7d:
                    a1:60:76:50:df:24:cc:e1:f1:04:0d:88:16:3d:3a:
                    06:30:3a:fb:3c:e2:1f:81:25:d3:8d:1e:fc:73:de:
                    2d:42:f1:92:a6:4c:ef:f6:ab:93:9b:66:98:95:a4:
                    f9:9d:97:07:da:4f:13:f2:ef:3b:2b:7f:05:fb:c9:
                    9c:ad:d1:65:3f:d1:6e:a8:0f:8a:fa:49:72:3f:6b:
                    f2:b8:07:6e:61:a0:93:bc:c9:6d:92:fc:00:45:c0:
                    4b:5c:cf:99:24:73:72:98:aa:d5:ef:7f:ef:2b:0e:
                    5f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DF:83:55:DA:A6:7B:BE:E1:90:F7:77:B5:45:62:60:A6:46:0B:0A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12F01CC0702D11EF90827585C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:91:78:7d:42:6f:ec:e0:a0:52:00:b0:2d:ae:69:e4:25:7d:
         f9:e4:80:45:06:c9:fc:fd:a5:37:8d:4a:ac:d9:30:51:b3:1e:
         23:d3:bc:09:b9:4d:35:d3:ff:d2:eb:08:57:93:13:39:b0:35:
         ce:00:82:47:14:4d:6c:27:88:20:30:94:c0:14:f4:f6:a8:fb:
         e3:b2:b0:3d:e8:85:9c:d3:ad:51:3c:db:e6:d9:0c:19:c6:42:
         91:af:91:4d:f1:a4:d8:df:ac:f7:1a:8f:19:95:25:49:49:03:
         6e:51:e3:7b:53:12:d7:d2:50:bc:6a:bc:0f:9b:80:c4:1f:61:
         a0:71:34:0e:2e:49:aa:99:06:4b:82:17:15:2d:d3:4f:5c:6c:
         3d:a8:06:9f:3b:6d:5e:61:32:00:41:84:d0:a7:4b:51:6d:1f:
         d2:df:f9:e5:5a:82:db:2b:72:83:8d:8d:dd:b7:f0:07:70:16:
         e1:43:a1:32:36:f2:c1:03:e5:60:00:d1:b9:30:ba:b2:e1:27:
         8e:60:2c:f4:34:58:2d:77:09:76:00:b6:b2:d7:45:47:3e:38:
         f0:bb:be:db:b0:99:d5:21:54:72:12:54:f7:ce:62:bb:43:62:
         1b:e1:30:c0:67:bc:6b:b9:ab:94:26:26:27:4c:6f:17:d6:24:
         0c:86:3f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:47:34 2024 by rpki-client on console-ams.rpki-client.org