Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/96AD740E509811EF878CEA85C4F9AE02.roa
File:                     96AD740E509811EF878CEA85C4F9AE02.roa (raw, json)
Hash identifier:          HK4wCDo+X9ii/vAdSI4XXr5r7/o8hMdy97gl1rdUPOk=
Subject key identifier:   E7:C3:7E:14:8D:94:4B:C6:F2:58:58:1C:60:D3:AF:A6:BD:50:F5:29
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       95E6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/96AD740E509811EF878CEA85C4F9AE02.roa
Signing time:             Fri 02 Aug 2024 06:29:37 +0000
ROA not before:           Fri 02 Aug 2024 06:29:37 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     150572
IP address blocks:        103.49.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38374 (0x95e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Aug  2 06:29:37 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66ac7cd0-fdc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d0:5d:bb:e1:33:55:25:13:53:ce:21:21:98:
                    99:3c:10:94:96:e1:4c:24:f4:27:30:3f:78:dc:2d:
                    fc:a5:80:78:f3:f2:96:4e:cc:ea:93:15:4d:4d:97:
                    d6:9b:ef:93:44:08:5f:ce:20:66:79:af:62:db:18:
                    23:5e:6c:d9:3a:d8:e8:5a:07:80:08:61:46:23:70:
                    cf:96:06:27:50:01:37:21:64:83:73:ca:2a:f5:83:
                    1c:14:0e:09:63:9f:64:70:5e:6a:8c:60:ec:ec:52:
                    be:bc:31:89:33:c1:b9:c5:1a:ca:25:7d:8f:ae:95:
                    47:b5:f2:60:6e:0c:3d:f9:66:3f:9d:a4:7b:ce:7f:
                    6b:4c:83:e8:7f:b2:21:6c:3f:a5:2a:ae:9e:50:34:
                    ea:01:90:e1:41:cb:09:d8:cb:d9:2e:51:d2:90:49:
                    67:3a:95:73:7b:40:ab:64:d7:37:9f:77:92:0d:55:
                    22:5b:c1:e0:b3:b0:ed:5d:b8:cc:6e:fc:d9:92:00:
                    ae:1b:fc:9d:9b:5e:04:4b:94:93:a0:0d:b4:aa:e4:
                    ba:be:64:a1:62:5f:41:67:70:70:d1:29:8a:49:35:
                    9c:42:ed:bc:04:3e:d3:d6:ae:13:2d:64:4e:2d:70:
                    d9:fd:c6:c1:cb:9f:08:87:9b:75:c2:81:81:34:e0:
                    66:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C3:7E:14:8D:94:4B:C6:F2:58:58:1C:60:D3:AF:A6:BD:50:F5:29
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/96AD740E509811EF878CEA85C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:cf:e4:03:64:8e:08:f2:b3:10:71:77:65:8e:6c:ae:6e:75:
         9a:c7:eb:28:47:ab:33:a5:e7:61:b2:67:af:27:4a:51:60:9f:
         0e:7b:fa:47:4e:7b:c1:bd:87:af:ee:af:ab:15:a2:83:dd:5a:
         17:78:5d:45:d8:14:cd:2c:f4:24:35:ed:3f:7f:9b:75:b1:02:
         54:c8:c6:39:f7:a7:f6:b6:29:8c:74:ee:c0:53:e2:94:94:de:
         91:e3:b7:0a:3a:a6:15:5f:40:f3:58:bd:9e:61:a4:ba:a0:df:
         02:79:a7:b5:e6:e9:51:4a:46:89:fb:c6:d6:33:dc:c4:a9:4b:
         ed:97:7b:7c:35:e5:f4:53:38:f9:be:33:a4:35:c5:92:72:63:
         bc:31:6b:08:a6:b7:5d:86:ca:d2:d3:f2:20:31:e0:10:68:bf:
         ed:99:ef:c0:62:c3:d9:6f:ab:17:b1:16:34:05:d9:7a:0b:a5:
         44:06:3b:11:49:25:bd:b2:35:89:8a:a2:7b:f7:ee:a8:5b:b6:
         5e:fc:6c:21:df:e1:b8:e2:bb:8e:3f:33:e0:09:93:d2:d0:1e:
         53:31:20:37:72:43:cc:d5:03:57:f3:98:e6:94:1f:8e:8f:41:
         65:6c:02:42:cd:7a:fb:93:2f:1a:0e:14:52:fa:06:f1:c4:d4:
         2d:06:4d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:17:46 2024 by rpki-client on console-fra.rpki-client.org