Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/ADB6934A9A4911E7857CA62FC4F9AE02.roa
File:                     ADB6934A9A4911E7857CA62FC4F9AE02.roa (raw, json)
Hash identifier:          Pqm+kfFVeVJJT52PIyCw8FkJYkhG46t2Pk315FyyFs4=
Subject key identifier:   DB:3D:7C:BB:42:9D:C3:96:2C:DF:C4:11:46:C0:A6:CF:43:4F:69:7E
Certificate issuer:       /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF
Certificate serial:       1B1E
Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/ADB6934A9A4911E7857CA62FC4F9AE02.roa
Signing time:             Tue 30 Apr 2024 16:54:21 +0000
ROA not before:           Tue 30 Apr 2024 16:54:21 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     64077
IP address blocks:        103.205.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl
                          rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6942 (0x1b1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF
        Validity
            Not Before: Apr 30 16:54:21 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=6631223d-35c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:10:8c:f3:a2:88:34:be:c7:91:90:34:1e:b4:
                    1d:84:50:32:7a:98:01:c2:fd:9e:17:98:f3:fd:9f:
                    ef:09:15:e3:60:c4:2e:c4:44:92:a6:5b:19:b8:6f:
                    0e:e6:f1:f1:3c:b0:b6:fa:24:4a:ae:72:47:a1:5a:
                    6f:07:a4:1a:9a:1d:7b:eb:a8:09:d6:42:72:f2:60:
                    77:c1:4a:1f:0f:e1:d5:c3:5d:2d:7b:76:1d:8e:e9:
                    59:30:dd:40:b3:63:93:82:5c:48:4c:e7:6e:b8:81:
                    ce:48:d2:09:8a:53:d0:1c:a3:b7:d2:57:05:57:78:
                    9c:6e:da:e8:bf:d7:2b:49:0d:b6:d6:7f:75:8f:52:
                    ce:b0:d8:a2:3d:ba:31:74:b0:61:fb:60:01:f1:fc:
                    bd:c7:04:f2:ea:6a:bd:d7:bd:ea:bb:3f:a0:ad:f9:
                    df:09:82:c9:d1:25:da:58:d5:07:9d:9c:a9:c0:30:
                    81:f4:78:78:7c:a4:35:f7:d0:7c:b5:e4:c0:95:e5:
                    ce:d7:77:99:cb:e5:27:24:6c:3f:f1:da:2f:d2:39:
                    a7:ae:f3:32:1e:00:d5:6b:c4:82:a2:5e:37:0a:94:
                    a3:0d:4c:e9:a7:9b:bb:a9:48:bd:3f:87:27:80:95:
                    c0:db:08:05:42:a1:a3:f3:fe:b7:73:47:fe:bd:44:
                    a9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3D:7C:BB:42:9D:C3:96:2C:DF:C4:11:46:C0:A6:CF:43:4F:69:7E
            X509v3 Authority Key Identifier:
                keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/ADB6934A9A4911E7857CA62FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:28:2a:47:0b:5c:e6:cf:08:23:46:0a:03:26:53:d0:de:d2:
         b2:dd:50:20:78:64:70:62:7b:16:c1:b2:c6:b8:73:93:e6:f2:
         1f:0c:3b:c7:c2:30:41:96:74:4d:6c:37:23:24:95:01:08:2c:
         a3:4a:92:3f:f5:0d:27:61:e8:c0:69:f4:dd:d3:cc:5c:69:f9:
         60:8d:62:e0:f2:ff:f3:3d:54:5a:af:54:fe:70:0b:cf:bf:5c:
         7b:30:07:88:4a:f8:cc:73:04:29:35:54:34:fd:b1:91:e5:aa:
         f4:ab:20:ff:00:12:61:1c:69:cc:f1:d7:fe:2e:60:1a:c8:aa:
         68:a3:79:92:8d:4a:2b:eb:8f:ec:54:c6:ef:f9:73:30:19:9b:
         8e:30:28:10:0e:30:75:e9:35:07:00:a3:c1:24:79:74:4d:58:
         b3:67:5f:a2:6a:6c:4b:97:a6:ce:c2:0e:4b:74:d5:09:02:39:
         ae:35:76:da:4e:40:9e:32:e2:b9:c2:20:a8:ce:63:fe:85:73:
         c9:51:ff:37:9c:6e:3c:37:e6:53:ce:de:c8:4f:8c:c1:19:ec:
         44:01:b8:90:34:d7:a5:f2:14:ad:56:1b:3e:48:44:11:de:e8:
         06:a1:af:48:34:3d:ed:88:44:b1:fd:30:91:a9:8c:f8:be:51:
         13:c3:f2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:20:46 2024 by rpki-client on console-fra.rpki-client.org