Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/51D4585A89B211EE9ADA615EC4F9AE02.roa
File:                     51D4585A89B211EE9ADA615EC4F9AE02.roa (raw, json)
Hash identifier:          2pLBfFEzGVtLv2cMeVGOzUnHFe1Jg/DT2E9SEr2vDd0=
Subject key identifier:   95:62:EF:3F:7A:3A:F8:C2:4E:10:1B:BF:73:13:17:A0:4B:25:AD:A5
Certificate issuer:       /CN=A919821D/serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
Certificate serial:       8E
Authority key identifier: 88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/51D4585A89B211EE9ADA615EC4F9AE02.roa
Signing time:             Sat 17 Aug 2024 06:27:37 +0000
ROA not before:           Sat 17 Aug 2024 06:27:37 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     137923
IP address blocks:        103.117.81.0/24 maxlen: 24
                          103.119.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl
                          rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919821D/serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
        Validity
            Not Before: Aug 17 06:27:37 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66c042d9-3482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:81:a8:45:3a:10:73:1b:c6:a4:8e:1f:ec:a1:
                    a2:55:1c:ab:76:e4:5b:f5:b6:97:d1:70:63:50:75:
                    1a:d1:a6:20:84:b9:4e:17:3d:4b:cd:9b:2b:f0:1c:
                    1c:f0:14:cd:2c:1e:5d:e2:63:e1:01:a3:f0:0f:3d:
                    36:d6:55:38:bd:a1:77:15:86:e3:d6:60:69:77:9e:
                    8b:9a:54:be:e3:6b:b3:6f:10:99:60:1d:1b:c8:b8:
                    00:a2:d0:b0:3e:44:8b:cc:1e:e1:1e:7c:0f:39:bf:
                    2e:6f:e2:ad:a2:da:40:bf:e2:e1:31:a4:46:62:f2:
                    61:08:ca:41:54:2d:8a:ad:aa:61:62:c7:48:f5:9f:
                    9d:89:ed:d0:08:0b:87:e6:6a:90:a7:54:af:8d:6a:
                    4f:ad:ac:59:de:f8:a7:86:7e:38:78:5e:cf:62:5f:
                    3a:2c:30:6c:0b:c4:75:20:c1:b4:11:6f:d1:82:7f:
                    85:77:3f:b3:3e:72:89:ad:7b:62:5b:dd:51:c5:87:
                    79:d0:91:98:85:bf:2d:28:87:0a:54:6d:36:2f:0c:
                    8c:9c:32:04:b6:31:47:c9:e7:b2:f5:83:a5:42:a2:
                    8e:1d:e0:9c:09:04:ff:85:bb:10:23:47:43:16:e1:
                    65:64:1a:ba:fe:df:70:75:71:38:0f:ae:29:f6:21:
                    43:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:62:EF:3F:7A:3A:F8:C2:4E:10:1B:BF:73:13:17:A0:4B:25:AD:A5
            X509v3 Authority Key Identifier:
                keyid:88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/51D4585A89B211EE9ADA615EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.81.0/24
                  103.119.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:8c:70:6b:e9:10:30:96:b3:9f:c7:20:4c:dd:94:84:83:9e:
         fb:d2:5c:88:f0:b2:74:dd:f6:f9:eb:b0:49:20:f4:87:09:c6:
         39:90:c1:20:6d:dd:4d:99:9b:4d:7b:3c:1c:21:27:67:38:a3:
         09:f7:d9:70:5a:99:2f:e8:6e:bd:33:9f:81:df:56:ba:29:82:
         0f:a4:11:05:03:9a:c8:02:ee:22:0c:13:09:90:61:a1:42:44:
         ce:be:6f:b3:90:a0:8c:76:8c:f3:42:d6:c9:26:f0:40:89:b8:
         61:b6:f7:7f:f2:fc:bd:50:c8:cf:1d:e3:41:11:ac:c9:e9:61:
         78:e0:46:0d:23:6f:a9:1b:4a:a8:cc:c9:dc:ad:ef:c5:e3:fa:
         81:70:33:04:f2:d5:18:bf:97:62:11:05:92:63:41:ae:e5:a0:
         25:74:9a:dc:7e:78:69:84:18:72:e0:3d:5d:33:62:49:04:2e:
         a8:f1:20:a7:87:5b:8c:02:5c:6a:fd:d1:36:5f:37:c7:18:c7:
         7b:a5:0b:11:c8:e9:f8:5b:69:df:4b:93:1a:af:88:96:a2:f6:
         02:e7:2a:f6:97:93:31:5b:d1:23:93:cf:04:73:25:6f:68:a4:
         c6:a3:a3:fb:53:04:7b:f3:91:b4:38:c9:97:dd:30:f0:eb:cb:
         42:60:07:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:16 2024 by rpki-client on console-ams.rpki-client.org