Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/63884D122F5911EE8D896A87C4F9AE02.roa
File:                     63884D122F5911EE8D896A87C4F9AE02.roa (raw, json)
Hash identifier:          2/gS1Ur7dJJf5ZDU1v4+87+nOeiqSxg5Qxi76bv6NNM=
Subject key identifier:   3A:F1:77:03:8F:D7:AF:2F:CE:E9:B3:65:E4:65:6A:DF:07:3B:64:7C
Certificate issuer:       /CN=A919C355/serialNumber=E8029C842A2C1B0EAB8D2162DB7F7F44DE1C7028
Certificate serial:       69
Authority key identifier: E8:02:9C:84:2A:2C:1B:0E:AB:8D:21:62:DB:7F:7F:44:DE:1C:70:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/63884D122F5911EE8D896A87C4F9AE02.roa
Signing time:             Tue 13 Feb 2024 06:38:25 +0000
ROA not before:           Tue 13 Feb 2024 06:38:25 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     4826
IP address blocks:        103.61.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.crl
                          rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C355/serialNumber=E8029C842A2C1B0EAB8D2162DB7F7F44DE1C7028
        Validity
            Not Before: Feb 13 06:38:25 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65cb0e61-6f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6a:77:c6:9d:22:bf:de:13:f9:94:7e:ad:4e:
                    40:74:64:4a:af:7a:a7:5e:60:96:df:24:a2:5f:a6:
                    0e:81:4a:34:26:32:14:02:bd:e1:1f:d2:88:b5:06:
                    0b:3b:53:57:2a:2c:d3:74:91:99:60:cd:19:4e:ac:
                    e2:66:0e:24:1f:c4:c1:8b:9e:32:f1:c6:52:36:28:
                    3d:f3:18:73:75:86:af:bf:41:1f:95:1a:26:04:04:
                    aa:78:2f:67:c9:06:48:a9:e6:66:e6:03:bc:ea:35:
                    21:b6:38:0e:eb:e7:60:30:8f:e3:06:9b:ba:41:45:
                    50:0e:f5:38:78:84:0e:d6:4e:54:f0:22:7d:3d:d2:
                    7e:b3:dc:35:b7:7c:9b:98:ac:37:88:45:35:2a:d3:
                    8f:4f:17:e2:17:3d:93:23:e6:ef:25:69:7e:88:e4:
                    ba:53:e8:13:19:3d:e5:14:39:7c:f9:fd:23:a6:e4:
                    e6:c1:55:b9:ce:c7:6e:11:d5:4f:38:72:0a:ed:25:
                    2b:87:d0:44:68:8b:4a:52:67:aa:c0:c7:f1:92:6b:
                    12:10:7b:d4:b1:96:84:05:77:36:a1:59:db:b5:4d:
                    04:10:c3:4f:5f:28:db:27:a4:8b:76:c2:79:59:6b:
                    e3:94:2b:e6:3a:3f:37:53:43:f2:91:53:f8:aa:15:
                    e7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F1:77:03:8F:D7:AF:2F:CE:E9:B3:65:E4:65:6A:DF:07:3B:64:7C
            X509v3 Authority Key Identifier:
                keyid:E8:02:9C:84:2A:2C:1B:0E:AB:8D:21:62:DB:7F:7F:44:DE:1C:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/63884D122F5911EE8D896A87C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:23:1b:c3:92:85:ac:0a:2a:f7:fa:ea:a6:89:f4:db:c6:f4:
         e9:64:c4:b8:5b:fa:1f:79:ab:af:83:b5:41:2f:11:25:dd:5e:
         b2:7d:ea:b4:8c:56:89:de:7a:64:be:54:2e:bd:6e:99:e6:d5:
         b0:00:fb:e0:6c:ad:12:e7:2c:d0:69:07:22:99:37:1f:4f:d1:
         1d:35:a8:ec:ae:f6:0b:57:8f:da:13:e1:ec:e6:da:58:4a:87:
         0c:6d:c2:a4:4b:7b:cc:12:8e:c7:75:5a:10:ec:29:c1:10:4f:
         33:60:37:51:31:9f:52:f0:e2:32:9a:7b:c7:ce:c8:01:83:78:
         1d:19:93:34:5e:e1:af:9d:66:53:96:b2:8b:cb:c1:2f:21:93:
         aa:8e:ea:bb:0f:87:40:c1:21:eb:75:9f:dc:d3:72:4a:88:33:
         21:f8:11:89:42:f3:56:d0:36:7b:2e:c0:a1:59:db:92:74:64:
         d6:f4:8a:0f:30:5d:19:6e:91:d3:83:9c:19:fb:b9:52:83:07:
         e3:52:7b:67:3d:32:62:24:7f:61:db:2d:3b:70:5d:35:fc:ea:
         8b:13:5a:fe:6a:3e:05:e7:79:fa:17:1d:33:7e:b5:05:04:fd:
         25:2a:ba:cd:c4:d4:4c:01:0b:3f:05:6a:6c:10:9e:cb:f7:ef:
         3e:1b:6b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:54 2024 by rpki-client on console-fra.rpki-client.org