Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/D74998AC889911EE83929070C4F9AE02.roa
File:                     D74998AC889911EE83929070C4F9AE02.roa (raw, json)
Hash identifier:          LcRUWMp5ylCBuhjZGpu+Gkyj7S0VtZ4hzyMMM+ZG2m0=
Subject key identifier:   33:6E:6E:44:61:3D:4F:B8:FA:F7:F8:5F:00:15:76:B9:00:C5:17:5F
Certificate issuer:       /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
Certificate serial:       0B65
Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/D74998AC889911EE83929070C4F9AE02.roa
Signing time:             Fri 16 Feb 2024 19:57:33 +0000
ROA not before:           Fri 16 Feb 2024 19:57:33 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     58629
IP address blocks:        103.251.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl
                          rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 19:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2917 (0xb65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
        Validity
            Not Before: Feb 16 19:57:33 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65cfbe2d-9015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:bb:07:f4:2a:03:28:46:81:41:2b:9b:59:01:
                    7b:87:55:c0:c6:c6:74:92:1a:9c:39:ba:ba:27:a3:
                    5a:62:cb:9a:32:ad:12:ab:02:42:f6:de:36:77:da:
                    c2:61:12:d0:2d:58:5b:81:56:00:b9:42:e8:ec:b7:
                    86:2b:11:b7:53:ea:b1:ff:7b:6a:95:0b:07:e8:59:
                    26:ba:41:ed:29:f3:74:0a:2d:6c:56:0b:55:f0:e6:
                    38:b9:97:16:e8:b5:29:80:74:0c:e2:cd:7e:dd:2c:
                    29:86:52:bc:33:03:03:84:64:78:d5:14:1b:5e:f3:
                    54:dc:c6:25:c3:03:3a:8b:86:16:ba:ed:3f:fd:1e:
                    eb:12:a3:6c:14:4f:6b:c1:b5:66:25:1f:18:1e:7d:
                    9a:66:d8:e2:e0:d1:06:8b:5e:1f:33:ff:83:98:4e:
                    11:bd:9f:0e:fa:44:38:30:5e:a9:e0:b1:09:9f:ea:
                    e8:d6:d7:bd:36:aa:ae:fd:3f:cf:dc:f5:1b:db:29:
                    1d:c2:62:2b:f1:d9:79:09:09:b4:52:7f:01:fb:cb:
                    11:b8:10:c6:da:46:89:e6:9a:3f:50:2c:0f:87:cf:
                    b1:8d:cf:73:94:63:9c:1b:7d:4e:51:16:13:7a:c7:
                    b5:1f:cc:29:20:08:c2:04:c5:e7:4d:77:89:ef:81:
                    86:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6E:6E:44:61:3D:4F:B8:FA:F7:F8:5F:00:15:76:B9:00:C5:17:5F
            X509v3 Authority Key Identifier:
                keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/D74998AC889911EE83929070C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:9c:e1:f3:da:48:99:16:f4:be:d2:b0:97:80:41:24:ac:8d:
         6f:a9:63:b9:33:3a:f8:64:f6:06:cf:ed:6a:87:42:3c:97:6f:
         20:cc:68:c9:9b:03:ed:c0:fc:61:34:24:3d:21:b0:d5:46:f6:
         77:dd:44:4c:26:f8:5b:39:e4:7c:57:23:87:c4:af:d9:3e:f1:
         3b:02:81:e5:d8:8a:f1:dc:d7:ba:0b:1a:3a:94:57:08:68:83:
         00:ee:83:5e:d3:9c:81:5a:12:81:e8:26:1a:de:9a:e1:33:6d:
         66:f3:9c:dd:56:e2:27:de:d7:f5:cd:ea:9c:df:2e:77:00:45:
         61:11:ff:45:2d:8f:25:14:16:02:a5:fb:c7:2e:e1:2f:cc:95:
         13:2c:12:1e:47:7e:5f:db:5d:1a:af:04:a3:87:3e:a5:e2:b9:
         f0:12:95:c7:fd:39:08:48:b9:cd:59:cf:5e:0a:4e:65:7d:ea:
         ee:bc:04:f6:93:45:72:21:de:84:11:16:bb:a6:6d:f6:76:db:
         5e:07:d2:c9:a2:ce:ac:bd:92:e9:06:70:53:de:a5:c4:ed:ca:
         e4:98:9a:69:b6:0f:3a:b6:b4:66:cc:ab:9e:25:64:05:5a:8f:
         b2:cc:4b:bb:c4:bb:51:c3:5a:7c:b2:09:c1:b6:12:28:78:3f:
         84:52:3e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 20:49:10 2024 by rpki-client on console-ams.rpki-client.org