Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/E14507F8011411EAAB0EF153C4F9AE02.roa
File:                     E14507F8011411EAAB0EF153C4F9AE02.roa (raw, json)
Hash identifier:          ZJYTa6/4Mo2ZhGCzzSDSUlHgf//iLKJXvM086ZIoSG4=
Subject key identifier:   78:C2:A2:F9:9D:D8:7C:CA:0E:5D:4F:B1:F0:11:58:8F:DE:F5:9E:18
Certificate issuer:       /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
Certificate serial:       0BBC
Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/E14507F8011411EAAB0EF153C4F9AE02.roa
Signing time:             Sat 06 Jul 2024 19:06:54 +0000
ROA not before:           Sat 06 Jul 2024 19:06:54 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     132829
IP address blocks:        103.69.211.0/24 maxlen: 24
                          119.42.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl
                          rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3004 (0xbbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
        Validity
            Not Before: Jul  6 19:06:54 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=668995ce-79c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:34:6f:c7:c7:9b:db:ad:44:1d:da:c9:81:98:
                    e6:15:7a:24:16:0a:fa:f1:34:73:d6:75:5d:42:cd:
                    8a:f2:d5:d0:d9:56:96:50:f9:6f:10:a0:15:d9:d4:
                    53:0e:71:db:aa:cc:5e:0a:a2:0a:c5:fb:78:0e:32:
                    29:23:53:b4:ed:17:5e:fc:a0:9f:32:21:3c:4d:ed:
                    b7:47:ae:3a:c2:01:52:ea:89:b2:19:8c:42:2c:9b:
                    0e:50:38:09:80:3a:c0:02:20:8a:b6:1b:2b:cd:48:
                    42:32:54:ea:3f:c6:eb:de:24:ce:67:22:ca:58:fc:
                    f7:10:8d:e1:62:a2:22:92:b2:1d:e7:38:d1:9f:48:
                    2b:4b:f0:22:c1:84:56:f0:04:04:3c:1d:b2:df:14:
                    49:60:c0:da:91:32:bf:f9:d8:e4:f4:a7:9a:ea:5d:
                    24:4a:3e:5f:87:b8:fb:26:00:ca:b6:00:6c:24:7c:
                    d9:c5:94:ea:44:b0:3b:a6:bf:3b:b6:99:a8:c5:f4:
                    7d:f6:67:a9:2f:05:c2:43:32:54:8d:3b:bb:32:f3:
                    74:a6:53:1d:0d:c6:2c:a1:d6:1c:1a:43:de:61:eb:
                    9c:25:dd:da:be:59:ca:83:c2:16:a5:c7:e8:14:34:
                    ab:28:88:bf:b8:06:ee:a8:70:48:fc:d4:a5:84:ba:
                    c0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C2:A2:F9:9D:D8:7C:CA:0E:5D:4F:B1:F0:11:58:8F:DE:F5:9E:18
            X509v3 Authority Key Identifier:
                keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/E14507F8011411EAAB0EF153C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.211.0/24
                  119.42.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:bf:18:5d:0c:b9:5e:5b:80:79:d9:6c:ba:d6:a7:06:d5:3b:
         5b:a4:57:e9:94:79:b3:70:f3:41:9f:4a:37:4a:2c:23:0f:f2:
         ab:9d:e9:40:b7:16:b5:5d:4a:a0:8a:10:8e:bb:22:1d:f1:b9:
         6a:ad:73:40:c4:3a:3b:eb:f2:a8:63:eb:03:60:ec:35:27:a5:
         46:23:df:6d:02:e1:07:5d:6c:ce:b5:48:b2:3b:0f:07:23:7b:
         da:d0:e3:f5:07:65:5e:c9:26:c1:c2:5e:52:99:60:10:81:16:
         81:b9:ad:c0:4d:a7:76:b0:4e:4d:ad:bc:1f:8b:42:5a:5e:92:
         f0:f1:09:1a:0b:44:e1:04:6d:bb:00:b6:36:41:34:f3:59:ef:
         cb:60:a4:d6:48:93:1f:62:6c:3c:0b:7c:e8:3c:f9:0b:0a:b7:
         d3:86:5c:9d:5e:d1:58:7d:0f:5a:c0:5e:9a:4d:e3:1a:a5:22:
         fb:3b:22:8c:9e:53:a2:34:d4:42:0c:51:ce:d2:ac:96:e2:55:
         f4:34:68:cc:37:4c:a3:35:df:4b:a7:71:98:0e:bc:c2:8e:af:
         f9:3e:c4:e3:e4:28:71:d0:5c:1b:3c:86:86:da:83:e8:c2:47:
         42:b6:33:4d:ad:bc:ac:29:bf:3b:fb:c2:4e:48:f7:02:9c:86:
         b4:e3:88:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:04 2024 by rpki-client on console-fra.rpki-client.org