Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/85D25098E00111E596BC7D1BC4F9AE02.roa
File:                     85D25098E00111E596BC7D1BC4F9AE02.roa (raw, json)
Hash identifier:          Vr232pRpa36clyG9MJfQ3Kt0Q3MCF1mWYWlUSKtDj8Q=
Subject key identifier:   29:45:2E:04:35:28:08:62:41:08:DB:61:9D:1A:31:61:73:A2:FB:36
Certificate issuer:       /CN=A91F8E25/serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9
Certificate serial:       2010
Authority key identifier: 6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/85D25098E00111E596BC7D1BC4F9AE02.roa
Signing time:             Sat 22 Jul 2023 15:51:48 +0000
ROA not before:           Sat 22 Jul 2023 15:51:48 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     7718
IP address blocks:        103.12.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl
                          rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 15:39:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8208 (0x2010)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8E25/serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9
        Validity
            Not Before: Jul 22 15:51:48 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64bbfb13-472a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b3:84:6f:a4:b7:c0:ae:9d:77:8b:c8:d2:e4:
                    34:21:9a:bc:64:4f:fc:a8:7f:73:4d:62:6d:d5:e5:
                    c8:de:17:00:d1:10:a7:a1:43:76:c4:71:f4:a6:58:
                    29:d1:5c:d2:fb:48:4f:0a:06:97:8a:38:81:bf:d5:
                    4d:71:69:bc:c8:0f:fe:28:9e:ed:1e:07:d1:ce:4b:
                    cd:c1:3d:b0:2d:02:5e:b8:d0:6c:db:96:1d:4b:c9:
                    92:5b:79:68:0c:e5:f0:0c:ec:11:67:5d:f9:04:4f:
                    bd:34:83:ab:63:04:45:06:fa:8a:ec:b8:65:23:aa:
                    41:89:fc:88:07:66:3a:fe:c1:34:7e:06:18:22:b8:
                    13:5d:14:ac:0c:3f:b3:4c:f0:13:e0:47:41:93:04:
                    5f:d0:76:e0:19:d3:39:90:62:44:0a:3c:74:2b:b2:
                    ed:58:1f:45:97:78:f9:1d:09:a8:4b:16:c0:f1:43:
                    ea:c9:3e:0c:a3:50:74:6a:44:30:28:6f:f4:2a:39:
                    36:70:1a:50:ae:03:23:a3:14:81:5b:ef:c4:ac:d0:
                    58:59:b7:7c:59:c1:60:bd:73:03:e1:86:6d:b9:82:
                    f5:22:83:10:1e:3b:90:5d:d9:08:c0:4b:8e:f7:e5:
                    dd:d3:8b:b1:da:90:e5:42:c3:e3:37:b4:20:92:3d:
                    bc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:45:2E:04:35:28:08:62:41:08:DB:61:9D:1A:31:61:73:A2:FB:36
            X509v3 Authority Key Identifier:
                keyid:6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/85D25098E00111E596BC7D1BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:40:e9:08:bc:9b:28:7b:1c:1d:c3:0c:bc:74:17:1d:b7:33:
         e8:a2:23:af:75:03:22:11:bc:83:45:6a:d4:cc:00:98:0d:f1:
         23:cd:78:79:16:3f:7a:2f:e8:74:4b:31:08:49:91:5b:b6:ba:
         0b:f3:39:1b:55:1b:d9:25:aa:5f:cd:fb:48:53:f9:31:92:2a:
         38:2e:02:e4:f6:00:36:49:63:41:64:ce:96:04:86:0f:7b:79:
         4c:fe:81:dd:86:0b:61:78:30:30:bc:0d:1a:25:14:70:45:06:
         be:6d:b6:a3:94:da:bd:40:25:8f:4f:44:07:a1:f0:60:39:1c:
         c7:3d:8e:be:ae:bd:2c:ef:8d:23:8f:02:7c:4f:f7:06:d1:7e:
         48:42:12:25:6d:ae:03:8f:d6:59:60:1b:ea:c3:9a:80:b8:ef:
         25:02:c7:21:20:b3:16:d7:20:ab:ac:b5:d0:b3:f1:33:37:9f:
         1e:d7:68:e7:34:cd:76:5c:54:72:e3:ab:12:68:04:3a:31:76:
         46:6f:2b:5f:4f:36:89:93:0e:7d:9e:7a:7a:7e:b3:db:5c:8c:
         b1:ab:4c:61:5f:4a:9a:1d:fb:b7:7f:9c:eb:66:9e:05:68:d4:
         36:af:ee:7e:25:57:cc:12:d6:be:a5:5c:64:30:2b:ea:76:1d:
         9a:d9:9a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 16:41:45 2024 by rpki-client on console-ams.rpki-client.org