Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/8497885E04F911E9AF13ED31C4F9AE02.roa
File:                     8497885E04F911E9AF13ED31C4F9AE02.roa (raw, json)
Hash identifier:          AKBOJFiK0CGzPrk1VjRavIF25nDnN6CV5txK6KFEoQM=
Subject key identifier:   35:03:AE:E3:44:97:7A:D4:0E:32:56:6B:2F:54:2C:0B:50:2F:BA:28
Certificate issuer:       /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00
Certificate serial:       10E9
Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/8497885E04F911E9AF13ED31C4F9AE02.roa
Signing time:             Mon 24 Jun 2024 17:57:57 +0000
ROA not before:           Mon 24 Jun 2024 17:57:57 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     63682
IP address blocks:        103.59.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl
                          rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 17:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4329 (0x10e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00
        Validity
            Not Before: Jun 24 17:57:57 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6679b3a4-392a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:58:a4:1e:ea:27:07:97:be:ee:b0:3b:8d:
                    df:47:63:33:af:41:3a:27:96:bf:c1:ec:ec:2a:85:
                    ed:82:00:d6:88:6a:ef:92:85:de:64:7f:7b:13:58:
                    28:c3:8d:1d:06:1a:fc:b4:d4:16:aa:b2:1d:22:be:
                    f6:8a:69:ef:b9:1f:74:9f:1c:6a:d3:ae:47:75:97:
                    12:98:8b:10:1c:73:21:53:1e:d8:70:ae:28:ff:75:
                    c6:1b:c3:96:81:50:2c:7f:c7:ca:fe:a4:b9:b2:82:
                    30:ca:3a:80:db:48:8d:78:2d:0f:40:13:b5:2d:a4:
                    93:bf:63:9b:81:f5:33:09:b7:bc:3b:f2:50:01:78:
                    4d:9f:e7:62:13:ff:02:1a:c1:34:11:c1:e2:50:1e:
                    83:e8:8d:af:d0:37:5c:ba:35:e4:a9:f2:63:4b:f3:
                    30:d2:ce:29:8c:b2:c3:43:ef:ae:92:5e:1b:d0:16:
                    e1:be:04:6c:95:0f:5e:27:aa:50:51:d9:c4:8c:dc:
                    f8:9a:dc:de:f8:d1:3c:6d:56:b5:3d:e5:4f:62:b5:
                    d9:70:b9:fd:ed:19:e4:7d:eb:55:ed:2a:58:07:5e:
                    9f:f8:1f:8e:bf:56:3b:65:81:bb:62:6d:04:88:13:
                    5d:90:50:a6:dc:69:ba:fc:37:75:44:2b:26:51:55:
                    f8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:03:AE:E3:44:97:7A:D4:0E:32:56:6B:2F:54:2C:0B:50:2F:BA:28
            X509v3 Authority Key Identifier:
                keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/8497885E04F911E9AF13ED31C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:90:38:dc:aa:a1:6a:15:ae:63:6b:bd:49:8f:b4:1f:88:7a:
         12:04:03:75:ab:0f:d4:35:6e:80:cc:74:89:ac:78:a5:64:ff:
         3f:14:95:a3:81:15:3b:3e:80:8c:31:dc:68:74:4d:6e:16:7e:
         49:3a:b6:cf:9e:07:89:5f:d1:3e:22:09:91:29:d6:63:84:f5:
         f7:8a:e2:74:14:96:53:79:52:9d:84:e3:db:bc:c5:63:25:ff:
         cf:be:1b:d5:a7:a1:ac:7f:cf:dc:5e:d4:8a:c9:25:92:27:13:
         68:51:b5:be:35:47:6f:f4:e3:ec:83:50:46:9b:a1:e2:23:ed:
         30:05:7b:c2:21:cd:86:ae:09:ed:34:e5:53:56:03:48:8f:1c:
         c5:c9:9c:77:0f:2f:0a:a4:84:e8:5a:ea:63:59:26:9e:74:c6:
         ea:93:76:f3:45:db:b8:f7:8b:7e:de:63:0c:95:2b:48:74:f5:
         fe:e4:c5:ee:b9:ec:35:0c:b6:c0:ad:1b:cb:27:58:40:d9:a4:
         b5:34:ad:f8:d0:8c:82:09:78:78:9f:46:36:7b:37:14:06:ad:
         43:aa:4c:3c:aa:6c:01:b6:98:c8:aa:d3:31:0d:dd:94:9e:d0:
         c8:bd:af:53:1e:bc:1c:cf:1d:1a:3a:85:1b:b0:7c:71:71:1e:
         1e:2a:3b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:44:43 2024 by rpki-client on console-fra.rpki-client.org