Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/511EBFFE3E7E11EB979F564CC4F9AE02.roa
File:                     511EBFFE3E7E11EB979F564CC4F9AE02.roa (raw, json)
Hash identifier:          JGwVae5vWzz6HBXwCoXlrwSkJWV/SPa800j6qUmmqIM=
Subject key identifier:   98:48:5D:E5:BE:57:A4:5A:A5:B6:24:7D:DD:1A:D4:89:69:33:A4:20
Certificate issuer:       /CN=A9112BDE/serialNumber=0D0346C8A266BE6ADCE4B7E83950AF5FE1EBE5C4
Certificate serial:       065C
Authority key identifier: 0D:03:46:C8:A2:66:BE:6A:DC:E4:B7:E8:39:50:AF:5F:E1:EB:E5:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/511EBFFE3E7E11EB979F564CC4F9AE02.roa
Signing time:             Sun 09 Jun 2024 00:43:31 +0000
ROA not before:           Sun 09 Jun 2024 00:43:31 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     136585
IP address blocks:        103.93.108.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl
                          rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1628 (0x65c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112BDE/serialNumber=0D0346C8A266BE6ADCE4B7E83950AF5FE1EBE5C4
        Validity
            Not Before: Jun  9 00:43:31 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6664fab2-b824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2a:f0:56:e2:95:80:7f:0f:db:6e:e5:25:70:
                    40:5c:f7:67:33:47:fe:a5:46:d2:a5:bf:7a:5d:4f:
                    c5:65:09:24:89:89:46:94:0b:72:96:10:10:8e:37:
                    a6:3b:ee:b3:64:ad:ef:c7:1f:83:09:9a:7e:0f:1e:
                    1f:9b:f2:fe:54:5c:eb:8b:09:58:bf:98:3d:3b:2b:
                    5a:a8:d1:f5:75:5d:9c:85:49:22:37:ba:8d:ed:30:
                    3f:61:80:1c:03:6d:50:26:99:70:b3:cd:77:4b:5b:
                    0d:42:43:20:e1:bc:92:32:fd:e8:4a:56:fd:72:8a:
                    11:a2:87:1d:ec:f7:35:ba:a5:ed:15:2e:40:e5:57:
                    ed:a6:2c:eb:f8:92:2e:f1:c9:43:48:89:4b:33:04:
                    e2:b0:a0:09:86:c1:f4:06:3c:05:79:6f:e1:48:63:
                    2c:6e:cf:14:90:cf:88:77:b8:2a:eb:13:18:1c:76:
                    f0:9e:f1:0c:02:16:50:65:b8:2a:49:e3:1c:e2:45:
                    8f:20:79:75:57:45:12:18:d0:2d:e8:48:32:60:9a:
                    06:b4:55:99:64:07:21:29:33:82:6a:27:80:bb:27:
                    fa:1a:5c:8c:a0:d3:f3:06:47:8c:ea:37:8a:db:f7:
                    60:07:55:ff:90:17:e1:63:a3:97:5f:65:30:e3:f8:
                    4a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:48:5D:E5:BE:57:A4:5A:A5:B6:24:7D:DD:1A:D4:89:69:33:A4:20
            X509v3 Authority Key Identifier:
                keyid:0D:03:46:C8:A2:66:BE:6A:DC:E4:B7:E8:39:50:AF:5F:E1:EB:E5:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/511EBFFE3E7E11EB979F564CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:01:2f:8d:f1:6b:38:77:0a:15:9d:ab:9c:e2:6b:d0:03:7f:
         c4:2f:22:23:1f:fc:7c:8b:13:cd:e1:d9:28:0f:5e:cb:0d:fc:
         1f:d5:12:7c:ae:38:d1:0e:8b:12:c2:75:f7:fd:8e:fc:98:1b:
         43:43:2f:7c:f6:c4:d9:37:0c:12:5f:52:34:0b:c2:48:6c:e4:
         76:66:cd:51:7f:04:62:55:b3:76:05:e3:8b:14:cb:0c:13:3a:
         86:a6:3c:cb:87:a4:b5:50:37:92:2b:e9:41:f6:4c:81:4c:6c:
         ff:e1:97:34:a3:28:e1:26:57:2f:ff:18:a7:aa:4f:6b:9b:65:
         6f:34:2e:75:b2:08:a4:c7:8d:15:a2:4f:fb:2a:79:fe:07:3a:
         33:c9:cd:4a:04:56:b2:5b:12:f4:b5:25:d8:ca:43:31:ef:33:
         f6:59:c5:31:0b:21:a0:c7:bf:3d:4a:0d:cb:83:4c:e7:2a:65:
         03:69:d9:45:c9:78:44:d7:87:af:42:d6:c9:32:1b:4a:27:85:
         30:3c:61:f8:a9:4d:27:25:24:f7:c3:55:0e:54:b2:ed:53:6e:
         5a:73:22:c9:e6:4a:e0:01:c0:5f:6b:28:24:a8:fe:ed:b3:4d:
         a6:c0:77:c1:32:61:bf:17:62:6f:9a:c9:3a:af:42:24:79:36:
         24:6c:35:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:34 2024 by rpki-client on console-ams.rpki-client.org