Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/34545918BA0B11EE9FC74745C4F9AE02.roa
File:                     34545918BA0B11EE9FC74745C4F9AE02.roa (raw, json)
Hash identifier:          rDNaE/vKw6lZwAV9wFMImDwc7J6mIh2/QNRmkhuzkQo=
Subject key identifier:   A2:AA:EF:B0:BB:DB:35:4A:97:DF:BA:19:4F:F8:9E:FA:FE:F5:0E:99
Certificate issuer:       /CN=A911AB93/serialNumber=EDD6A7FA74363E7F63164B1A074E09BE88D23C35
Certificate serial:       93
Authority key identifier: ED:D6:A7:FA:74:36:3E:7F:63:16:4B:1A:07:4E:09:BE:88:D2:3C:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/34545918BA0B11EE9FC74745C4F9AE02.roa
Signing time:             Sun 06 Oct 2024 16:33:54 +0000
ROA not before:           Sun 06 Oct 2024 16:33:54 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     60068
IP address blocks:        103.75.212.0/22 maxlen: 22
                          2407:5680::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.crl
                          rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:59:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AB93/serialNumber=EDD6A7FA74363E7F63164B1A074E09BE88D23C35
        Validity
            Not Before: Oct  6 16:33:54 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6702bbf2-0c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:43:77:0f:69:10:2c:fa:2a:33:02:20:73:
                    8d:65:20:10:ee:ce:e5:0c:d2:2f:4f:81:10:cc:2f:
                    7a:35:5d:cd:b5:a5:23:95:d1:67:62:56:ba:1f:ce:
                    fc:10:57:10:07:49:23:ef:48:8f:af:ec:9d:f3:2d:
                    8e:4f:bd:3a:fa:bd:0a:17:c3:1d:42:b0:e7:e6:7e:
                    db:af:7d:1a:f4:96:19:be:a0:18:7a:75:70:f3:71:
                    48:45:e3:52:0a:15:1a:65:e1:58:cb:04:4c:85:51:
                    3b:ee:44:4c:14:65:f7:cb:6f:b0:fe:55:9a:81:db:
                    36:8f:9f:a1:d7:d2:71:f1:42:5d:71:97:b4:b3:d0:
                    d9:df:b9:8c:fc:32:46:8e:07:7e:b3:d6:fb:3c:49:
                    de:33:fd:48:d0:9d:98:b4:15:68:49:bf:86:8b:9f:
                    75:5a:8e:ed:a8:3a:23:26:29:c0:53:82:b2:ba:6d:
                    3e:aa:30:7c:b4:e2:57:12:42:2b:99:8e:96:1c:7f:
                    07:02:53:b0:b7:b4:65:5d:7d:fb:64:47:c4:77:5d:
                    95:a7:bd:7d:3e:a3:db:af:73:f9:0b:ff:6b:25:c3:
                    7a:98:0f:94:c6:6c:7c:b9:e9:dd:34:8b:cf:ec:56:
                    41:ae:fc:48:2d:62:33:b3:c1:f9:23:cf:7b:87:49:
                    bd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AA:EF:B0:BB:DB:35:4A:97:DF:BA:19:4F:F8:9E:FA:FE:F5:0E:99
            X509v3 Authority Key Identifier:
                keyid:ED:D6:A7:FA:74:36:3E:7F:63:16:4B:1A:07:4E:09:BE:88:D2:3C:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/34545918BA0B11EE9FC74745C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.212.0/22
                IPv6:
                  2407:5680::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:fc:57:73:e4:ae:24:f9:82:ee:58:07:07:1e:88:78:bc:60:
         8a:a0:c6:a6:e2:f8:89:e9:76:cb:d4:d2:a4:c8:27:4d:55:d1:
         51:13:9a:13:e4:d8:a8:20:fa:df:62:f0:3b:f4:54:a3:cc:83:
         0d:15:4a:ff:12:4d:dd:04:d2:24:4a:4f:95:a6:47:b5:9a:d4:
         d4:fe:f4:57:70:e5:5b:a1:b8:1c:0e:4c:35:bb:5e:6a:c0:2e:
         da:e4:b8:da:13:71:dc:65:32:f1:fa:30:8c:d3:ef:f2:cc:a2:
         da:6e:ae:fe:77:0a:15:e1:5f:1e:6c:df:34:b4:13:f0:74:c7:
         f4:36:9c:96:be:00:e8:7c:66:ac:87:a3:3b:d5:56:0d:7e:12:
         5f:4e:a8:fa:a1:64:76:d9:66:b2:a2:b1:c4:fc:43:d4:a2:07:
         0d:0f:a5:42:62:79:bd:d9:1b:08:29:01:60:ba:d7:5a:09:b0:
         27:23:d5:cd:d6:25:f6:22:58:af:17:d1:e1:39:a3:71:c5:b6:
         a7:23:2c:26:d6:9c:52:38:cc:65:27:d7:6f:b4:42:9a:0a:43:
         41:e0:64:29:a2:24:b1:42:73:cb:f7:c4:ad:16:25:10:ca:08:
         f4:80:6b:0e:e3:04:37:bf:4f:cd:d0:4b:09:74:22:f0:a8:8b:
         18:cf:04:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:24:02 2024 by rpki-client on console-ams.rpki-client.org