Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/99596A0EB6C011EE857A8B6DC4F9AE02.roa
File:                     99596A0EB6C011EE857A8B6DC4F9AE02.roa (raw, json)
Hash identifier:          S+EQjcmJkNrMzgltgGdP7/GhPbOf1V3I0dt132szI0E=
Subject key identifier:   19:6B:0A:DB:AB:C8:EC:3B:D1:FF:5F:99:17:22:62:DD:1C:DA:7F:8C
Certificate issuer:       /CN=A911AB93/serialNumber=EDD6A7FA74363E7F63164B1A074E09BE88D23C35
Certificate serial:       06
Authority key identifier: ED:D6:A7:FA:74:36:3E:7F:63:16:4B:1A:07:4E:09:BE:88:D2:3C:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/99596A0EB6C011EE857A8B6DC4F9AE02.roa
Signing time:             Fri 19 Jan 2024 11:48:02 +0000
ROA not before:           Fri 19 Jan 2024 11:48:02 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        103.75.212.0/22 maxlen: 22
                          2407:5680::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.crl
                          rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 16:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AB93/serialNumber=EDD6A7FA74363E7F63164B1A074E09BE88D23C35
        Validity
            Not Before: Jan 19 11:48:02 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65aa6172-c19e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:51:71:77:38:a4:6e:78:35:1d:1f:86:32:4e:
                    7c:17:ae:ee:03:6d:7a:d4:65:13:c6:08:e4:bf:b5:
                    85:31:dc:19:c5:fe:05:6f:b0:d4:1f:ad:46:0d:db:
                    41:78:73:5e:2b:da:08:1f:77:a0:6c:d4:2c:e5:07:
                    cb:35:af:09:b6:3b:81:36:bd:0e:72:35:ac:6a:0b:
                    b2:06:a1:3e:9c:22:65:44:d8:c7:94:86:f1:70:fc:
                    6a:7a:95:d4:f9:b8:0d:9d:40:01:d3:82:a7:6a:1e:
                    86:7a:46:83:89:d9:55:1e:5a:ec:1e:cf:1f:2a:cd:
                    fd:f6:97:f5:a7:55:96:eb:87:97:62:a5:0e:a4:db:
                    b3:80:13:c1:78:52:6c:1a:ed:fc:67:6b:ea:ee:dc:
                    1b:0d:3c:ed:a3:e7:b8:e0:42:98:81:ba:05:1d:1f:
                    87:b5:1d:16:40:8c:11:0c:05:95:9d:0c:eb:9b:32:
                    0f:da:e8:52:9b:14:79:0e:40:59:18:83:d5:7d:38:
                    94:8e:e5:cc:48:55:97:ed:61:02:98:d6:90:4a:71:
                    04:4d:79:8d:41:2e:85:5c:9d:f1:09:de:8f:2f:83:
                    4e:16:70:a4:9e:14:c2:2c:d7:09:40:ca:69:98:dd:
                    f4:20:3b:bf:c7:f0:3f:89:3e:fb:aa:64:56:d5:ac:
                    b6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6B:0A:DB:AB:C8:EC:3B:D1:FF:5F:99:17:22:62:DD:1C:DA:7F:8C
            X509v3 Authority Key Identifier:
                keyid:ED:D6:A7:FA:74:36:3E:7F:63:16:4B:1A:07:4E:09:BE:88:D2:3C:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/99596A0EB6C011EE857A8B6DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.212.0/22
                IPv6:
                  2407:5680::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:05:d1:d8:27:4e:c8:df:ad:d0:5b:79:9d:ba:a0:ba:8c:49:
         e9:3e:c6:cc:c4:e9:de:40:e2:c0:7b:90:b1:48:d1:8b:49:ac:
         8b:66:be:37:6c:25:c4:14:c2:c7:5b:bf:6f:89:de:f1:c9:be:
         08:03:78:24:33:9f:47:cf:b1:50:12:c0:40:c0:b7:08:68:13:
         90:6f:32:50:0a:3c:89:11:bb:f2:05:8e:f5:d4:5a:b9:1d:84:
         7a:e6:77:b2:7e:55:e8:df:05:3c:94:bf:fb:ab:d0:87:66:4a:
         6a:0e:77:e3:33:8a:af:9b:dc:6a:f3:8b:98:b7:a4:6c:d9:10:
         8b:b2:3f:d3:33:ca:1d:27:fc:71:52:98:6b:ca:9e:70:5e:48:
         45:63:1e:08:8c:4e:21:f9:b5:9f:53:4d:fc:09:91:37:97:9b:
         b4:3f:da:0e:e0:6f:d4:e1:3f:75:3c:45:f0:2c:66:4d:a5:6d:
         12:53:75:ec:28:3f:32:e1:de:fd:92:c8:a5:28:d4:7f:d5:9a:
         c4:bb:02:e1:83:a3:6b:35:16:d0:84:0b:6e:2b:4f:c2:4d:8e:
         2c:c0:16:ba:de:48:8c:75:72:94:95:01:c6:2e:b7:76:2f:55:
         ee:e7:c4:2d:db:f5:29:b2:01:9f:f1:e7:e7:c8:7e:4d:33:67:
         a3:95:68:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 17:19:47 2024 by rpki-client on console-fra.rpki-client.org