Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8D3981D8E27F11EEA6719536C4F9AE02.roa
File:                     8D3981D8E27F11EEA6719536C4F9AE02.roa (raw, json)
Hash identifier:          Qb2a5Um+RHBVJhp5rbhaL4h5O8P9X+wU4eMF3v1ky5k=
Subject key identifier:   B9:EF:E6:DF:10:79:FE:45:BE:8A:0E:B2:9C:37:BD:71:5A:52:8B:44
Certificate issuer:       /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial:       1C1D
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8D3981D8E27F11EEA6719536C4F9AE02.roa
Signing time:             Fri 15 Mar 2024 03:53:15 +0000
ROA not before:           Fri 15 Mar 2024 03:53:15 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        103.81.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
                          rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 16:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7197 (0x1c1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
        Validity
            Not Before: Mar 15 03:53:15 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65f3c62b-4083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6b:63:5a:0f:ce:92:cc:e6:c3:9b:dc:1b:14:
                    20:f7:d3:2e:30:da:37:35:9f:ad:1e:27:e2:d7:a9:
                    82:8a:b7:62:5a:70:47:4b:c5:c4:db:89:7f:2c:02:
                    c8:31:ba:ee:da:4c:ff:e9:30:92:81:47:ff:1f:34:
                    14:ef:77:74:47:a6:58:b6:e5:aa:af:90:d9:1b:28:
                    fb:3b:7f:ec:5e:c8:7a:b2:fa:ac:f1:46:3e:18:86:
                    16:ec:39:ae:01:99:a3:5f:7d:43:c2:33:1e:15:94:
                    ad:9b:ea:0b:83:a4:d0:13:5b:f5:74:8b:f4:da:9c:
                    38:5e:6b:d0:39:a1:33:75:00:29:2a:22:a1:18:87:
                    e1:53:89:f9:40:94:df:9a:fa:19:45:40:fa:91:7e:
                    9e:21:67:93:2f:d6:1c:19:79:e2:71:fa:37:ad:43:
                    1a:c7:f2:78:9a:d0:03:b7:2d:9d:d7:39:12:ce:8e:
                    b4:47:3b:e2:32:1a:f3:27:7f:60:8a:aa:40:c8:f3:
                    ad:fb:9b:7a:62:e4:cb:65:16:e9:39:1b:af:57:7c:
                    6b:56:b9:7c:99:ae:cc:5d:df:fe:64:77:1b:9f:c0:
                    b0:ca:5a:8e:17:a2:8d:42:91:3b:67:ff:ed:98:e3:
                    0b:27:96:fc:1d:a7:7d:96:91:64:38:16:72:f4:ea:
                    d6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EF:E6:DF:10:79:FE:45:BE:8A:0E:B2:9C:37:BD:71:5A:52:8B:44
            X509v3 Authority Key Identifier:
                keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8D3981D8E27F11EEA6719536C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:f2:13:23:97:88:f0:ca:21:4e:dc:0c:06:41:c0:69:7f:d3:
         61:4a:48:8c:0a:e7:a6:17:22:2d:22:8a:71:6e:4b:e1:78:a1:
         33:aa:9f:bc:45:43:db:5a:1b:ef:25:58:76:5f:fe:4a:c3:e6:
         bd:97:97:70:0b:c3:ed:c5:93:82:a1:52:01:4d:5d:e1:42:be:
         54:50:d1:7d:7a:bd:92:f7:fc:5f:78:ec:67:e0:9b:a2:fe:18:
         04:e2:8e:1f:91:47:7e:74:a2:9d:7c:ba:26:20:3e:2c:47:b3:
         1b:8d:d8:50:d2:78:68:99:0b:c4:81:00:60:bb:33:e2:f6:f3:
         3e:e7:75:06:5f:c8:d6:f4:ce:9f:4e:a0:68:d6:f9:89:30:16:
         35:7d:49:95:b0:2f:62:47:a7:af:91:7c:e8:10:33:5c:d3:d0:
         e5:49:94:c8:27:09:99:48:f5:07:39:cf:82:94:4b:bb:9d:f1:
         0b:59:dd:c5:ad:e3:f6:25:f8:35:ab:d5:c8:32:39:7d:aa:bb:
         d9:6d:77:94:c6:9f:d8:f9:98:71:c4:a9:a0:bb:59:02:bb:dd:
         9a:25:0e:34:c3:0b:ef:b4:7d:6e:cf:a9:23:10:52:1e:ce:b5:
         3c:54:8e:1f:0b:e0:3e:fc:d9:a3:67:91:69:59:15:51:c2:7c:
         5b:8f:a3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:20:46 2024 by rpki-client on console-ams.rpki-client.org