Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/F0B9FBC87B1A11EF8DB5262DC4F9AE02.roa
File:                     F0B9FBC87B1A11EF8DB5262DC4F9AE02.roa (raw, json)
Hash identifier:          NJIWyQ2nBbjKPD+dMf/q6zwfS8TkAOfcwMJJUOX9Ick=
Subject key identifier:   14:E9:F6:E9:3C:90:45:93:A4:B1:88:B7:85:8D:76:30:92:47:4F:9B
Certificate issuer:       /CN=A911DE88/serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641
Certificate serial:       0142
Authority key identifier: BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/F0B9FBC87B1A11EF8DB5262DC4F9AE02.roa
Signing time:             Wed 25 Sep 2024 08:48:31 +0000
ROA not before:           Wed 25 Sep 2024 08:48:31 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58701
IP address blocks:        103.112.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl
                          rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DE88/serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641
        Validity
            Not Before: Sep 25 08:48:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66f3ce5f-7060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4e:62:8d:2c:fd:2b:6e:a6:a6:e3:59:12:d9:
                    a2:74:cc:bc:4f:8f:6f:ba:e3:9c:14:56:cd:99:eb:
                    69:14:95:24:16:5d:17:ed:12:bf:fe:3a:44:5a:2f:
                    aa:f4:cb:6f:1f:ff:d9:69:52:a6:12:a4:78:11:d8:
                    ba:07:cf:63:5f:5c:6b:34:ef:c8:db:86:ad:27:42:
                    7d:9c:18:ea:cc:bd:10:9f:06:08:65:54:c5:d9:95:
                    c1:d5:ba:8c:d1:cc:0b:86:74:7e:20:ae:fc:41:22:
                    45:5e:c5:90:f9:19:f0:af:8a:ca:cf:d0:3f:9a:e9:
                    a7:9a:a5:6b:a5:11:b6:e3:49:90:26:a2:27:01:28:
                    e2:78:23:75:1a:0e:bf:6a:86:03:00:e8:7c:32:16:
                    53:3d:a1:de:5e:0a:40:1d:c9:fb:2e:bd:c4:84:06:
                    e1:a5:cd:92:38:d7:41:b8:16:ac:c3:90:fe:88:b1:
                    79:a2:b6:46:cf:9f:26:ca:a5:cc:50:17:b4:f9:0b:
                    e4:f3:99:8a:19:a2:34:b8:fc:79:99:1a:c6:ea:30:
                    93:c1:35:cd:1b:4f:7b:d0:e3:06:b0:90:f4:85:c1:
                    26:9d:4f:72:38:7c:97:f3:e4:d3:34:77:2a:e9:61:
                    6f:8a:d6:bf:dc:e2:a5:0b:ad:74:d4:0d:ae:c9:57:
                    34:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E9:F6:E9:3C:90:45:93:A4:B1:88:B7:85:8D:76:30:92:47:4F:9B
            X509v3 Authority Key Identifier:
                keyid:BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/F0B9FBC87B1A11EF8DB5262DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:d7:78:dc:f9:08:2d:58:60:99:a2:52:61:ab:33:20:6f:1a:
         49:33:fa:d1:22:92:11:68:67:4c:4f:ee:e6:09:ed:a9:f4:b4:
         79:d1:54:76:28:a2:c5:1f:b5:d7:6d:8e:9c:fa:b3:cb:86:16:
         f8:87:88:c1:9c:ed:65:97:91:be:f2:de:4b:bb:27:f4:47:e9:
         d8:05:d6:79:01:fd:0d:c2:ed:a8:cb:b6:b4:96:a7:e7:5b:da:
         ef:60:e3:42:76:3f:7c:5e:c2:06:3b:11:3d:7e:4a:75:6d:5b:
         2c:d9:8f:05:5e:dd:a1:90:62:c6:07:ab:6f:e8:fa:72:32:ca:
         74:ba:b5:ff:33:6d:d5:41:ce:49:4c:a9:95:4e:83:a1:41:5d:
         19:b6:d4:20:ba:e1:ad:d7:43:fe:aa:3c:b0:25:30:9c:32:27:
         b8:20:8b:47:c2:63:d5:0b:6c:8d:07:22:56:10:ef:84:e0:56:
         06:75:b5:5e:6e:ca:01:a5:5d:3b:75:d6:4a:1d:24:dc:be:5b:
         31:86:fb:5f:0a:0d:37:53:d6:13:f1:be:f5:25:0b:3a:ec:83:
         b7:f9:01:71:fa:fa:d2:37:6f:72:4b:00:ad:4a:2e:cc:69:37:
         c8:e8:b9:15:67:b7:a0:c6:cf:2a:99:09:f4:d8:85:87:52:12:
         a5:6c:61:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:35 2024 by rpki-client on console-ams.rpki-client.org