Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/D8F27C903AD811EF960D9329C4F9AE02.roa
File:                     D8F27C903AD811EF960D9329C4F9AE02.roa (raw, json)
Hash identifier:          wsg3v+PIGe3xbhMlfLBMNff7oO7X7gxUqN2z2srqb9E=
Subject key identifier:   0A:DE:A5:2D:14:18:EF:A5:4E:07:18:09:6A:4E:F7:D7:ED:8C:E0:4D
Certificate issuer:       /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE
Certificate serial:       D9
Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/D8F27C903AD811EF960D9329C4F9AE02.roa
Signing time:             Fri 05 Jul 2024 14:14:10 +0000
ROA not before:           Fri 05 Jul 2024 14:14:10 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     133551
IP address blocks:        103.48.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl
                          rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE
        Validity
            Not Before: Jul  5 14:14:10 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6687ffb2-1670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:31:a9:fe:b1:ab:3d:b1:cb:22:40:21:25:fa:
                    bc:f2:b2:66:30:cc:c3:94:4b:c4:b7:ef:d9:e8:e0:
                    11:4d:9a:23:fc:0a:c7:b6:2f:3c:a2:86:48:c8:09:
                    60:5b:e6:88:2b:40:39:14:a9:33:09:08:eb:68:0f:
                    25:00:ce:6c:49:ab:3a:31:1d:b4:32:8a:9b:d2:fa:
                    00:51:ce:e7:01:83:78:84:12:39:07:8f:a3:af:fe:
                    05:10:c3:2f:99:98:0e:ab:5b:99:95:50:4f:bc:14:
                    30:d7:ec:a6:b9:ee:46:02:67:76:58:2d:11:0f:ed:
                    4d:ed:76:8c:81:a0:ea:96:2a:32:85:af:2f:a9:9d:
                    51:84:9f:13:89:eb:8c:ec:ac:e0:01:72:c8:9e:b8:
                    23:5b:20:26:7a:41:be:3e:24:21:aa:d6:1c:1f:07:
                    7b:6c:5a:b2:1a:27:ae:b3:a6:b1:f1:97:b0:65:b4:
                    fe:f9:e7:87:9b:03:05:64:aa:34:66:a3:62:b4:00:
                    46:dd:08:e7:28:c3:91:8b:19:e5:62:66:e4:0f:c7:
                    eb:d4:a2:99:eb:13:76:32:c1:5f:12:9d:74:24:ae:
                    2e:c5:e1:34:63:c3:6b:f4:cf:8e:cd:49:02:76:93:
                    95:b7:86:4b:41:73:aa:44:23:2e:c4:3d:e5:b2:e3:
                    1f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DE:A5:2D:14:18:EF:A5:4E:07:18:09:6A:4E:F7:D7:ED:8C:E0:4D
            X509v3 Authority Key Identifier:
                keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/D8F27C903AD811EF960D9329C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:ee:a3:9d:02:9e:e6:4f:89:62:3c:36:59:42:f6:66:89:61:
         b7:d7:09:69:63:17:d0:9e:a9:7b:bc:84:b1:87:d0:3a:59:1d:
         ef:7c:8c:4b:34:41:ab:36:4b:03:64:17:a2:74:72:68:a0:ac:
         5f:7f:9c:38:19:c1:52:df:89:bd:a6:73:8c:79:aa:f2:7f:62:
         d7:db:66:e2:d8:29:8f:a3:11:85:da:c9:05:1c:0c:27:81:c0:
         8e:9d:81:87:4e:e7:15:1a:40:e0:17:51:4d:85:6d:52:b8:29:
         c0:ab:0b:d4:6e:66:49:74:59:b4:7d:9c:33:d9:a9:a4:17:36:
         57:83:b8:98:07:ee:6b:96:26:c7:ff:b3:3b:5c:74:c5:e6:f2:
         87:3c:f5:d9:f4:2e:ba:48:05:22:32:72:0b:a7:ec:59:32:7b:
         68:98:ad:af:53:6f:6b:40:d7:5a:26:5c:2c:ab:2d:31:5e:31:
         46:fe:6f:f1:62:e2:fb:7a:dd:a4:91:5f:e6:9f:14:e1:9d:61:
         75:79:d4:78:3e:fb:f8:52:db:f2:16:b2:5d:bd:26:c9:cd:75:
         d3:fe:71:ea:f1:21:d7:86:bc:49:90:aa:db:aa:a7:bc:3f:2a:
         e5:04:36:21:ea:00:46:2f:05:36:67:2d:49:dd:b7:94:c9:eb:
         01:ed:ac:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:01 2024 by rpki-client on console-ams.rpki-client.org