Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/207B27560EE411EDA32ABE0FC4F9AE02.roa
File:                     207B27560EE411EDA32ABE0FC4F9AE02.roa (raw, json)
Hash identifier:          mcE/IJHhNlxSeNevkXhbHkK77FCAYAyssZWA6yEpRCo=
Subject key identifier:   72:BA:D9:8D:B3:F0:61:81:25:E6:53:72:BC:51:BE:A6:C3:94:6B:70
Certificate issuer:       /CN=A912391D/serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0
Certificate serial:       01A5
Authority key identifier: 05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/207B27560EE411EDA32ABE0FC4F9AE02.roa
Signing time:             Sat 13 Apr 2024 04:27:06 +0000
ROA not before:           Sat 13 Apr 2024 04:27:06 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     45657
IP address blocks:        103.6.105.0/24 maxlen: 24
                          103.99.211.0/24 maxlen: 24
                          103.99.224.0/24 maxlen: 24
                          103.99.225.0/24 maxlen: 24
                          203.12.45.0/24 maxlen: 24
                          203.166.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl
                          rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 04:39:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912391D/serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0
        Validity
            Not Before: Apr 13 04:27:06 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=661a099a-1c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:99:1c:aa:c6:e8:7d:36:5f:ca:05:c6:ac:ba:
                    26:1a:cc:a1:5c:97:80:cc:59:30:d1:9d:8b:57:c9:
                    74:86:b9:32:cc:1e:f8:11:13:d0:d6:11:76:da:c2:
                    cc:6c:62:53:07:90:91:3c:52:5b:dc:a7:d8:55:3b:
                    e1:88:da:89:64:aa:c2:62:db:b6:d9:f9:fe:a1:70:
                    f7:ca:d2:56:a5:df:b6:89:27:20:b8:d3:50:4e:4b:
                    e1:e5:17:3a:42:79:6c:bb:f8:27:76:33:e2:ea:ce:
                    b9:47:6c:18:ca:8b:79:16:b3:f8:4b:92:89:5b:d5:
                    a6:06:c5:67:b9:af:ee:1a:92:01:89:b0:25:7e:9a:
                    12:b3:cf:f6:43:cf:9c:66:26:d8:42:48:fb:8b:06:
                    e9:81:17:ae:0d:7a:1c:9e:67:e4:79:39:29:f3:85:
                    92:4c:37:47:41:d7:87:21:d5:e9:52:ad:0e:66:dd:
                    92:2f:ba:67:c9:c9:27:4a:83:1f:dc:52:81:da:56:
                    ec:8c:ef:f9:13:73:aa:df:51:0a:2b:9d:c1:fc:7c:
                    f0:ec:5f:78:c7:86:c3:3e:2c:5a:7e:43:c3:27:a0:
                    da:b7:ec:89:ea:de:9b:14:12:1d:0c:06:2c:fa:d9:
                    cf:01:6f:23:e6:66:27:63:33:9a:49:7b:77:77:b5:
                    3a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BA:D9:8D:B3:F0:61:81:25:E6:53:72:BC:51:BE:A6:C3:94:6B:70
            X509v3 Authority Key Identifier:
                keyid:05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/207B27560EE411EDA32ABE0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.105.0/24
                  103.99.211.0/24
                  103.99.224.0/23
                  203.12.45.0/24
                  203.166.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:b5:c1:54:9e:b7:1a:60:ec:1e:cf:7b:5f:b8:34:36:5f:6c:
         19:56:42:f4:8c:46:36:94:c2:f3:33:4e:ee:cd:32:49:58:60:
         11:29:72:ee:59:5d:d9:c6:eb:3f:ac:6f:da:dc:9e:ef:89:5b:
         99:f9:17:d8:bd:a9:d3:8d:27:e4:be:77:57:21:d1:a5:61:23:
         52:c0:c9:5c:ae:e5:c2:cf:94:a4:49:59:76:f4:08:79:4f:f0:
         e5:9b:ef:75:04:60:a6:71:1e:fe:d2:72:13:61:63:16:09:07:
         d9:34:76:25:85:a5:0c:f3:49:2a:b6:ba:9c:ea:a8:f7:4a:a2:
         5a:bf:29:e7:40:2a:38:b1:40:6b:11:96:62:2b:25:c1:4f:62:
         3d:d9:bd:83:ab:8c:a5:9a:b1:1e:da:22:bf:cd:ee:82:e0:a8:
         92:55:a3:b2:d5:9d:fe:f0:d7:97:24:73:8d:e2:b2:e7:25:14:
         9b:31:80:8c:20:f7:03:27:e2:8d:ce:6e:8e:ac:a0:3e:62:7d:
         39:4b:f9:67:07:9b:97:1b:78:ca:75:02:56:ba:e5:aa:07:58:
         56:f5:5f:82:0f:e1:74:81:7b:91:05:0c:54:bf:5b:31:b1:11:
         62:04:3a:80:13:80:29:c4:a5:3f:9a:46:3e:fc:72:1b:c1:53:
         9f:db:c9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:18:04 2024 by rpki-client on console-fra.rpki-client.org