Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/4A93DB1068F511EF8E131B43C4F9AE02.roa
File:                     4A93DB1068F511EF8E131B43C4F9AE02.roa (raw, json)
Hash identifier:          i64E/Cj93LqfKyS/6efZNVFBMvw7oMFHcsbDUqhF3ZQ=
Subject key identifier:   54:6D:29:A4:33:D2:9D:5F:D1:79:CF:0D:59:D8:41:6D:8F:06:49:BC
Certificate issuer:       /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial:       0265
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/4A93DB1068F511EF8E131B43C4F9AE02.roa
Signing time:             Mon 02 Sep 2024 06:33:40 +0000
ROA not before:           Mon 02 Sep 2024 06:33:40 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     141715
IP address blocks:        103.245.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
        Validity
            Not Before: Sep  2 06:33:40 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=66d55c44-3e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:26:26:93:df:ee:df:2a:d0:41:42:fd:f7:f3:
                    a3:b7:91:e1:03:e4:70:dd:9a:26:58:da:d6:a4:37:
                    1b:1c:59:bb:fe:24:00:e1:84:b1:6e:c2:9e:ed:ab:
                    9a:bc:15:f9:e7:6e:0b:8d:9e:fa:c8:94:74:36:6d:
                    72:9e:b9:bf:5c:00:d8:2c:22:7f:a5:9d:72:5b:1e:
                    b6:bd:25:96:5f:0e:b1:af:12:f7:db:bb:e4:5b:07:
                    04:b7:7b:e1:65:ac:cf:8d:c6:af:14:7a:7d:c6:9f:
                    48:81:97:20:cf:80:4d:e7:1b:41:f5:aa:9e:af:19:
                    85:75:33:45:97:e4:da:71:4d:da:83:ac:83:3c:46:
                    ed:87:91:61:19:6c:ae:31:2d:9a:d1:05:c5:1b:bb:
                    55:aa:a4:d0:83:94:bb:2f:d6:fe:44:f5:15:27:f5:
                    76:d9:73:9f:43:b0:08:00:cb:9d:a0:c2:29:c3:fe:
                    1b:2f:14:0d:42:d6:1f:08:cb:5c:1a:d5:c0:96:b7:
                    a5:39:ba:6d:a3:40:de:8b:39:b9:6f:c2:ee:33:4c:
                    63:c1:c8:89:e3:27:1c:68:a5:7f:07:47:d4:77:fc:
                    a2:89:fa:71:72:54:3f:4c:18:f3:03:0a:2d:1a:1d:
                    6e:5f:35:3b:e6:f4:ee:7e:b8:cc:ae:9a:8a:f0:16:
                    6c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6D:29:A4:33:D2:9D:5F:D1:79:CF:0D:59:D8:41:6D:8F:06:49:BC
            X509v3 Authority Key Identifier:
                keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/4A93DB1068F511EF8E131B43C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:e8:79:f9:f7:ca:6e:fd:0e:36:f5:08:ee:72:ca:dd:28:49:
         c9:88:bf:a5:7c:97:5a:cc:81:6d:8f:c7:21:fd:9d:0a:97:fc:
         0a:50:7a:2a:16:49:04:86:b3:85:64:8a:5a:3d:95:3e:ff:c2:
         45:a2:a4:bf:23:4f:bb:b4:e0:bd:6f:01:f5:9c:bd:f6:a3:d2:
         8d:90:9b:23:7c:16:92:3c:34:4f:e1:80:77:48:30:a1:fb:01:
         22:c0:10:d4:82:82:69:43:0e:81:3f:9e:82:ef:c0:65:52:e8:
         5a:17:3b:39:55:f9:7d:fb:d1:8c:f9:7d:72:88:9a:2b:b1:e4:
         35:1b:5b:b4:67:ab:0f:ca:1b:84:a8:aa:36:37:a4:16:bd:75:
         e8:fa:2d:66:bc:1a:7d:85:8f:e4:b5:24:63:0c:5d:02:39:68:
         f9:31:4e:d0:82:d8:71:f6:52:4a:72:7f:32:03:c2:06:58:6c:
         c4:e6:4c:17:e4:3a:95:0c:51:1d:83:3e:71:17:51:97:5c:49:
         09:1f:7d:d0:da:ee:a1:20:d6:6b:f0:86:7b:38:5d:79:fe:d3:
         47:7f:a4:51:e6:88:a7:b2:e3:82:34:2c:ab:c3:79:ed:50:c7:
         61:19:aa:04:b3:07:5b:ff:f4:39:63:1f:e0:2a:13:c4:81:c9:
         8c:cf:3a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:31 2024 by rpki-client on console-fra.rpki-client.org