Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/8E412748A33311EDA2CB2420C4F9AE02.roa
File:                     8E412748A33311EDA2CB2420C4F9AE02.roa (raw, json)
Hash identifier:          agaKvT35E3Jq0ilHrclwTlATlov0trZoPCX9IOtsMC4=
Subject key identifier:   C9:4A:95:D3:63:4F:A6:55:95:2C:67:76:56:69:FD:3D:53:EB:24:41
Certificate issuer:       /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8
Certificate serial:       9E
Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/8E412748A33311EDA2CB2420C4F9AE02.roa
Signing time:             Wed 29 Nov 2023 05:16:38 +0000
ROA not before:           Wed 29 Nov 2023 05:16:38 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     17539
IP address blocks:        58.84.28.0/24 maxlen: 24
                          58.84.29.0/24 maxlen: 24
                          58.84.30.0/24 maxlen: 24
                          58.84.31.0/24 maxlen: 24
                          103.197.44.0/24 maxlen: 24
                          103.197.45.0/24 maxlen: 24
                          103.197.46.0/24 maxlen: 24
                          103.197.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl
                          rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 May 2024 04:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8
        Validity
            Not Before: Nov 29 05:16:38 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6566c936-341f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ab:74:28:47:d3:e9:87:62:cc:c9:b8:1a:8e:
                    15:c5:ab:16:3b:3e:37:50:ee:5e:c7:f4:55:75:b0:
                    06:88:db:95:9b:ea:d2:86:21:f0:6f:82:cf:58:79:
                    b0:9f:f0:e1:8d:57:6a:e6:fe:4e:f5:e5:d7:8c:c9:
                    f0:74:73:1b:63:bf:6d:ed:26:c0:7d:2c:6a:52:fe:
                    38:c2:fc:8c:5a:ac:80:a2:b8:b0:c2:a0:d1:1b:f4:
                    d5:62:a5:f5:ce:fb:d4:93:3b:36:96:4a:63:cf:50:
                    a9:24:96:e5:f8:32:ee:73:b2:4c:28:10:ed:d5:13:
                    85:f4:1c:cc:eb:ab:88:ba:e6:9f:5e:e9:95:c9:9e:
                    48:6f:04:2b:9c:9b:2e:80:98:14:55:d0:4c:93:35:
                    d2:3b:83:83:79:37:bd:15:d9:46:50:89:c8:dc:04:
                    cd:d7:63:a2:46:82:f2:3c:a5:8c:ac:84:ba:ac:0b:
                    3d:41:86:68:6a:8d:e0:11:6f:a0:27:e7:75:3c:1f:
                    7a:bd:52:81:bb:7d:d5:4c:f1:62:a2:d5:30:3d:58:
                    64:59:49:6a:b2:2f:31:68:78:6f:d2:7b:41:84:43:
                    ff:34:de:99:26:09:c2:16:18:4d:01:cc:f9:5b:49:
                    9d:3c:26:a6:db:3f:fb:63:38:f5:6a:05:c5:b5:1f:
                    8c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4A:95:D3:63:4F:A6:55:95:2C:67:76:56:69:FD:3D:53:EB:24:41
            X509v3 Authority Key Identifier:
                keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/8E412748A33311EDA2CB2420C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.84.28.0/22
                  103.197.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:03:72:18:16:f8:fd:df:b6:d4:20:8a:cd:cb:9f:a9:cc:c0:
         9f:e8:e2:fc:b8:de:0b:8a:36:88:b5:11:84:6b:2a:8e:28:25:
         73:51:80:b6:45:3e:f4:fc:32:d7:f0:c1:87:f2:42:99:c5:32:
         30:b3:63:08:dd:17:65:ba:27:8d:b9:0e:19:60:db:46:e6:9a:
         41:79:e1:7b:4a:d0:b3:c4:64:8a:44:c1:da:06:2c:7e:7e:69:
         6e:b5:84:1a:c5:2c:9c:b3:a4:d0:d6:f5:26:a1:5a:76:d5:5c:
         d1:e1:e1:a9:fa:bd:a5:6a:9f:8d:77:e9:f6:77:d4:04:f9:5e:
         77:cd:c1:cf:17:40:e9:fd:eb:31:dc:fa:14:16:83:79:1f:11:
         0e:e6:e1:bf:2e:a5:50:1f:1c:7c:d9:0e:12:0c:6f:0e:ec:d4:
         fb:81:11:35:f2:98:dc:70:76:78:cf:24:a2:40:7c:e0:eb:e6:
         f9:05:b5:d7:31:4f:6e:6f:22:a7:54:30:f3:86:73:03:f9:86:
         78:72:17:76:c9:d5:70:82:fb:86:bf:54:06:4b:f0:95:5c:e0:
         36:0a:d9:35:f6:d1:b2:b6:a9:c4:43:be:e2:12:fe:31:79:91:
         b6:76:a5:f4:19:b8:2f:7a:03:a9:b0:07:a0:e2:ee:fc:eb:c2:
         0d:ef:85:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 06:18:12 2024 by rpki-client on console-fra.rpki-client.org