Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/474DC6748C2B11EA90152018C4F9AE02.roa
File:                     474DC6748C2B11EA90152018C4F9AE02.roa (raw, json)
Hash identifier:          JROSBOqjpFrd40FqIvgk1oON7l8TK+ebj1lBnb9r6UY=
Subject key identifier:   64:1D:4E:C4:B4:04:97:99:12:5A:52:03:BA:C4:DA:D6:10:22:08:8A
Certificate issuer:       /CN=A91274A4/serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
Certificate serial:       0AB1
Authority key identifier: 59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/474DC6748C2B11EA90152018C4F9AE02.roa
Signing time:             Tue 12 Dec 2023 20:07:52 +0000
ROA not before:           Tue 12 Dec 2023 20:07:52 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     19551
IP address blocks:        103.77.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl
                          rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2737 (0xab1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91274A4/serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
        Validity
            Not Before: Dec 12 20:07:52 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6578bd98-f357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:cb:86:25:9a:01:b2:35:f6:b2:45:7c:c7:
                    d0:3c:24:b3:49:49:47:ff:e9:53:05:1d:55:cd:0e:
                    cf:62:c8:b7:65:f6:7f:27:1f:fc:b6:cb:d3:a4:52:
                    9d:c5:6c:5b:c5:fe:2c:7f:af:3d:bc:32:df:b1:71:
                    26:f3:bb:fb:e0:75:e0:cd:56:af:1a:29:2a:ce:84:
                    47:43:a3:ca:79:e1:dd:26:bf:66:e3:73:a7:48:fc:
                    b1:3c:2a:96:8c:88:56:bc:61:21:f1:0f:3a:f2:56:
                    42:97:e5:61:9e:02:69:a7:49:30:86:cf:76:fc:fc:
                    56:16:29:b6:ca:e7:75:ba:64:84:1d:55:99:98:93:
                    a3:a4:07:f2:4f:90:0c:1d:5c:c0:96:bc:0f:d2:af:
                    d9:e5:65:af:ac:96:89:43:29:32:1f:aa:84:d5:d3:
                    9f:cf:f6:ff:3e:81:cb:cb:83:8e:2d:6a:80:16:34:
                    19:e8:4c:a0:46:8e:10:54:73:56:4d:fb:83:cf:59:
                    aa:5b:65:73:9f:59:fe:c0:19:13:4d:3a:39:f7:fb:
                    f9:aa:bf:4a:bb:2c:42:e1:7b:0d:ef:ec:be:60:21:
                    15:6e:72:e3:2b:95:ea:70:64:e7:20:35:7d:5a:dd:
                    3e:2a:c2:10:21:df:76:7c:d9:32:1e:0d:2c:2e:84:
                    9a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1D:4E:C4:B4:04:97:99:12:5A:52:03:BA:C4:DA:D6:10:22:08:8A
            X509v3 Authority Key Identifier:
                keyid:59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/474DC6748C2B11EA90152018C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:e9:47:62:27:a8:bd:4c:72:09:d1:6d:b6:4a:21:88:dc:93:
         5b:b6:8f:28:bc:ab:aa:13:ca:ac:51:29:df:c0:f8:02:70:cc:
         ba:22:6f:fe:eb:00:72:7d:da:a3:30:68:10:ab:2d:0b:b1:63:
         d4:aa:e2:31:2e:19:22:c0:0f:87:81:81:85:fc:84:9c:e7:ec:
         43:11:78:ee:c2:cc:2a:2b:85:14:3c:f6:f2:ea:58:cf:d9:49:
         e1:eb:72:cc:36:39:f3:ca:7d:b8:21:fc:92:93:62:29:3c:2e:
         7c:35:6c:22:f5:20:ff:a2:84:1b:77:f4:04:40:66:8e:1a:b6:
         46:b4:54:6f:cb:bb:78:da:2d:4c:52:6e:21:d8:3a:9f:65:1e:
         28:2c:c1:63:30:bd:b3:54:18:06:94:ec:92:ee:e9:4d:df:c9:
         28:2a:dd:47:60:e3:83:60:0d:37:c1:64:48:e3:b4:21:ce:85:
         a2:50:1c:67:4e:fd:ec:c6:57:36:b9:e4:66:63:f7:28:8c:ae:
         55:bc:5c:58:39:d4:e6:7b:d1:5d:fc:05:57:38:46:97:48:cb:
         7f:27:ca:43:71:78:dd:8f:ae:4b:6e:59:f4:e7:6d:1d:96:f8:
         24:1f:ff:91:cb:d7:99:cc:a4:19:0e:63:d1:8d:f9:8d:e6:b2:
         00:58:52:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:34:45 2024 by rpki-client on console-ams.rpki-client.org