Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/CCB0DBA8CB2911EE9CE70483C4F9AE02.roa
File:                     CCB0DBA8CB2911EE9CE70483C4F9AE02.roa (raw, json)
Hash identifier:          sgSXd3m9mDi3ZHfWlaTLdX/V0PIgSoBQzzaSnrjqwOQ=
Subject key identifier:   9F:85:DC:01:C9:72:D2:BF:AE:0F:C2:C4:B4:61:3E:F2:8C:7E:3F:0B
Certificate issuer:       /CN=A912804A/serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
Certificate serial:       FC
Authority key identifier: BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/CCB0DBA8CB2911EE9CE70483C4F9AE02.roa
Signing time:             Wed 14 Feb 2024 11:11:28 +0000
ROA not before:           Wed 14 Feb 2024 11:11:28 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     134603
IP address blocks:        103.20.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl
                          rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912804A/serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
        Validity
            Not Before: Feb 14 11:11:28 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65cc9fe0-d134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:2c:31:fb:8d:2d:d7:93:30:cd:76:47:f7:
                    41:86:63:c3:72:7e:0e:23:d1:c4:7b:32:af:ba:f0:
                    98:d3:ff:09:aa:0e:15:8f:56:e2:78:aa:58:e7:28:
                    7e:4d:3b:2e:97:06:ca:a5:6c:b7:9d:e5:e1:35:34:
                    c9:e5:23:58:b2:87:61:e6:8f:f8:b6:cb:e3:8c:a2:
                    17:b3:f0:3f:e9:30:99:ac:7c:c9:b9:71:5f:a0:0e:
                    5d:fc:3d:5f:86:ee:8e:e4:21:76:dd:df:fb:cd:2e:
                    64:6d:33:ca:eb:97:5c:fe:af:a2:a7:fa:9f:32:66:
                    38:03:f5:a6:ba:af:bf:b6:6b:21:be:3e:54:9e:05:
                    ac:60:c6:4e:e5:70:9e:5b:8e:24:ca:0b:32:92:70:
                    77:44:3d:28:4c:d8:6a:b5:4b:73:c7:37:a2:b0:5b:
                    27:aa:dd:cc:86:55:41:e4:b9:de:fc:ee:21:04:90:
                    bd:e0:a1:96:30:b9:dc:dc:e7:ac:c7:ab:e7:57:1b:
                    ff:b3:c2:69:67:5d:08:02:21:44:54:8a:3c:ca:d0:
                    1a:1a:c2:75:7d:b1:3c:b8:c3:26:c5:d0:47:84:e9:
                    2b:a0:1a:2b:93:d1:22:0f:00:75:8e:ee:d9:17:77:
                    79:37:ae:bf:0c:10:c3:0a:72:15:cb:9b:f3:b9:4b:
                    b6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:85:DC:01:C9:72:D2:BF:AE:0F:C2:C4:B4:61:3E:F2:8C:7E:3F:0B
            X509v3 Authority Key Identifier:
                keyid:BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/CCB0DBA8CB2911EE9CE70483C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:c3:db:7f:63:99:88:96:8f:bb:6a:c0:cc:ab:09:d4:ec:08:
         83:83:71:82:d4:73:5c:a0:30:0f:80:6e:b3:f4:8f:62:52:da:
         47:8a:2a:a8:78:cd:49:a2:f1:05:43:05:48:43:23:0e:5f:23:
         b0:06:b6:76:0f:ea:f8:3a:03:fd:53:ec:9c:19:84:59:21:81:
         41:60:84:66:b2:6f:98:6d:cc:84:60:6c:d7:de:ed:a5:b4:f5:
         be:9f:59:c8:25:e1:ed:7f:16:2a:b6:24:30:a1:c7:ac:38:fc:
         ad:b5:07:1f:dc:d5:19:7c:40:af:9f:d5:54:c0:89:89:3a:3c:
         6e:3d:2b:0c:61:3f:ac:e9:09:a0:aa:22:0f:0b:79:16:be:58:
         07:07:2b:e8:3a:f2:6f:3e:9a:75:82:bd:dd:23:08:a4:64:65:
         c5:84:0f:0a:91:2f:58:75:59:c1:98:1b:c6:b1:bb:36:0c:e9:
         57:64:1f:e4:ba:7d:4f:1f:b7:e6:0c:08:4f:c2:da:4b:a7:8e:
         79:ae:30:a0:db:bd:9d:fc:d9:9a:73:14:b4:17:3e:f1:81:c6:
         e7:aa:7c:d6:d5:2d:19:a9:5d:23:01:3b:f6:eb:3b:0b:e2:38:
         ce:a5:e9:a7:60:b1:21:e6:f7:00:b4:4d:0b:91:9a:6c:ab:14:
         5e:fd:6e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:03:35 2024 by rpki-client on console-fra.rpki-client.org