Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/F11B4C14E40111ECBD78E571C4F9AE02.roa
File:                     F11B4C14E40111ECBD78E571C4F9AE02.roa (raw, json)
Hash identifier:          yrgJiB4VmkkkL0wy5q4A23svX1r+S/7CECcoJjyrMso=
Subject key identifier:   93:E0:8C:4C:35:55:4C:5F:76:3B:46:CF:81:E5:E3:F2:C6:E1:C7:76
Certificate issuer:       /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Certificate serial:       03B2
Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/F11B4C14E40111ECBD78E571C4F9AE02.roa
Signing time:             Tue 07 May 2024 02:35:45 +0000
ROA not before:           Tue 07 May 2024 02:35:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58909
IP address blocks:        103.24.200.0/22 maxlen: 22
                          2400:c6c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
                          rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 946 (0x3b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
        Validity
            Not Before: May  7 02:35:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66399380-3d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ba:66:21:ef:e5:fe:7f:50:4d:60:8e:63:d0:
                    20:0c:8c:5b:e0:4b:a8:86:be:63:cb:88:71:78:6f:
                    38:fd:62:c5:cc:2c:65:ff:c6:63:ad:5e:c6:be:95:
                    ce:dc:b8:4c:17:00:7d:8b:f0:be:ac:96:a5:2f:69:
                    e0:0d:a5:3a:f0:19:39:6f:6b:47:74:d5:aa:b0:de:
                    57:09:be:79:62:ae:a8:aa:c9:31:91:be:91:a3:62:
                    6d:60:66:af:94:9c:0a:d8:18:3f:04:89:ad:51:2f:
                    be:6c:58:ce:3e:b6:73:86:55:96:00:25:f9:67:49:
                    6b:5f:9c:9f:49:8d:c4:78:67:4a:f1:9f:c7:40:93:
                    23:10:47:2d:22:7b:80:02:50:72:5a:1a:e6:6e:1e:
                    91:08:8c:60:26:00:7a:94:0e:6a:44:34:2b:77:35:
                    e3:bf:b8:04:68:2e:ea:c1:eb:bd:0c:ed:7a:f7:9d:
                    96:60:e7:6a:bb:51:f9:2a:7f:ca:a2:8e:95:cc:a5:
                    ae:a5:9e:6f:a8:b1:ba:76:9a:c2:c1:42:fb:3a:ef:
                    8f:0a:1f:28:2f:62:1e:f4:b1:70:08:37:64:cd:50:
                    e0:40:1c:f6:30:af:cb:fd:25:b6:d9:7b:f2:23:3b:
                    a6:2b:9c:56:83:e2:39:4c:b4:ab:09:d8:b0:54:db:
                    a8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E0:8C:4C:35:55:4C:5F:76:3B:46:CF:81:E5:E3:F2:C6:E1:C7:76
            X509v3 Authority Key Identifier:
                keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/F11B4C14E40111ECBD78E571C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.200.0/22
                IPv6:
                  2400:c6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:59:c9:e4:9b:41:16:cd:65:de:26:b9:d5:22:d3:11:e4:be:
         3e:ca:58:ca:78:82:ef:eb:47:d5:5c:e1:6a:9d:78:7e:eb:2e:
         03:af:44:aa:dc:67:0a:4d:c9:47:b8:a8:22:a7:2d:e1:c6:c5:
         bb:e3:46:72:85:d3:13:b4:e4:10:8a:e1:eb:d7:99:ea:21:7f:
         88:db:4b:32:31:08:5e:33:66:a9:be:42:75:18:12:19:94:96:
         2e:70:49:48:20:64:c1:15:7f:d4:a8:39:dd:99:4e:8d:94:64:
         96:61:c8:96:00:89:12:e5:ca:c7:b4:5f:a9:e5:b4:a4:31:5c:
         10:45:76:eb:7e:d1:9d:7c:9d:20:59:58:10:20:92:fd:b8:83:
         63:1f:4b:8a:84:51:27:42:f6:bc:ec:d8:4c:63:90:ea:08:49:
         73:fb:af:23:0d:cb:6b:b2:3b:6f:96:15:46:17:c1:36:2b:d8:
         a9:17:e0:0f:18:69:76:0a:be:74:d6:2d:36:ba:86:d9:8f:f2:
         43:2a:ad:03:1c:a6:c0:a9:2c:48:fd:2f:87:e6:d8:5e:a0:1d:
         36:80:63:f6:47:9e:d6:13:8e:38:ab:76:26:ff:71:b4:89:06:
         93:41:ca:ce:61:15:6e:f8:8c:4e:5c:1c:51:b6:d0:f3:67:d9:
         96:68:dc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:16:58 2024 by rpki-client on console-fra.rpki-client.org