Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/F31D6E84951111EFBEBB2926C4F9AE02.roa
File:                     F31D6E84951111EFBEBB2926C4F9AE02.roa (raw, json)
Hash identifier:          RYETi0zkwG+1OYC+IAx2GdRhn5XJnpnss76zM5O7Tmw=
Subject key identifier:   B6:15:6E:B7:4A:77:A0:CE:1B:E4:37:22:AD:3A:B7:A5:67:92:99:C5
Certificate issuer:       /CN=A912C6FA/serialNumber=10C6A96ABFE5689BC7BDE5ABE8A66D952453FB18
Certificate serial:       11FF
Authority key identifier: 10:C6:A9:6A:BF:E5:68:9B:C7:BD:E5:AB:E8:A6:6D:95:24:53:FB:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMapar_laJvHveWr6KZtlSRT-xg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/F31D6E84951111EFBEBB2926C4F9AE02.roa
Signing time:             Sat 02 Nov 2024 17:25:32 +0000
ROA not before:           Sat 02 Nov 2024 17:25:32 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     153370
IP address blocks:        103.131.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.crl
                          rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMapar_laJvHveWr6KZtlSRT-xg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4607 (0x11ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C6FA/serialNumber=10C6A96ABFE5689BC7BDE5ABE8A66D952453FB18
        Validity
            Not Before: Nov  2 17:25:32 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6726608c-bd21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:df:74:f8:ab:bd:42:93:11:c8:29:b9:28:df:
                    23:c4:b6:f1:a7:95:64:c2:dd:f8:9c:9f:f0:19:d4:
                    dd:2f:ff:13:79:62:7d:cd:26:a2:b9:c8:ef:d2:98:
                    58:46:2c:7f:6f:d4:d4:4d:a0:63:91:bb:f3:82:55:
                    08:a2:de:35:d4:fd:c7:56:d4:c3:62:dc:50:d8:92:
                    61:84:a8:93:96:e0:14:d2:b7:97:cf:5a:35:e3:11:
                    27:c4:33:b2:e8:ca:9c:ef:f4:ee:0f:23:4e:d5:62:
                    30:73:4c:df:bc:7c:1f:4e:cc:8e:6e:e9:98:e3:76:
                    18:70:35:55:11:cb:00:62:3a:75:67:2f:cb:ea:ab:
                    b0:1b:04:07:af:a7:55:8b:8e:28:d3:26:74:de:4b:
                    dd:5e:75:bd:77:5f:8a:a7:41:8e:3c:e5:db:d2:7e:
                    92:33:94:4b:d9:8e:d1:21:f0:58:f5:b6:88:e5:84:
                    92:30:f5:5b:98:4e:a0:9c:a8:51:8d:be:18:2a:7b:
                    08:5a:51:ba:09:88:58:8f:a2:0b:d9:b5:42:5d:94:
                    70:b0:f3:6d:aa:e3:71:ee:9f:8d:84:2b:fc:54:89:
                    65:4a:74:ec:5a:1e:6c:e7:a3:0c:4a:ac:c5:f6:77:
                    c2:84:41:9b:35:91:1c:91:48:96:b7:1c:b8:22:03:
                    40:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:15:6E:B7:4A:77:A0:CE:1B:E4:37:22:AD:3A:B7:A5:67:92:99:C5
            X509v3 Authority Key Identifier:
                keyid:10:C6:A9:6A:BF:E5:68:9B:C7:BD:E5:AB:E8:A6:6D:95:24:53:FB:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMapar_laJvHveWr6KZtlSRT-xg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/F31D6E84951111EFBEBB2926C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:19:a7:b6:f9:90:b7:05:dd:86:12:2a:dc:79:71:81:c7:a2:
         8a:c1:d7:97:52:f3:e1:55:b4:0b:2e:db:67:46:0c:20:4d:51:
         48:ea:02:18:34:d4:aa:d7:e2:5e:72:6f:e5:68:d2:89:11:e6:
         96:ea:b7:7f:23:98:12:27:f1:cf:85:87:ca:d0:0b:e5:06:4e:
         ca:1d:55:9a:d9:19:c3:4c:26:64:ef:5a:42:2e:69:e3:26:a7:
         d1:78:34:74:1f:d8:d2:34:87:32:91:21:1c:a1:ac:3a:80:70:
         ab:b4:82:be:4c:c0:9b:c7:38:a7:1c:78:0b:35:d0:ce:fa:8f:
         d9:b5:63:14:bb:22:45:c8:02:9d:e7:fb:de:92:b5:11:24:10:
         11:94:82:25:9c:b0:fc:8a:7d:d1:6f:0c:31:cd:f3:ea:1e:04:
         44:13:15:00:a6:12:66:b1:40:cf:ba:55:a3:9a:55:bf:1f:d3:
         1a:d4:f3:b6:40:06:56:01:a2:ff:b0:06:35:cb:c8:f2:74:f0:
         1b:8c:82:15:c3:2a:2b:5a:0c:db:11:ae:e9:bb:e9:f3:b8:e8:
         9c:a7:63:9e:c5:52:6a:9b:06:f2:5f:8e:b4:a8:21:e6:39:e5:
         7b:83:c5:c3:ee:95:f2:c3:4a:17:07:8f:6a:6d:16:c5:9a:a6:
         1e:94:54:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:40 2024 by rpki-client on console-fra.rpki-client.org