Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/A6550254216E11EF88CCA84FC4F9AE02.roa
File:                     A6550254216E11EF88CCA84FC4F9AE02.roa (raw, json)
Hash identifier:          MFVbhCl11Kzm7cn7M1nmvHQU8bIuYVjXgotLCGuAQv8=
Subject key identifier:   72:7A:81:50:C5:02:56:8D:DE:58:E1:E0:35:29:C7:93:92:6A:1B:30
Certificate issuer:       /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
Certificate serial:       03
Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/A6550254216E11EF88CCA84FC4F9AE02.roa
Signing time:             Mon 03 Jun 2024 06:00:59 +0000
ROA not before:           Mon 03 Jun 2024 06:00:59 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        117.18.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl
                          rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
        Validity
            Not Before: Jun  3 06:00:59 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=665d5c1b-a665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:67:84:b8:c7:c0:40:86:65:3c:57:7e:68:
                    87:ed:c7:8c:d1:7e:27:cb:1f:cc:72:5a:bc:9b:d9:
                    20:dd:0b:ed:e6:17:0b:cb:ca:ef:92:e3:0e:fe:4d:
                    60:d3:31:66:8b:ad:f5:f4:b9:79:68:8a:a7:f6:23:
                    41:b0:57:f0:43:95:92:c2:20:23:24:c3:4f:02:b2:
                    ab:5b:45:9f:aa:7b:ee:53:af:ef:92:dd:42:7e:5c:
                    b1:2b:27:59:b5:35:cc:1b:fe:33:0b:12:8a:44:d0:
                    f5:6b:57:e8:f1:79:62:58:b8:f3:22:e1:9b:52:80:
                    e7:56:d3:3d:82:cb:3e:70:c9:dc:f6:28:31:aa:c6:
                    27:ed:47:c6:9b:82:5e:55:f2:2d:60:8e:c5:4e:1b:
                    db:5f:46:73:ef:0c:8b:a9:c4:31:86:9b:f9:8a:fb:
                    01:89:ba:d2:f5:8f:14:26:7e:7a:48:94:b2:1e:e8:
                    0b:85:82:3c:6d:d5:b2:d5:4e:05:96:2a:90:af:98:
                    b4:5e:cd:a2:67:fa:c0:fe:03:ca:2c:78:90:23:22:
                    7a:30:01:f2:0d:3d:ac:43:1b:98:ef:72:e9:e4:a8:
                    ae:7c:c2:b6:69:61:06:96:ea:e2:c3:09:1f:9d:f8:
                    d2:92:d9:59:20:8f:15:94:a6:63:6d:16:6f:2e:04:
                    9b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7A:81:50:C5:02:56:8D:DE:58:E1:E0:35:29:C7:93:92:6A:1B:30
            X509v3 Authority Key Identifier:
                keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/A6550254216E11EF88CCA84FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.18.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:64:e0:27:ce:a1:e8:fa:6a:a7:70:4e:a6:5c:8e:fa:a4:2e:
         a7:bc:e2:bc:27:0e:6c:45:bb:ca:d8:5d:82:ed:ac:ec:6a:bd:
         ee:31:08:9f:93:cd:cc:62:8b:e5:06:c5:4d:5d:79:a9:d1:59:
         c6:fa:34:5f:93:9b:06:f8:11:3d:ea:35:f6:92:57:33:9a:98:
         7c:3b:40:84:82:55:29:31:43:0d:1b:35:06:f6:3f:05:5e:31:
         e3:97:fc:e2:4e:f6:68:52:3a:e8:f1:62:e0:b0:15:8f:88:31:
         cb:1f:d5:08:8e:4a:a2:9e:d3:be:46:59:71:48:83:13:ef:cb:
         f6:82:5c:c1:89:7f:cd:1c:81:9d:43:92:c2:e7:d0:3a:97:10:
         be:75:dd:a0:f1:90:92:6c:3a:14:a3:b6:0d:9b:90:b6:bd:a7:
         02:96:33:e5:33:9e:f4:68:fd:83:af:ba:2e:46:80:fe:56:9b:
         69:4b:4a:e5:0f:cc:69:eb:e2:aa:c8:db:6b:fd:fa:4a:d0:49:
         95:ad:46:ed:dc:27:07:17:ab:d1:38:e7:af:64:7d:dc:d4:a6:
         c7:8a:c4:b9:1a:40:bd:b4:70:17:e6:8f:4a:db:86:2f:14:02:
         bb:81:be:38:bb:32:88:16:ae:4d:5b:65:c5:e2:44:a7:cd:d7:
         03:15:1b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:01 2024 by rpki-client on console-ams.rpki-client.org