Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/DA0AD156799211EFADCD2257C4F9AE02.roa
File:                     DA0AD156799211EFADCD2257C4F9AE02.roa (raw, json)
Hash identifier:          IKJkF5tTVOAg9Gcj+RMqJavUI1QmsLflBy8eIb93AAQ=
Subject key identifier:   48:72:4C:54:12:8E:51:3C:E4:61:CF:25:A8:B3:BA:E1:F4:54:D2:0A
Certificate issuer:       /CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
Certificate serial:       0484
Authority key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/DA0AD156799211EFADCD2257C4F9AE02.roa
Signing time:             Mon 23 Sep 2024 10:01:50 +0000
ROA not before:           Mon 23 Sep 2024 10:01:50 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     132372
IP address blocks:        103.168.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl
                          rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1156 (0x484)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
        Validity
            Not Before: Sep 23 10:01:50 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66f13c8e-1b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:33:8f:bc:53:67:f3:bf:72:37:26:da:05:b1:
                    21:82:a8:a0:0f:a1:4d:4b:77:b7:45:41:01:ef:e5:
                    fb:b2:41:22:de:54:a1:a8:42:5f:fa:ad:6d:a0:20:
                    d2:20:1b:05:28:93:8b:e5:05:fb:f3:20:d8:be:b4:
                    f8:b3:42:95:9d:cb:0b:10:47:97:38:e9:02:3e:24:
                    68:23:46:cf:9b:b0:00:d8:cd:53:9d:13:b4:0a:f3:
                    21:ee:d0:3e:13:aa:5d:24:9a:9a:64:7b:96:f5:04:
                    af:b9:82:72:98:c4:cf:b2:75:5c:45:f9:eb:1d:59:
                    47:a5:da:82:53:75:2a:19:2f:ee:52:0e:32:31:9a:
                    8d:b2:5a:e2:5e:81:32:02:a5:a5:a9:6a:e5:58:ae:
                    5c:d1:ef:df:a2:7f:86:bd:33:2f:c7:74:ae:19:43:
                    4c:37:db:57:74:c5:00:21:d5:98:23:d0:2e:99:72:
                    3f:f4:33:c4:77:48:04:96:35:3a:a6:0a:49:99:85:
                    c3:b1:77:81:f9:c0:ae:9d:b8:0d:fe:75:b0:d9:7b:
                    6b:49:e7:97:28:be:bc:dd:8c:e1:59:b2:94:6e:ea:
                    65:f0:ad:d3:b7:1b:e9:d1:62:c5:28:2d:96:61:54:
                    1b:46:54:b5:f4:7c:9d:e0:1b:3b:80:73:c6:46:8d:
                    bc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:72:4C:54:12:8E:51:3C:E4:61:CF:25:A8:B3:BA:E1:F4:54:D2:0A
            X509v3 Authority Key Identifier:
                keyid:8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/DA0AD156799211EFADCD2257C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:79:20:79:d1:70:c1:11:31:e4:d5:8d:59:f0:26:e2:43:76:
         83:cb:ba:75:26:73:aa:92:d0:74:b7:33:b5:7d:82:71:f2:d1:
         c8:6e:25:6c:98:28:ba:a7:52:a8:d2:e3:13:3c:b4:b4:79:a0:
         7c:cb:47:9c:94:a7:d4:c4:ad:37:b2:ba:75:0b:68:42:b1:33:
         d6:f1:9d:db:0a:e6:48:38:e8:d9:96:70:14:4a:59:5f:e5:c3:
         97:c0:90:81:a5:f8:a9:44:69:eb:b6:ab:c5:52:31:b8:69:ba:
         42:b6:31:03:f1:04:87:7b:6e:79:b6:01:6f:ac:be:e1:04:9c:
         c0:e7:2c:63:14:15:38:41:42:03:1f:93:69:6b:8e:cb:44:5c:
         12:dd:f8:47:14:53:56:24:2e:a2:8a:58:39:6f:e2:af:87:24:
         f4:9c:49:7e:83:5c:1a:5f:bb:8d:77:93:7f:fd:c2:ac:2f:57:
         b2:9f:90:f5:5a:fd:2e:0b:38:d3:5b:ee:48:7b:14:3c:eb:cf:
         e1:2b:4e:0a:b1:05:be:9b:76:31:6e:bb:c7:e0:35:20:87:44:
         cf:ca:ab:34:12:bc:32:cd:7e:47:10:30:57:48:08:8e:00:af:
         4a:cd:45:b2:fb:b6:0a:5d:85:c4:29:56:65:f2:93:94:5d:f1:
         52:61:e3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:32 2024 by rpki-client on console-fra.rpki-client.org