Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/15F05240B73511EC8392922AC4F9AE02.roa
File:                     15F05240B73511EC8392922AC4F9AE02.roa (raw, json)
Hash identifier:          Q7tqx8PfjXXe/4YsfVLtvfNz13QYAz3gljaN9IXyzfg=
Subject key identifier:   C3:E9:AC:AA:29:CA:D5:32:10:53:FB:3C:C7:C2:42:DF:DF:4C:A8:90
Certificate issuer:       /CN=A913B6D4/serialNumber=0D5028986A356B69B4AF7D2F6649D6BBDCBE8BED
Certificate serial:       051D
Authority key identifier: 0D:50:28:98:6A:35:6B:69:B4:AF:7D:2F:66:49:D6:BB:DC:BE:8B:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/15F05240B73511EC8392922AC4F9AE02.roa
Signing time:             Wed 15 Nov 2023 00:32:04 +0000
ROA not before:           Wed 15 Nov 2023 00:32:04 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     48024
IP address blocks:        58.84.52.0/22 maxlen: 24
                          103.197.68.0/22 maxlen: 24
                          116.206.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.crl
                          rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 22:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1309 (0x51d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B6D4/serialNumber=0D5028986A356B69B4AF7D2F6649D6BBDCBE8BED
        Validity
            Not Before: Nov 15 00:32:04 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65541184-7d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5d:26:33:b4:ef:e6:64:c7:6b:8e:c4:e8:2b:
                    70:99:36:b4:9e:56:25:88:f8:91:22:63:c9:ba:9f:
                    87:e0:76:b6:4f:71:21:db:26:6e:e6:7c:5f:24:aa:
                    f1:3b:02:fc:4c:a8:08:58:36:1b:22:e1:bc:86:e6:
                    6e:fb:36:4f:62:a0:92:9a:3c:fa:45:dc:58:e4:3d:
                    18:51:86:37:98:bb:b1:a4:83:74:78:96:d8:91:32:
                    c9:3b:ec:69:11:74:74:e7:e5:f6:95:e8:ca:ec:48:
                    59:0f:da:8a:cb:83:27:c0:e0:0b:39:28:c2:f1:3f:
                    2f:76:a4:00:31:be:24:1b:32:cb:ff:de:39:c9:f1:
                    cb:81:d5:fa:00:33:a4:e9:98:ac:1f:bd:a1:47:57:
                    2b:18:60:a5:8e:7c:a0:ba:7e:f9:06:57:da:ee:26:
                    0f:8d:d2:58:d8:4f:bc:f9:a3:90:c3:e9:65:b9:44:
                    04:07:10:74:09:df:cf:eb:75:73:83:9e:63:fe:3b:
                    be:25:c5:6c:e3:77:a4:e5:78:df:b1:0d:be:cd:fe:
                    00:be:a5:fe:45:84:2b:6a:cd:91:21:c2:98:84:c6:
                    95:6c:70:27:35:ac:d6:b0:70:7f:f8:b3:02:40:8f:
                    54:0e:5b:bb:82:6e:d2:f0:95:9b:84:bc:dc:0b:c8:
                    26:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E9:AC:AA:29:CA:D5:32:10:53:FB:3C:C7:C2:42:DF:DF:4C:A8:90
            X509v3 Authority Key Identifier:
                keyid:0D:50:28:98:6A:35:6B:69:B4:AF:7D:2F:66:49:D6:BB:DC:BE:8B:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/15F05240B73511EC8392922AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.84.52.0/22
                  103.197.68.0/22
                  116.206.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:1f:f9:03:6e:ad:e6:3b:cd:71:84:76:5e:d2:2e:d5:c9:ce:
         54:b4:2d:9d:0c:62:0f:fd:6a:fc:94:00:fd:ee:b9:be:8f:12:
         ed:d1:6b:5b:b0:c6:97:cf:71:96:81:f4:41:89:e6:ce:9b:c7:
         5a:32:1b:c2:65:ab:18:d8:ef:07:de:10:3f:5e:e2:53:bf:bc:
         55:d9:0e:47:85:07:ee:bc:46:ed:0f:18:2b:15:a1:3b:a6:d2:
         03:af:b3:37:8d:ca:67:74:94:20:b7:27:48:43:84:dc:ac:e1:
         51:41:f4:fc:bb:78:71:4b:27:e3:ee:ff:7a:73:23:34:7d:7d:
         59:4c:f4:ff:a3:55:07:87:c8:93:f8:59:fe:5d:3a:69:dc:32:
         d8:3d:44:83:01:e7:32:47:45:d7:fb:25:b3:c1:ef:3c:27:64:
         bf:28:b8:d9:0e:0b:56:14:9b:70:29:8b:0d:c4:e1:03:16:29:
         98:66:e6:ae:c8:cd:24:97:b3:61:3e:0e:4e:ee:69:11:99:ea:
         9e:90:57:90:cc:20:db:3e:22:03:27:eb:13:19:d4:c5:cc:76:
         7e:83:99:49:05:c8:6f:b6:7e:8e:9f:81:57:86:06:55:49:d8:
         9c:7a:29:07:92:a8:d3:20:9d:52:93:50:30:cf:0c:84:63:28:
         de:a9:df:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:01:26 2024 by rpki-client on console-ams.rpki-client.org