Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/12C61BCA37CA11EDB8E79257C4F9AE02.roa
File:                     12C61BCA37CA11EDB8E79257C4F9AE02.roa (raw, json)
Hash identifier:          w/LPsf1fuNhXTUpVcTEl4mS9U0ZYhq4ApJJQJuCMBlQ=
Subject key identifier:   5D:EA:A3:9D:66:30:76:8C:D6:60:83:F7:04:11:2D:8E:56:6B:EC:A3
Certificate issuer:       /CN=A913D680/serialNumber=914936530B0FF87E540D846C9020FB84D3B5F583
Certificate serial:       05EA
Authority key identifier: 91:49:36:53:0B:0F:F8:7E:54:0D:84:6C:90:20:FB:84:D3:B5:F5:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUk2UwsP-H5UDYRskCD7hNO19YM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/12C61BCA37CA11EDB8E79257C4F9AE02.roa
Signing time:             Mon 12 Feb 2024 23:42:08 +0000
ROA not before:           Mon 12 Feb 2024 23:42:08 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     9381
IP address blocks:        43.248.164.0/22 maxlen: 24
                          103.25.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/kUk2UwsP-H5UDYRskCD7hNO19YM.crl
                          rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/kUk2UwsP-H5UDYRskCD7hNO19YM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUk2UwsP-H5UDYRskCD7hNO19YM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1514 (0x5ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D680/serialNumber=914936530B0FF87E540D846C9020FB84D3B5F583
        Validity
            Not Before: Feb 12 23:42:08 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65caacd0-8e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e4:2a:6f:63:66:a0:b8:24:0a:e0:d9:76:0f:
                    42:0b:4c:11:48:31:f3:7b:5b:dd:d4:54:7e:33:e2:
                    32:c0:3c:5d:de:f4:73:0b:1c:29:84:24:4d:e4:c5:
                    de:ed:bb:91:dd:60:e5:80:f0:54:ee:56:a5:5d:fe:
                    bb:ec:d7:a7:1f:62:3c:fa:67:21:81:eb:7a:29:0d:
                    88:b1:1c:23:b1:e8:ce:ee:51:f5:69:f2:87:e2:ca:
                    b2:02:ae:bc:75:8c:23:ef:02:7b:2d:23:0b:2e:df:
                    22:b9:9e:5f:a5:2b:66:14:4d:93:c5:d1:26:b3:9d:
                    00:f6:23:83:0b:1a:45:21:9d:3a:95:d7:6a:4b:31:
                    b5:3c:c1:59:14:10:92:8e:5d:52:51:6b:40:67:dd:
                    f5:97:0e:56:21:f1:95:0c:cb:e3:2d:30:bc:4b:90:
                    77:fa:1e:bb:dc:67:af:d1:87:e4:a6:46:8f:f8:cd:
                    8a:95:bc:9b:fe:fe:7d:11:b4:bd:96:d7:f4:b5:95:
                    b4:19:d0:a8:c8:52:b2:99:5f:21:f1:f4:63:4a:d4:
                    89:10:57:94:79:d5:9f:db:11:da:5d:20:cf:81:cc:
                    f3:5d:74:41:8c:ce:d6:bc:45:32:31:1f:e6:8f:1c:
                    a8:4d:3f:37:d0:dd:2b:fb:bc:8f:8d:46:8a:dd:2b:
                    d5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:EA:A3:9D:66:30:76:8C:D6:60:83:F7:04:11:2D:8E:56:6B:EC:A3
            X509v3 Authority Key Identifier:
                keyid:91:49:36:53:0B:0F:F8:7E:54:0D:84:6C:90:20:FB:84:D3:B5:F5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/kUk2UwsP-H5UDYRskCD7hNO19YM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUk2UwsP-H5UDYRskCD7hNO19YM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/12C61BCA37CA11EDB8E79257C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.248.164.0/22
                  103.25.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:c1:c6:86:0f:07:17:0c:b1:54:a1:dd:f5:75:27:93:b1:fd:
         b7:cd:21:56:71:76:57:de:b8:0b:f2:26:7a:ea:96:75:56:eb:
         dd:42:17:7e:96:9e:75:f4:78:2a:0a:e7:fb:e0:f6:ef:97:58:
         3a:80:de:26:3c:97:c2:3a:64:d7:0b:8c:d3:38:90:b5:33:69:
         c7:32:42:b1:5c:7f:50:97:1f:58:77:4f:5e:6e:b8:dc:0a:d2:
         3b:87:ac:89:c4:00:54:c2:ef:3a:c4:e6:82:83:fb:13:0b:7d:
         73:2a:e5:68:86:9d:6d:4e:1f:c6:d2:f3:8b:b7:cb:6a:32:e3:
         b5:5d:5c:c3:fc:81:66:32:db:70:23:d2:82:f4:50:8d:67:df:
         0c:7d:37:81:51:71:11:46:7d:f8:c6:b1:f2:cf:3d:6d:de:b9:
         c9:f9:b2:98:e2:e5:c5:d9:46:fd:34:20:7b:8a:5e:25:a8:5d:
         a5:10:f1:d3:5d:08:6f:70:90:c4:ed:04:4c:ea:70:79:a5:1c:
         3e:02:e1:7f:e7:b2:2a:35:aa:8e:4e:9d:13:64:d8:b7:da:24:
         6a:c1:61:de:7f:6b:99:44:fa:8c:30:80:da:68:97:43:49:fe:
         0e:e5:6c:56:58:9d:70:58:f9:4b:9d:b3:3c:02:9d:e0:17:0d:
         25:be:a6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:11:44 2024 by rpki-client on console-fra.rpki-client.org