Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/04758F0AA43411EAA22B0871C4F9AE02.roa
File:                     04758F0AA43411EAA22B0871C4F9AE02.roa (raw, json)
Hash identifier:          XjI//uz3MIHrje/lHeiBp2v7ZWt9cLzLUWC9pX6gjb8=
Subject key identifier:   F0:0F:CC:56:C9:AE:A1:1C:74:66:E7:F4:CC:40:59:77:FE:F1:B7:25
Certificate issuer:       /CN=A913E9AD/serialNumber=416A544CB50AEA47039F13BC58C3410C7FE688CE
Certificate serial:       081D
Authority key identifier: 41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/04758F0AA43411EAA22B0871C4F9AE02.roa
Signing time:             Tue 30 Jan 2024 21:59:34 +0000
ROA not before:           Tue 30 Jan 2024 21:59:34 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     7642
IP address blocks:        103.87.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.crl
                          rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:11:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2077 (0x81d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E9AD/serialNumber=416A544CB50AEA47039F13BC58C3410C7FE688CE
        Validity
            Not Before: Jan 30 21:59:34 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65b97146-c36b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a8:35:23:a5:2d:4f:c6:69:ba:dd:39:2e:d3:
                    e7:72:c4:d0:c1:b9:a0:a8:ab:7e:c7:24:74:56:de:
                    63:fa:af:ae:4b:88:48:06:a2:25:2b:68:a1:1f:11:
                    6f:57:e3:e0:51:90:20:93:23:2a:68:b2:fb:eb:55:
                    9d:ac:72:71:6b:f2:ad:4a:61:4c:67:36:eb:94:69:
                    30:52:b7:b2:12:64:9f:b6:1f:a7:56:38:3e:18:22:
                    a4:07:58:c0:da:3d:87:b4:df:dc:b4:8b:1c:01:13:
                    e3:f2:9c:07:24:d4:43:7d:82:dc:a9:18:26:b6:87:
                    99:b9:91:e7:65:50:da:10:bb:71:b9:d2:c8:6f:cf:
                    5c:7e:bb:69:ee:9d:67:22:39:66:74:1e:f4:6f:a0:
                    75:30:fb:90:2c:1d:2c:e7:85:65:27:c2:2f:48:1a:
                    d8:de:99:9e:66:a8:71:e7:0d:e5:34:c3:ce:d2:53:
                    9d:52:bb:c6:1f:4c:fc:3c:38:48:7a:b4:10:d8:13:
                    e5:c9:f6:c6:32:8e:58:05:ef:c7:64:1c:94:92:b9:
                    6e:7b:d8:6a:12:1f:5e:58:8a:30:8d:b6:44:c6:a3:
                    fd:bb:85:3e:78:6b:ac:58:34:30:f9:5f:4a:0e:23:
                    78:37:c4:e7:55:3e:9c:b5:a1:4a:ff:6d:07:d6:36:
                    5a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0F:CC:56:C9:AE:A1:1C:74:66:E7:F4:CC:40:59:77:FE:F1:B7:25
            X509v3 Authority Key Identifier:
                keyid:41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/04758F0AA43411EAA22B0871C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:eb:d5:3f:93:52:4d:fc:97:bc:69:60:df:8e:db:67:55:d2:
         a8:af:db:92:5e:48:1b:2e:7e:17:b9:09:b0:68:e5:fe:41:8c:
         ae:11:34:88:b1:4c:7a:74:97:84:75:38:4d:0d:3d:bb:d8:2c:
         2f:33:3d:99:32:b1:cc:a9:75:37:ff:0f:88:83:99:57:10:1e:
         84:44:71:c1:ba:8f:c8:9b:15:97:ab:dd:ed:41:de:27:97:30:
         7c:fb:16:a8:95:90:64:7b:d6:83:aa:ab:ff:e4:37:1f:39:91:
         6b:cf:01:02:b5:26:66:5a:1d:0e:a3:87:c1:67:cc:63:55:b1:
         48:a2:f7:d3:c4:47:6c:dc:3c:a7:ee:52:d5:f8:cd:1b:42:eb:
         24:51:27:78:a7:fa:86:5d:3b:ee:77:5a:40:f1:b2:0b:e8:a7:
         95:a3:2b:d9:c8:94:8b:8d:ee:92:b0:19:2e:d2:6a:bd:0b:c8:
         3f:c1:8c:03:c5:46:eb:69:09:14:f0:75:52:63:2c:29:c7:19:
         5d:70:a5:90:68:5a:b9:d7:4e:84:37:61:a0:30:71:37:22:68:
         c7:52:46:7a:3d:7b:5e:97:7b:be:47:ec:de:c5:46:2d:0e:86:
         f3:92:10:d1:00:54:27:01:ee:1b:fa:7e:e0:55:9d:a9:e2:7c:
         b4:04:e4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:38 2024 by rpki-client on console-fra.rpki-client.org