Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/4950E3D278DD11EE8A6C4021C4F9AE02.roa
File:                     4950E3D278DD11EE8A6C4021C4F9AE02.roa (raw, json)
Hash identifier:          Wqf/UZ8rMgVoYOxFa1Ev+jSS/yI2xrRNpsu2d8EWaHI=
Subject key identifier:   A1:3C:B0:88:69:6D:83:7F:E7:7B:33:4D:ED:77:01:2A:FE:C6:F6:11
Certificate issuer:       /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
Certificate serial:       A2
Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/4950E3D278DD11EE8A6C4021C4F9AE02.roa
Signing time:             Sat 25 May 2024 07:11:09 +0000
ROA not before:           Sat 25 May 2024 07:11:09 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     7480
IP address blocks:        103.69.92.0/23 maxlen: 24
                          2001:df2:5740::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl
                          rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
        Validity
            Not Before: May 25 07:11:09 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66518f0d-2fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:54:6a:92:ea:57:84:b3:fa:f3:ef:e6:72:32:
                    c5:64:68:06:6f:da:60:53:69:1e:df:8c:2b:ea:07:
                    05:87:98:0a:68:76:29:b5:6c:51:6e:37:50:36:48:
                    ed:a8:63:d3:66:d0:42:69:61:91:4a:d0:ae:c2:6e:
                    f1:87:09:14:a1:c4:b1:c5:4d:d2:20:60:9c:7b:ad:
                    d1:0f:c4:4c:4a:0b:d2:f8:cb:ca:9d:51:f9:eb:2e:
                    1a:5b:28:f0:74:32:87:8c:60:c1:a6:94:9f:49:b5:
                    29:35:1a:82:ff:f8:e5:9a:9a:d0:b8:ac:da:24:23:
                    b9:5d:fc:a6:3b:e4:eb:3a:55:74:f5:a9:b0:f3:dd:
                    f2:3a:e0:6f:51:42:ff:e0:85:82:11:00:4f:b7:ff:
                    e4:cd:94:96:8f:62:e9:25:43:4f:9e:bb:e4:68:54:
                    0d:94:3d:fc:52:5a:08:ea:09:ef:38:a5:f5:8b:c2:
                    ea:71:3c:a5:d9:d1:98:47:c7:c2:fb:63:ac:9d:3d:
                    ab:9d:30:dd:44:6a:8d:1f:ab:66:6c:5c:2f:60:ec:
                    aa:03:73:ad:d2:53:79:86:7c:94:f1:88:be:0c:80:
                    ea:40:44:b0:71:95:1c:55:0e:ff:de:2b:29:01:4b:
                    44:ea:ac:c5:76:6c:90:63:c1:12:4a:99:de:e1:ef:
                    aa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:3C:B0:88:69:6D:83:7F:E7:7B:33:4D:ED:77:01:2A:FE:C6:F6:11
            X509v3 Authority Key Identifier:
                keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/4950E3D278DD11EE8A6C4021C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.92.0/23
                IPv6:
                  2001:df2:5740::/48

    Signature Algorithm: sha256WithRSAEncryption
         ea:c6:c6:21:9d:0f:73:78:8f:7f:0c:65:8b:f2:fc:c2:44:cc:
         a4:1d:e1:63:96:e7:72:e9:4f:2d:f3:70:75:d2:ae:43:e7:c3:
         e2:67:01:2a:b9:0e:64:48:3d:fe:25:38:0b:62:5f:0d:fb:15:
         18:d5:23:86:82:88:0a:36:ae:d6:a3:fb:aa:20:86:81:38:28:
         77:7d:89:19:25:20:0f:d4:04:ee:b4:36:c8:94:5e:0e:26:80:
         db:9a:f6:51:c6:6a:9e:a3:28:bf:cf:c4:f9:49:62:8d:e8:26:
         77:c8:88:2d:ed:0a:58:40:79:8e:c4:70:7c:2a:2e:d0:56:be:
         1f:8e:6b:51:72:92:9f:e0:2f:2c:9e:61:a2:32:04:17:71:e4:
         9a:91:9e:d6:74:06:ac:12:e7:7b:33:77:29:b8:8f:1b:3f:8f:
         80:d1:c7:8c:27:1e:a6:c4:24:23:53:d1:60:4f:fb:92:86:ec:
         c6:a1:e7:a6:02:dd:7d:3b:b2:a9:50:5f:75:3b:08:08:09:c3:
         89:bf:64:1f:1d:27:0c:94:6c:2a:ca:53:6d:25:45:52:4a:48:
         ca:f5:c5:10:f8:16:65:99:88:44:00:47:01:d1:01:84:21:5b:
         a6:ad:67:0c:9f:60:a9:ed:31:f8:80:c3:e9:8f:73:64:0d:f5:
         3f:c0:41:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:47 2024 by rpki-client on console-fra.rpki-client.org