Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/50E999AA911911E9BEF5F94EC4F9AE02.roa
File:                     50E999AA911911E9BEF5F94EC4F9AE02.roa (raw, json)
Hash identifier:          XtnLTQBa0e3LdyaGLT1q/pioGD68Rk02pVoWoXCnNeM=
Subject key identifier:   D1:EC:EF:4B:09:56:8B:C1:0E:14:AB:E1:87:F1:59:30:F1:03:1B:A0
Certificate issuer:       /CN=A914275E/serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F
Certificate serial:       0DB7
Authority key identifier: 62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/50E999AA911911E9BEF5F94EC4F9AE02.roa
Signing time:             Sat 24 Feb 2024 18:36:52 +0000
ROA not before:           Sat 24 Feb 2024 18:36:51 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     135063
IP address blocks:        103.208.24.0/24 maxlen: 24
                          103.208.25.0/24 maxlen: 24
                          103.208.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl
                          rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3511 (0xdb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914275E/serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F
        Validity
            Not Before: Feb 24 18:36:51 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65da3743-df71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:c6:c7:a4:d5:fe:2c:eb:cc:06:2e:3c:49:
                    8e:86:e7:81:c6:f9:df:c6:9b:c9:60:a8:b5:99:2e:
                    4b:76:1a:f5:73:de:e1:86:2f:5f:57:83:04:2e:3a:
                    4d:c5:31:8e:f9:ed:12:77:77:ba:e3:0f:e2:49:f9:
                    70:5d:95:7f:7b:40:38:25:05:95:d5:b9:c7:f9:fc:
                    3f:62:22:52:70:12:c1:62:2b:a7:dc:49:44:3b:bf:
                    ec:64:d5:b0:f4:26:a3:72:43:a8:88:36:7e:1d:f0:
                    ac:d3:bf:ff:68:1a:2b:ab:c4:89:8d:0d:58:1f:ce:
                    f5:13:2e:69:0d:80:c7:63:23:a9:56:ed:57:26:82:
                    62:69:1b:77:ea:7f:5a:d9:96:c0:44:05:9b:a8:a4:
                    f1:c9:21:0c:2b:19:8e:47:a7:98:2f:6c:96:1e:0d:
                    5b:91:d8:5c:f2:b0:78:82:f9:c7:ca:d2:23:7e:1c:
                    58:b7:cd:f7:95:cd:78:41:79:6f:e6:cb:46:42:b2:
                    af:7f:67:27:51:92:aa:97:db:ae:e5:5e:f5:97:9d:
                    4e:07:93:8f:41:9d:72:eb:5a:4f:58:25:8d:dc:e6:
                    60:9b:a9:3d:53:d9:92:98:bf:d2:a5:74:05:fa:e1:
                    6b:90:bd:e2:38:05:be:6e:37:d8:b3:e4:6e:c2:7a:
                    d0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EC:EF:4B:09:56:8B:C1:0E:14:AB:E1:87:F1:59:30:F1:03:1B:A0
            X509v3 Authority Key Identifier:
                keyid:62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/50E999AA911911E9BEF5F94EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.24.0-103.208.26.255

    Signature Algorithm: sha256WithRSAEncryption
         18:ef:91:05:ae:13:ab:e6:c9:24:26:bf:12:08:3a:09:58:bc:
         bf:f7:9b:c5:5b:4f:15:69:d5:78:e3:89:97:28:70:18:d4:d9:
         d3:0a:7d:b6:fb:95:43:70:4c:8e:e5:6c:be:4c:0c:1b:52:f7:
         49:a7:73:2a:72:cd:af:3d:70:72:c6:d5:64:09:71:58:74:1f:
         4e:21:40:1c:c1:64:20:65:f8:dd:3d:48:37:70:9e:04:65:bc:
         a2:5a:50:72:38:72:b2:e6:d6:a4:08:ed:e2:17:fb:00:cf:bb:
         8b:77:5a:ef:cf:3b:a3:54:eb:41:6d:34:e4:e9:13:74:d4:67:
         03:cd:cd:5f:cb:7d:b0:c3:7c:98:86:ad:d2:d8:68:77:68:1d:
         fd:26:5d:f2:b9:a7:4a:25:73:78:0f:4a:ce:09:05:b1:69:87:
         f8:19:99:12:e8:a7:fd:eb:21:3b:a3:54:e4:77:45:41:50:dc:
         ac:25:b3:5c:9c:56:e7:9f:8e:c8:28:ca:6c:94:1a:38:7a:62:
         35:93:89:6b:10:e8:ce:0e:60:a1:f1:6f:bb:43:f5:4e:d1:1b:
         04:44:df:54:7c:dc:d6:8f:24:55:8f:9e:02:57:6f:10:7e:70:
         1a:65:14:02:ef:49:8a:b6:0d:8c:58:d6:f1:b9:59:1e:de:e6:
         1d:8c:77:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org