Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/49CA1D50377111EDA5C68B0DC4F9AE02.roa
File:                     49CA1D50377111EDA5C68B0DC4F9AE02.roa (raw, json)
Hash identifier:          FxlXMb1VDjKPp2gvaZUru1qfhHQyZGjKWzaIqCuCA0o=
Subject key identifier:   06:19:3A:FB:62:90:29:84:8E:4C:E8:8F:1A:99:54:44:AC:36:1D:FA
Certificate issuer:       /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Certificate serial:       01E5
Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/49CA1D50377111EDA5C68B0DC4F9AE02.roa
Signing time:             Fri 15 Nov 2024 01:45:14 +0000
ROA not before:           Fri 15 Nov 2024 01:45:14 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     58715
IP address blocks:        103.7.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
                          rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
        Validity
            Not Before: Nov 15 01:45:14 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6736a7a9-3a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:87:6c:f4:3b:42:66:72:ac:f8:d1:06:82:c4:
                    58:30:52:a4:10:0d:e1:2c:15:b7:d1:7d:ff:c3:93:
                    bb:0f:24:84:2d:6f:97:c5:c7:e8:05:8a:84:46:2b:
                    a7:ff:4e:02:74:0d:b0:a2:29:57:25:26:f2:cd:ec:
                    b4:bc:1c:7f:e3:c5:c1:b2:2a:0d:1b:65:58:62:ac:
                    4d:05:a2:17:e0:ff:f0:cf:21:e2:61:32:d1:0a:e5:
                    f6:17:ee:c0:35:db:cc:22:83:45:3c:37:0a:5a:18:
                    b8:ae:11:4d:ea:8f:f8:1d:32:f8:b6:ef:b0:04:85:
                    d7:4e:2f:ae:57:69:a8:aa:83:87:84:a0:3d:8b:06:
                    a9:b2:91:4e:d2:3a:4d:86:3d:21:39:0f:07:ea:63:
                    1d:50:af:ea:85:b6:96:8f:19:a9:a1:a5:3d:4f:2a:
                    ec:08:47:4f:af:a5:2a:68:b5:07:f8:68:6f:ec:8a:
                    21:0a:8d:81:2b:45:1f:2f:87:3f:0f:10:ed:85:b0:
                    79:ab:30:d0:45:ad:0c:01:8b:0f:f1:17:56:45:95:
                    7b:07:17:a3:01:1b:09:66:65:73:ea:98:3b:f8:ac:
                    d5:ce:c8:f3:33:f5:a6:c6:b3:68:42:5b:1d:ce:aa:
                    0c:13:eb:d8:be:47:cf:be:8f:f1:01:23:d9:9e:b8:
                    de:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:19:3A:FB:62:90:29:84:8E:4C:E8:8F:1A:99:54:44:AC:36:1D:FA
            X509v3 Authority Key Identifier:
                keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/49CA1D50377111EDA5C68B0DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:de:0f:07:d0:55:a4:3f:75:01:de:69:ae:14:f8:d4:1f:92:
         d0:9b:a6:50:77:cc:1a:c8:01:8d:1b:ac:9b:c6:f1:0d:38:b3:
         9d:88:d8:c5:1f:59:06:17:9a:fa:15:ab:fc:de:f7:a0:c1:c8:
         8c:e0:d8:58:56:30:c0:71:c4:75:4f:e2:6d:d6:1f:b2:8a:b4:
         9a:b1:b5:53:7f:63:74:40:a5:ad:45:bd:b9:61:aa:2c:d0:75:
         90:a0:c6:be:9b:ec:ed:03:71:45:77:0a:64:a9:56:ac:2a:c5:
         7c:fa:68:c7:7a:db:c5:8e:fa:67:b6:44:f3:78:16:50:55:8b:
         01:73:91:5e:cc:7a:06:06:34:a7:c1:af:18:f1:aa:bd:ee:56:
         25:8f:c7:32:6a:f4:8b:95:df:13:6c:5c:5d:60:7c:16:95:fc:
         83:89:c5:20:18:9b:4c:10:66:b7:e1:67:8b:c6:da:0d:c9:8c:
         1e:c6:84:a0:b0:4d:f4:ee:ae:35:b8:27:19:62:6e:58:66:6b:
         10:bc:85:b8:d8:b9:11:ab:99:27:f6:a4:30:49:84:99:d1:65:
         6a:77:64:85:d7:a1:52:72:0e:b8:27:8b:78:43:7a:c8:84:74:
         f5:45:1f:de:a2:63:c4:e6:74:fa:27:46:46:7c:ef:1f:6c:88:
         db:6e:91:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:35 2024 by rpki-client on console-ams.rpki-client.org