Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/E521C8BE8DB011EBBA0A3723C4F9AE02.roa
File:                     E521C8BE8DB011EBBA0A3723C4F9AE02.roa (raw, json)
Hash identifier:          QIcvi4uK4+sV4KonLrCq7np3/p5FTh38+jPZf45l5Uo=
Subject key identifier:   A1:7F:D8:60:2E:C7:28:00:4A:47:70:E6:26:20:62:11:1A:FC:05:2F
Certificate issuer:       /CN=A914669D/serialNumber=91126E86F18C609404D190F298C32CD609FCFA79
Certificate serial:       05D5
Authority key identifier: 91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/E521C8BE8DB011EBBA0A3723C4F9AE02.roa
Signing time:             Thu 10 Oct 2024 23:02:22 +0000
ROA not before:           Thu 10 Oct 2024 23:02:22 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     55561
IP address blocks:        103.242.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl
                          rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1493 (0x5d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914669D/serialNumber=91126E86F18C609404D190F298C32CD609FCFA79
        Validity
            Not Before: Oct 10 23:02:22 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=67085cfe-8e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:02:f0:27:01:53:bc:55:a6:e3:e2:f2:a1:ac:
                    3c:88:6c:99:20:c4:e7:a3:d8:22:ec:15:44:e6:f9:
                    34:f6:60:f4:b4:e0:28:3e:69:49:54:39:10:8e:42:
                    49:f7:4c:59:a1:a2:ca:a6:58:0e:ea:d1:89:d3:1e:
                    16:98:4a:6c:74:fd:fc:da:a1:86:f8:6f:5e:f4:19:
                    27:16:75:9f:e0:4c:74:ac:34:44:96:6d:09:1c:99:
                    33:9d:fb:d9:df:59:60:12:b0:bd:33:44:6e:99:81:
                    ee:5b:ac:57:5d:5c:05:b5:30:4b:7a:ed:0f:5d:45:
                    1b:57:fc:36:ba:4f:c2:36:c1:6c:7d:30:25:6e:5c:
                    7e:5c:60:fe:41:73:d6:63:78:88:55:66:46:93:79:
                    df:5b:71:de:48:d6:dd:46:d6:1f:25:7a:6f:40:4b:
                    4e:0a:3b:80:5a:53:b0:66:34:eb:e9:de:df:8e:3c:
                    30:f0:23:0f:aa:37:83:27:50:ce:9d:90:3d:4f:49:
                    59:d6:84:b2:9b:ba:a7:b6:d2:cd:42:0d:2c:57:99:
                    33:14:2c:61:55:ff:6a:ad:c7:06:13:28:c7:f4:c8:
                    9e:d8:c7:03:69:80:63:86:8d:66:51:df:5f:d8:20:
                    d3:57:15:8d:20:49:2e:cb:91:17:40:f7:e8:11:74:
                    75:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7F:D8:60:2E:C7:28:00:4A:47:70:E6:26:20:62:11:1A:FC:05:2F
            X509v3 Authority Key Identifier:
                keyid:91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/E521C8BE8DB011EBBA0A3723C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:48:4b:e9:50:d4:c3:e2:a8:96:90:cf:fe:c2:7f:86:b5:63:
         90:55:5b:4b:fb:b0:63:59:93:ba:26:42:36:20:79:f4:73:17:
         7b:af:da:74:f6:ac:fe:c7:11:81:cb:1d:71:4f:f3:c3:91:d0:
         0c:08:5b:76:16:32:00:c1:1e:b0:f3:5f:3a:38:75:ab:13:b9:
         08:a6:50:bf:45:56:56:c9:04:c6:ac:c7:36:9c:80:57:e9:eb:
         11:22:aa:f2:a0:bb:16:24:9a:01:f5:67:25:74:33:7f:d9:56:
         03:fb:51:f2:cc:1e:14:f3:52:dd:9d:6e:c6:6f:d0:fc:7b:be:
         a3:84:5a:61:44:53:cb:5a:34:1d:ca:91:7d:3d:8e:b7:c0:e5:
         8b:db:45:a4:b7:2b:21:67:bd:7b:7f:6c:79:55:fa:f0:e5:05:
         4f:2c:a8:d0:ed:d0:bf:21:27:6d:03:b3:1f:d6:8e:46:e6:ce:
         70:0f:2c:1e:26:d2:32:64:5f:2c:a9:e8:64:ab:f3:98:c0:cb:
         07:9e:a5:fa:ff:59:1a:dc:89:be:6b:cc:30:9e:54:e5:6c:b7:
         97:0d:87:88:ce:9b:43:72:7b:9b:09:72:84:40:14:f9:f3:6d:
         ee:35:1b:c2:ca:8a:aa:1e:25:5e:a0:4b:0a:49:87:03:d8:61:
         d6:ad:91:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:24 2024 by rpki-client on console-fra.rpki-client.org