Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/99D6FBE6341F11E9BF826924C4F9AE02.roa
File:                     99D6FBE6341F11E9BF826924C4F9AE02.roa (raw, json)
Hash identifier:          n/zZhuhV9LV6VYEegyXndY9jGAj5j33BeGHT7RYFJDo=
Subject key identifier:   DC:8C:94:D7:DA:18:7E:88:77:BD:A3:EB:3E:92:DD:E5:43:A5:E5:CB
Certificate issuer:       /CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Certificate serial:       17D8
Authority key identifier: 22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/99D6FBE6341F11E9BF826924C4F9AE02.roa
Signing time:             Fri 04 Oct 2024 16:54:44 +0000
ROA not before:           Fri 04 Oct 2024 16:54:44 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     133229
IP address blocks:        103.71.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
                          rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 16:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6104 (0x17d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
        Validity
            Not Before: Oct  4 16:54:44 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=67001dd3-3e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:74:3a:09:3e:ee:bc:b4:46:3e:6a:05:88:01:
                    7b:ff:53:aa:af:ec:6f:39:e9:25:81:8a:7e:f2:74:
                    2e:29:1d:6c:18:fd:30:ad:b8:fe:7a:07:31:91:a0:
                    a9:62:db:3f:d7:5e:dd:73:08:76:1c:5c:95:2d:9b:
                    a6:d3:71:3c:ea:26:7c:30:49:b7:49:25:83:a2:69:
                    5f:4f:f0:5e:c8:9d:1e:15:bf:4f:56:e2:15:a1:72:
                    44:ff:a0:64:f5:70:d9:d1:31:26:7f:fc:6e:f2:2c:
                    10:c5:56:10:1c:59:db:ff:0e:45:78:74:d8:bc:0f:
                    c8:d5:e7:86:73:36:ad:45:84:75:0a:b7:86:72:f6:
                    87:2a:b9:bc:32:f8:84:8f:8d:35:da:81:4a:3e:0c:
                    0e:52:1f:61:21:7f:69:b1:f7:31:eb:fb:30:f1:31:
                    fe:fb:90:ea:97:cf:97:4e:8a:07:a3:e0:fa:5d:6d:
                    ef:a6:22:aa:4b:42:5e:05:1a:b9:28:bc:6f:4d:de:
                    54:a3:77:37:68:c2:6e:60:d5:aa:59:ce:e0:41:b8:
                    30:ef:35:a1:c9:8a:22:3f:c1:17:d4:02:44:55:a5:
                    9b:49:f2:18:b1:7f:9f:91:aa:a4:2e:3c:c7:2b:d3:
                    72:e3:12:6b:34:f5:6f:f6:16:b3:0e:eb:2d:6d:a9:
                    64:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8C:94:D7:DA:18:7E:88:77:BD:A3:EB:3E:92:DD:E5:43:A5:E5:CB
            X509v3 Authority Key Identifier:
                keyid:22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/99D6FBE6341F11E9BF826924C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:e6:51:b7:76:e9:1f:2b:18:76:bb:c1:cd:a5:6b:76:43:3c:
         9b:62:82:ad:a3:47:bf:45:ac:54:93:ce:20:bf:24:5d:d3:c0:
         7a:6e:76:12:af:87:c8:eb:a5:1d:86:ca:9f:27:22:44:e5:ee:
         68:37:20:0c:d2:87:cf:94:0f:e7:c1:63:c2:22:45:84:a8:32:
         df:40:27:6c:11:27:4c:be:d1:94:84:e5:0a:15:78:62:c9:c1:
         b6:16:5a:97:31:a1:39:03:14:84:05:25:45:42:21:8f:59:24:
         2c:87:15:4e:65:66:c1:74:3a:5c:aa:9c:1e:cd:53:2c:be:c9:
         67:dc:61:10:6f:34:55:d6:c9:49:b3:37:9c:0c:d8:1d:69:5d:
         31:88:6e:66:0f:ed:1b:b4:08:60:aa:91:b3:58:99:92:56:b6:
         52:b3:5d:14:ba:9a:7f:ea:0f:f0:e6:ac:4f:65:c3:cf:98:6c:
         14:39:6a:1c:32:6e:86:d4:fc:0c:16:76:07:ea:27:72:1e:5c:
         01:7a:4c:10:29:a9:88:59:20:8a:4c:97:19:4f:05:fc:75:97:
         ee:0b:bd:b0:6a:48:43:56:c1:a3:4a:bc:8c:af:a4:84:77:65:
         ef:ae:a9:a3:63:a3:6e:a8:a0:13:9c:c0:c5:10:9f:0c:5b:f8:
         a4:84:5b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:44:53 2024 by rpki-client on console-fra.rpki-client.org