Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/BF1CFAE8F1A411EE9B04F15FC4F9AE02.roa
File:                     BF1CFAE8F1A411EE9B04F15FC4F9AE02.roa (raw, json)
Hash identifier:          A41c3FPp4TkO204/LKIDDoZ1pNBo9omzc3uvzzs43As=
Subject key identifier:   F2:A4:8F:EC:20:7F:6C:A6:A1:16:3C:AE:53:79:B5:2C:92:64:95:8D
Certificate issuer:       /CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Certificate serial:       12D2
Authority key identifier: B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/BF1CFAE8F1A411EE9B04F15FC4F9AE02.roa
Signing time:             Wed 03 Apr 2024 10:27:18 +0000
ROA not before:           Wed 03 Apr 2024 10:27:18 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     137877
IP address blocks:        103.64.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl
                          rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 17:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4818 (0x12d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
        Validity
            Not Before: Apr  3 10:27:18 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=660d2f06-adfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:2e:bc:8f:64:08:76:f4:b2:4a:e5:57:01:
                    7c:1e:c6:69:4b:93:d2:bd:01:15:b6:7f:7f:af:86:
                    08:63:69:e2:f7:c2:02:96:41:9c:0e:17:45:0e:10:
                    67:25:ba:0f:48:d3:94:24:01:f7:e0:b6:f2:e8:b2:
                    ba:82:0e:bd:de:3e:91:0b:8f:37:e5:11:66:60:8f:
                    30:3a:01:47:e7:a9:8d:89:58:84:28:91:8f:6b:a0:
                    92:b9:18:b8:bd:16:aa:8f:8d:71:56:f8:15:74:04:
                    aa:8f:a6:f9:0d:b4:8a:8d:28:b4:5c:ee:7f:b7:67:
                    d7:a1:ea:0b:ab:8b:5a:5a:77:eb:41:5d:0b:23:78:
                    44:fe:5a:45:b8:6d:ab:17:79:66:e8:5d:55:d9:98:
                    8b:3b:92:ca:4a:a2:4f:a0:51:5a:90:18:f3:e8:65:
                    37:7f:b1:a6:e0:4b:d3:36:11:c0:14:45:e2:36:7e:
                    f4:9f:81:37:6d:53:e3:40:e3:96:41:75:f3:8e:5a:
                    44:32:df:ae:9b:cd:f0:57:c7:36:12:47:dc:f4:7b:
                    71:76:59:1b:fc:23:69:4f:26:1c:22:5a:a7:73:22:
                    ee:a2:59:69:13:ea:09:e5:58:e2:42:94:f1:51:f4:
                    06:8a:94:f1:ef:c4:c2:ec:83:8d:c7:7f:54:64:e5:
                    57:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A4:8F:EC:20:7F:6C:A6:A1:16:3C:AE:53:79:B5:2C:92:64:95:8D
            X509v3 Authority Key Identifier:
                keyid:B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/BF1CFAE8F1A411EE9B04F15FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.64.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:1f:d8:20:ad:96:43:c9:e0:49:81:87:b3:1b:b2:b5:92:4c:
         b0:e7:91:7f:17:5d:5f:0e:2e:9b:49:71:61:cd:e2:64:cc:0d:
         a2:e7:91:1e:f4:0e:7c:85:44:39:62:9c:ed:9b:c4:2e:c1:2b:
         36:48:0d:d2:2a:8b:9f:00:dc:50:8b:5f:52:c8:f1:02:96:20:
         a3:96:9e:54:36:d4:cf:68:ab:7d:cd:b9:55:cf:55:d3:e1:06:
         01:23:39:56:48:9c:d3:16:02:79:a9:d2:e5:c0:84:17:ec:a4:
         f0:2d:22:83:9d:02:26:76:25:15:7b:37:f2:e8:31:6c:b9:0f:
         e6:f6:26:27:a9:29:a4:1a:a8:e3:48:e4:8b:ee:b8:3e:90:24:
         97:cd:01:b4:76:17:2c:cc:04:4a:e7:23:db:95:4f:93:50:94:
         0d:15:f9:47:e2:6d:a7:55:70:df:fb:e4:20:c0:b0:73:e4:8c:
         0d:75:a3:06:70:49:1a:9e:01:ce:83:ec:d3:d9:7b:a5:1f:9f:
         24:42:17:eb:6d:0c:43:b0:88:aa:e0:df:a9:ee:53:ae:d2:44:
         82:c7:a5:49:a7:86:83:a7:45:db:4b:fa:1f:3d:30:3c:99:94:
         43:8f:ec:df:57:d3:58:d4:f6:f5:78:b8:ef:0e:a9:67:a7:27:
         e3:ac:f1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:26:04 2024 by rpki-client on console-fra.rpki-client.org