Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/F67928B2607211EFADFDA31CC4F9AE02.roa
File:                     F67928B2607211EFADFDA31CC4F9AE02.roa (raw, json)
Hash identifier:          GgjTm2foJy13YqAGAhvufjFQnhTuEPbAqgibT/4+/5c=
Subject key identifier:   2D:AB:E5:F4:46:61:76:C8:CF:44:2D:95:9E:F7:59:46:1A:DA:19:EE
Certificate issuer:       /CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Certificate serial:       133B
Authority key identifier: B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/F67928B2607211EFADFDA31CC4F9AE02.roa
Signing time:             Thu 22 Aug 2024 10:40:35 +0000
ROA not before:           Thu 22 Aug 2024 10:40:35 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     214766
IP address blocks:        103.78.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl
                          rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 16:54:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4923 (0x133b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
        Validity
            Not Before: Aug 22 10:40:35 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66c715a3-259d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:57:7e:7f:ab:a9:fe:b8:d2:9e:aa:ba:a1:85:
                    e7:c3:fd:e1:46:2a:4c:f9:b3:03:22:45:0e:b7:17:
                    68:2d:46:5b:46:c1:4a:1b:77:f1:12:d0:f1:1f:70:
                    fc:2b:cb:cc:cb:c1:5d:f1:c8:46:cf:f0:54:f1:68:
                    85:c7:79:78:80:b5:37:77:3e:2d:31:0b:95:85:5f:
                    6a:98:a2:a5:6d:29:66:84:cf:5e:ec:46:dc:aa:45:
                    85:16:95:71:4b:f6:0a:ea:a6:76:f0:3e:33:24:2b:
                    bc:4e:fb:23:71:9c:a9:06:3a:cf:1d:83:db:a2:fd:
                    cd:5d:1a:5f:72:9b:f5:96:da:d8:9f:d0:c0:9c:b6:
                    e7:c0:c1:6a:96:13:94:86:68:06:cb:7d:65:4d:38:
                    f7:eb:58:7f:47:c5:76:75:b0:0a:e5:c3:55:cd:20:
                    31:52:44:8c:d1:21:27:f9:0b:29:2b:9f:da:23:42:
                    1f:92:45:9e:af:87:d5:a4:9d:22:de:79:55:eb:09:
                    10:f9:c8:a5:66:e9:2d:dc:76:54:a2:63:43:19:8a:
                    a2:1d:a7:8b:26:a6:95:61:f0:4e:ae:35:51:d5:8c:
                    fc:31:a5:c8:c5:7c:bc:fb:1b:a0:75:5f:13:6f:5e:
                    42:bd:d3:f7:9f:26:cf:7b:c1:62:30:aa:79:a3:97:
                    ed:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AB:E5:F4:46:61:76:C8:CF:44:2D:95:9E:F7:59:46:1A:DA:19:EE
            X509v3 Authority Key Identifier:
                keyid:B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/F67928B2607211EFADFDA31CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:17:84:38:fe:c6:0b:85:9a:d0:14:d5:30:2c:49:46:0a:4b:
         f0:85:44:3d:bb:cb:91:71:7a:be:8b:03:7b:5d:78:23:88:30:
         c8:e1:ed:d7:d4:39:7a:04:41:2e:79:28:65:3a:a0:68:a9:f9:
         54:50:60:b3:8f:41:ea:4c:78:5e:c9:aa:b2:c9:ea:a1:97:9e:
         68:25:30:0a:0b:68:24:f6:3c:d7:d3:07:2b:f1:5f:be:d2:f7:
         e2:91:77:26:e6:1b:6c:56:43:6a:87:85:dd:f7:c1:21:24:ca:
         20:f3:87:78:70:61:b2:98:c0:a4:11:e4:ec:67:cd:68:2a:98:
         53:d3:29:bc:13:22:70:61:da:b6:fe:ad:0b:ba:4d:5a:f3:8f:
         64:7e:13:f3:a6:db:54:6a:18:af:69:ca:89:4c:0b:0a:54:11:
         15:5e:ae:c1:04:0f:33:c7:25:33:9c:f2:94:8c:04:c5:ae:60:
         d5:ea:1a:7e:b6:46:a5:55:c1:c0:d2:0f:91:f7:64:2c:71:1d:
         36:d6:dc:99:4b:3a:8e:92:cb:20:18:03:a3:c9:6c:16:13:78:
         09:84:ce:04:b1:86:84:36:2b:7a:c0:03:47:89:01:db:07:c5:
         c9:e6:23:2b:69:61:d3:45:19:0f:bd:06:87:d4:bb:85:31:be:
         74:21:71:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:24:11 2024 by rpki-client on console-ams.rpki-client.org