Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/8293F5FC179711ECB7F7A075C4F9AE02.roa
File:                     8293F5FC179711ECB7F7A075C4F9AE02.roa (raw, json)
Hash identifier:          azztU6jGWGkJ9XE0wv+vwlMZ1OuwZlxTMNo/JPXSCFM=
Subject key identifier:   DC:2E:39:99:FF:B6:96:79:91:26:CD:04:72:B4:50:C0:61:26:F5:F0
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       052B
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/8293F5FC179711ECB7F7A075C4F9AE02.roa
Signing time:             Tue 03 Sep 2024 01:14:46 +0000
ROA not before:           Tue 03 Sep 2024 01:14:46 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     0
IP address blocks:        203.110.248.0/22 maxlen: 22
                          203.110.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1323 (0x52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Sep  3 01:14:46 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d66306-1a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:72:df:93:f7:99:85:15:bf:f9:17:85:ed:06:
                    ed:21:2a:a6:7c:0f:ed:22:54:5b:43:d9:98:f1:24:
                    4b:6b:e3:93:7c:f0:b9:ab:2c:53:9b:01:cb:e6:9a:
                    d1:42:11:10:84:79:e8:ba:78:4e:93:2b:28:24:fd:
                    4d:1e:a3:11:27:f3:96:a2:e4:f9:43:c4:df:fc:0c:
                    0a:a6:a9:c1:40:79:72:5d:fb:bf:61:b4:ae:df:e7:
                    9b:10:f6:7e:1d:35:3a:67:52:af:10:1f:7c:c8:0d:
                    d0:d3:53:fe:b0:10:0f:d0:4e:3b:05:14:ad:3d:62:
                    30:4a:4d:dd:1e:4f:2b:9f:57:34:6c:37:e2:fb:87:
                    7a:1f:3c:87:0e:b9:1e:9d:36:82:79:05:d1:ca:dc:
                    53:9e:a0:46:b5:77:67:c7:9e:0a:f4:79:89:fd:39:
                    73:22:29:30:84:f8:ee:da:fd:55:97:61:85:5c:98:
                    89:7a:66:64:45:7a:da:7b:97:2d:f5:ed:6f:26:a7:
                    f3:8c:66:93:0f:d5:80:d9:dd:35:83:57:fa:ce:95:
                    5e:9f:b3:a8:aa:f6:dd:a9:a1:b1:10:08:47:d0:b5:
                    f6:58:ba:23:d7:ed:79:83:83:53:0f:9c:0c:71:fe:
                    8c:d5:48:4e:f1:85:eb:84:8c:ab:b0:da:18:6c:22:
                    e4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2E:39:99:FF:B6:96:79:91:26:CD:04:72:B4:50:C0:61:26:F5:F0
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/8293F5FC179711ECB7F7A075C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.110.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b6:00:8e:8c:77:7a:06:d5:04:f6:fa:59:2d:82:45:e1:a9:e5:
         93:bd:e1:dd:60:4f:1c:bc:58:24:62:0e:51:56:8d:60:47:13:
         86:cd:cc:ca:ba:68:97:5d:ef:b6:b5:ae:ce:78:9c:13:54:f4:
         72:d0:9b:3a:bb:61:30:af:45:03:56:94:8e:2c:3c:b0:91:4f:
         9e:fc:76:1e:28:d3:cd:48:78:12:c8:da:15:03:2f:ee:4d:02:
         7c:39:30:cc:35:b0:db:32:6d:a5:a0:50:81:03:ad:ec:50:d3:
         6a:87:7c:7f:da:d7:7f:02:18:2f:db:e6:8d:b2:04:96:3b:ae:
         24:44:bd:e7:1a:b3:cb:4c:15:3a:f3:60:1c:50:99:cc:00:b7:
         5c:09:9f:0f:48:0f:75:b8:29:37:d0:3a:1d:00:78:19:bd:b5:
         79:75:e7:18:93:e4:54:90:cf:fe:c5:19:b0:a2:22:ad:2f:cc:
         0a:9d:e2:ce:4c:59:3c:04:c3:cb:05:bb:6c:49:f0:dd:5b:40:
         9b:08:cd:f8:42:0d:79:dc:68:24:49:f6:82:8d:0e:70:22:d8:
         ef:8e:7a:ba:95:ae:ce:4f:ae:28:58:5f:ca:b5:06:25:67:0c:
         5b:00:b9:4b:9f:61:6c:8c:5d:9f:a2:7f:52:23:25:98:d5:6d:
         59:38:f0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:21:20 2024 by rpki-client on console-fra.rpki-client.org