Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/B174D294F50011EEB5298B64C4F9AE02.roa
File:                     B174D294F50011EEB5298B64C4F9AE02.roa (raw, json)
Hash identifier:          DmsBe/nWUMAmA56V3udTaCz0NsFVXi5Q9O4KvJmVDd0=
Subject key identifier:   4F:38:50:D9:61:85:1F:11:AA:16:93:67:96:35:15:F9:56:0E:D2:6D
Certificate issuer:       /CN=A91542DD/serialNumber=1C80F9D577EDC4603520314A17A45CB6A7C5C160
Certificate serial:       0C16
Authority key identifier: 1C:80:F9:D5:77:ED:C4:60:35:20:31:4A:17:A4:5C:B6:A7:C5:C1:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HID51XftxGA1IDFKF6RctqfFwWA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/B174D294F50011EEB5298B64C4F9AE02.roa
Signing time:             Thu 02 May 2024 19:03:26 +0000
ROA not before:           Thu 02 May 2024 19:03:26 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     7015
IP address blocks:        36.255.213.0/24 maxlen: 24
                          103.210.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.crl
                          rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HID51XftxGA1IDFKF6RctqfFwWA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 17:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3094 (0xc16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91542DD/serialNumber=1C80F9D577EDC4603520314A17A45CB6A7C5C160
        Validity
            Not Before: May  2 19:03:26 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=6633e37e-b03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6f:e5:45:b1:d8:66:35:f2:32:ea:6f:f9:db:
                    13:8c:e6:ae:dd:29:00:c7:e6:b7:34:e3:a3:3f:41:
                    4b:d9:9b:dd:5f:8f:8f:23:7e:fd:b7:f3:5d:42:eb:
                    5d:01:57:83:3c:42:58:6b:eb:2b:c6:44:4d:32:da:
                    b0:f7:3c:97:80:75:43:0c:58:ae:89:5b:b7:56:68:
                    50:77:ad:d3:d2:74:ba:89:1c:7d:fc:1a:e0:c4:1f:
                    e5:7c:20:57:7e:7d:4e:77:6d:df:52:9f:e2:fe:5f:
                    d7:57:80:df:47:64:a0:0d:d4:96:23:37:d4:d7:74:
                    26:ba:fb:dc:c8:d6:29:c7:4d:72:17:3e:a4:6a:62:
                    d4:c5:2c:df:d9:38:bf:ed:2f:6e:b4:94:80:7d:09:
                    07:29:04:b3:82:90:fd:8e:0d:1c:4b:e5:78:cf:37:
                    1f:f3:62:9a:58:7d:86:48:93:bf:5b:bc:54:a3:91:
                    f9:d6:37:c5:1b:50:52:08:e7:db:0f:d0:d5:4c:2c:
                    e3:29:4f:39:c0:74:37:3f:2d:ab:58:26:d9:b3:7f:
                    c1:c1:a9:ee:b0:f7:9d:71:93:0a:25:0c:2e:5e:a4:
                    45:57:b2:e4:68:a8:34:28:ec:c6:01:89:15:e5:3c:
                    36:02:71:48:5a:93:77:bc:85:fd:2c:dc:a9:86:67:
                    ec:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:38:50:D9:61:85:1F:11:AA:16:93:67:96:35:15:F9:56:0E:D2:6D
            X509v3 Authority Key Identifier:
                keyid:1C:80:F9:D5:77:ED:C4:60:35:20:31:4A:17:A4:5C:B6:A7:C5:C1:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HID51XftxGA1IDFKF6RctqfFwWA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/B174D294F50011EEB5298B64C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.255.213.0/24
                  103.210.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:6f:43:11:9b:80:75:15:25:ca:14:ed:36:46:f1:ae:9f:b3:
         9e:2f:76:ec:c5:34:39:d9:ba:27:0f:d1:95:18:17:1f:17:9d:
         26:ed:bc:6f:06:7c:0d:4c:f5:7f:3a:99:10:33:ab:41:5a:8b:
         83:32:37:a0:e7:1b:36:c2:de:0a:f6:50:68:fc:f9:e4:2c:fd:
         3f:3d:9d:c0:0d:22:ee:d5:14:b3:de:bf:85:49:3a:63:52:b0:
         cd:08:61:63:60:b5:a5:7d:95:58:f8:0b:e7:26:34:9e:57:2f:
         f8:10:1a:70:61:75:d8:b9:d9:f8:d6:46:0c:0a:23:44:55:eb:
         3f:bb:85:9c:4b:01:e9:37:fa:85:e9:c6:8e:2b:44:ce:ac:f3:
         d9:c8:a9:d8:48:d4:ec:6a:ea:be:1d:c2:a1:23:fd:13:99:f4:
         1a:76:34:3e:88:7d:90:8e:3a:d1:6d:56:5e:f1:bf:32:c2:56:
         33:7e:ac:76:46:f3:ac:1e:7f:a4:4e:4c:bb:d6:77:25:a0:c7:
         f4:a5:41:55:aa:e2:6e:2f:b3:92:44:71:3b:97:3e:41:bc:77:
         69:c3:bb:62:19:6a:18:96:c4:55:44:ae:96:68:a3:2f:22:35:
         dd:1f:a9:91:0e:40:2b:78:72:46:94:99:03:1a:b5:56:59:11:
         7f:6d:08:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:18 2024 by rpki-client on console-ams.rpki-client.org