Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/8EAA5C7E4FBF11EFBA8E5F12C4F9AE02.roa
File:                     8EAA5C7E4FBF11EFBA8E5F12C4F9AE02.roa (raw, json)
Hash identifier:          Wanyw+cc+KL/trW3ZEjMYznqZ4yFIMXxUytBXL+aP24=
Subject key identifier:   62:45:F2:E2:45:72:EE:39:4C:68:96:BA:D5:88:A5:56:6A:E5:B1:4E
Certificate issuer:       /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial:       0107
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/8EAA5C7E4FBF11EFBA8E5F12C4F9AE02.roa
Signing time:             Thu 01 Aug 2024 04:36:02 +0000
ROA not before:           Thu 01 Aug 2024 04:36:02 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     5065
IP address blocks:        103.92.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
                          rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:08:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
        Validity
            Not Before: Aug  1 04:36:02 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66ab10b2-f766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8d:a8:a6:14:82:fd:40:71:12:1e:a4:72:67:
                    22:1b:3b:4f:62:b7:f4:23:0d:2c:90:89:d2:c0:dd:
                    f5:ac:4c:2d:05:d9:d7:44:0a:89:cd:c8:48:a3:07:
                    37:0d:14:fb:30:15:c9:f5:bd:79:7e:de:ff:d4:16:
                    a9:0a:72:c4:8e:a9:5c:02:38:ba:e1:7a:bc:f9:f0:
                    09:f9:05:9e:bd:15:7f:d4:c1:e9:3f:8b:12:99:8e:
                    e9:b1:95:e9:3f:20:92:3c:81:60:7a:df:dd:b8:03:
                    9d:90:3f:49:9a:18:8c:99:36:6e:5a:ff:f0:a9:b3:
                    86:61:76:8a:a2:6d:60:6b:07:2f:7a:c7:8b:25:ac:
                    16:55:70:5f:41:35:6b:72:b4:f7:0c:79:5e:e9:cd:
                    c3:f5:3b:14:6c:ca:6e:b6:a7:f8:b6:43:b9:ac:27:
                    a6:ae:12:63:1a:81:d4:1b:58:f9:91:4f:16:16:ae:
                    88:bd:8c:60:09:cf:21:79:ab:87:8e:a6:cc:16:65:
                    0c:ba:16:68:97:91:0b:3d:fd:38:4a:de:3e:85:3b:
                    ee:75:d0:65:8a:26:3b:d4:c6:6f:07:77:40:d2:96:
                    fc:c9:ef:24:28:23:1e:42:f5:98:1b:7b:ae:28:77:
                    a7:02:a5:13:3e:ce:6b:0f:cc:ba:7c:f0:20:5c:a9:
                    b0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:45:F2:E2:45:72:EE:39:4C:68:96:BA:D5:88:A5:56:6A:E5:B1:4E
            X509v3 Authority Key Identifier:
                keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/8EAA5C7E4FBF11EFBA8E5F12C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:de:96:f2:31:07:d2:18:56:17:d7:eb:53:3d:4a:11:35:db:
         3c:4b:67:d6:71:f3:53:1d:a8:b6:4e:2e:35:1c:da:f8:98:59:
         1d:53:65:cf:82:8c:f3:1b:64:7a:57:b7:22:a5:51:da:40:57:
         ce:53:6f:a4:a9:d9:a4:4c:90:76:6f:57:4a:7c:3e:27:3c:3c:
         df:84:0e:87:8a:c7:cf:87:36:27:e7:eb:d9:bf:93:24:85:d8:
         94:fd:ff:7c:18:24:f9:35:14:5a:10:81:6e:43:c8:9a:9c:e6:
         17:2b:77:ba:c0:1c:3e:c1:ec:54:e9:6d:7e:90:8e:4c:b3:b8:
         d3:19:f1:69:ca:fe:ef:9d:ac:83:d8:0e:8d:04:f4:e3:f8:3b:
         58:dc:09:82:da:f4:7c:2e:82:ad:de:f3:c8:46:3f:f0:8b:6a:
         61:10:9f:44:03:33:74:82:18:49:4c:bb:0b:0a:4d:77:87:d5:
         75:3a:5c:07:eb:69:e9:20:8b:ea:bc:86:5b:a2:cf:bb:88:0f:
         c0:67:1a:5a:48:60:a5:d9:4e:1a:bf:28:8d:cc:2e:62:0c:a9:
         56:0b:c0:d1:a1:eb:4a:77:94:4f:12:b7:a8:bd:b0:12:b8:f8:
         ac:3e:10:e4:02:00:26:74:c1:10:71:d8:e0:45:95:b6:d0:47:
         c7:63:ea:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:05 2024 by rpki-client on console-ams.rpki-client.org