Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/DE95A942581611EE878B2E54C4F9AE02.roa
File:                     DE95A942581611EE878B2E54C4F9AE02.roa (raw, json)
Hash identifier:          2edhdcxDL3hq/Y/5irWUYjIM2MnhCjcG113R+cVIiMY=
Subject key identifier:   DF:20:65:91:56:71:9B:95:4F:E4:26:42:C8:48:51:6E:3A:ED:D1:13
Certificate issuer:       /CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
Certificate serial:       1D30
Authority key identifier: 1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/DE95A942581611EE878B2E54C4F9AE02.roa
Signing time:             Thu 18 Jul 2024 16:33:27 +0000
ROA not before:           Thu 18 Jul 2024 16:33:27 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     135408
IP address blocks:        103.217.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl
                          rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7472 (0x1d30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
        Validity
            Not Before: Jul 18 16:33:27 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=669943d6-5059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4c:da:0f:8d:1f:ca:89:10:11:89:66:62:58:
                    cd:11:22:30:38:2d:61:e4:f3:76:b9:a9:f1:56:44:
                    8d:4d:38:28:90:65:a6:7f:e7:fd:0b:f2:61:e0:87:
                    3a:cb:83:73:ff:c2:e6:4b:6b:7e:2d:f7:94:08:bb:
                    97:21:18:8b:38:45:3d:46:8b:aa:30:29:bb:17:8c:
                    1b:af:e4:13:c6:69:fc:72:be:56:f6:6c:72:b6:b1:
                    51:a5:12:f1:75:5a:f3:79:50:78:d2:db:96:dc:e8:
                    52:32:98:26:c2:d7:c6:1f:bf:a0:6b:4c:67:8a:47:
                    f1:d1:22:b4:1e:14:1d:63:19:2c:95:67:67:6a:6f:
                    64:0a:6a:f3:d4:8c:3d:78:68:ea:0c:08:50:f7:d4:
                    44:ca:1a:5f:c4:db:86:c4:27:2c:28:9e:73:7d:ae:
                    4e:8b:5d:74:03:f0:24:8d:fc:68:22:ba:d1:13:93:
                    35:bc:0c:1d:04:5b:6a:e3:34:28:e7:d3:97:45:1f:
                    15:50:4b:4a:82:46:7a:ed:03:4d:35:14:17:5b:7d:
                    66:09:c8:a7:a0:bc:f8:ce:4b:3e:7c:6f:3f:1d:bf:
                    14:44:24:89:94:32:df:b6:6f:4a:14:98:e3:91:04:
                    b5:93:9b:74:ca:53:1f:a2:2e:26:31:61:64:21:44:
                    f9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:20:65:91:56:71:9B:95:4F:E4:26:42:C8:48:51:6E:3A:ED:D1:13
            X509v3 Authority Key Identifier:
                keyid:1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/DE95A942581611EE878B2E54C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.217.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:48:b5:87:cf:7e:8b:d4:c5:30:87:10:4f:4a:8b:91:1f:a6:
         4a:17:39:fb:92:62:f7:3a:a9:20:69:75:13:ec:10:e4:82:22:
         d7:71:fc:a1:04:0d:fa:34:0f:db:99:20:0e:d3:27:25:4b:c2:
         93:c6:8a:3b:9d:70:f6:2e:c7:ee:21:b4:d8:b9:68:c8:36:ea:
         30:24:c9:41:ee:a4:8e:07:68:4e:0c:6b:a7:ad:50:da:f5:76:
         d9:2a:85:8e:dd:87:94:ed:d0:ed:5f:93:45:6d:62:6f:1e:2e:
         56:43:c2:06:39:b4:5a:84:52:ae:06:6a:e7:6b:83:4c:a5:e8:
         e3:9b:38:ae:02:c9:82:a1:b7:a8:95:31:a8:ab:94:b7:4d:e5:
         71:77:d1:67:c6:d2:80:07:47:ab:c7:2a:60:3b:90:4c:bf:d4:
         b5:ab:99:dc:af:c1:2f:67:80:be:f9:d5:43:05:60:f4:a1:d3:
         13:c7:65:58:6a:3f:10:b9:61:b5:52:fb:91:3f:56:54:07:b7:
         de:30:c9:8d:d3:24:f6:40:eb:77:54:5a:7b:7f:ba:e2:4e:66:
         3e:13:cb:10:b2:8f:17:f6:b5:47:79:45:3d:60:df:e1:9e:e3:
         34:4f:c6:b3:e9:93:f6:88:b0:a5:3a:91:cd:4e:48:16:fe:4b:
         2b:f7:db:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:46 2024 by rpki-client on console-fra.rpki-client.org