Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/880C4DF80FE411EE90944D75C4F9AE02.roa
File:                     880C4DF80FE411EE90944D75C4F9AE02.roa (raw, json)
Hash identifier:          ty5BYEXKZV5AWkkmYV4pnoWKf56lpR/zLBDndr/xc/8=
Subject key identifier:   2E:D2:1C:5A:06:06:85:E3:2D:C9:0E:45:D7:17:87:B4:99:9D:A9:49
Certificate issuer:       /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial:       084C
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/880C4DF80FE411EE90944D75C4F9AE02.roa
Signing time:             Mon 02 Sep 2024 21:29:58 +0000
ROA not before:           Mon 02 Sep 2024 21:29:58 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     4686
IP address blocks:        103.37.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
                          rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2124 (0x84c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
        Validity
            Not Before: Sep  2 21:29:58 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66d62e56-6391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:df:2d:d3:7f:b5:23:09:47:c8:50:0b:92:fb:
                    40:60:01:17:ec:cd:db:af:ca:77:13:38:62:ea:64:
                    3e:bb:4f:d1:52:db:b4:9b:a0:5c:fe:a7:c8:20:29:
                    52:46:75:3b:70:25:69:c4:a7:da:d8:06:8e:8c:68:
                    50:0b:a4:c8:9c:03:9e:6d:e2:dd:d1:fe:88:c8:8c:
                    78:fe:33:22:9e:eb:4f:99:e6:d3:ed:b5:74:55:0d:
                    8e:c0:1a:0e:5b:e3:6e:93:4d:26:b3:f2:6b:8e:0e:
                    6b:80:6e:60:62:45:a5:57:73:41:7d:17:f2:e0:99:
                    06:95:64:0e:4a:1b:3d:82:85:6d:d3:d7:bc:d3:2e:
                    49:f2:8d:4a:ff:c4:37:58:ce:4b:93:e1:3b:28:f2:
                    49:04:ac:ec:8f:dc:b5:a8:e8:e5:79:fb:d4:29:cc:
                    54:12:fc:4f:08:34:3d:59:96:ea:c4:5c:6a:f7:a2:
                    a1:cd:41:eb:81:d6:be:b1:52:a9:cf:e1:16:55:af:
                    fd:29:1f:6a:82:ec:3c:9c:27:7a:5a:d8:3c:69:01:
                    bd:4d:f2:b9:e5:20:c5:98:e0:e8:c2:bc:ac:f4:7c:
                    ea:18:9f:39:26:7b:56:bd:02:7b:73:97:e4:ac:f3:
                    c8:70:65:d2:20:2f:8a:4b:2b:6f:13:56:62:5b:23:
                    7f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D2:1C:5A:06:06:85:E3:2D:C9:0E:45:D7:17:87:B4:99:9D:A9:49
            X509v3 Authority Key Identifier:
                keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/880C4DF80FE411EE90944D75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:d4:e5:7b:09:5d:18:03:db:42:50:52:7e:89:b6:cf:7e:fa:
         6f:28:1c:18:83:d4:ee:ed:17:10:ad:53:d6:01:58:72:55:4e:
         22:dd:d9:5f:80:6e:41:dc:d4:15:55:3f:b9:31:7d:35:c4:c3:
         76:15:6f:65:ec:30:8d:c2:a4:94:19:45:07:2e:58:bf:0a:9e:
         0b:e9:17:95:80:87:ed:43:00:b8:2a:c4:7f:0b:81:dc:52:ce:
         4e:72:4c:9e:2a:1b:2f:f8:0b:8d:14:24:61:2e:bd:39:68:49:
         ca:21:47:4d:4b:67:70:73:80:81:11:a2:b8:fd:97:d8:c9:14:
         70:39:a1:9f:4f:db:e8:3c:33:18:d4:64:63:1a:66:a0:00:c3:
         58:59:72:0e:ef:a9:cd:8d:02:7e:49:cf:16:5a:80:a6:db:89:
         94:1e:d6:f7:62:93:5a:d9:bc:2b:a7:a5:5d:9b:69:dc:ee:88:
         6d:cf:97:5c:f9:6f:c8:db:87:29:f3:15:d5:01:00:5d:2c:ad:
         e3:9c:57:f1:20:22:4d:52:06:fe:8d:52:cd:1c:aa:9f:40:37:
         dd:81:68:74:71:23:10:5c:3d:4c:90:90:74:d5:00:20:36:0c:
         06:d8:3a:f1:c6:93:c1:c7:05:20:2d:98:ad:c7:d9:85:63:4a:
         8f:1a:08:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:28 2024 by rpki-client on console-ams.rpki-client.org