Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/93441F8211CB11EEB8151734C4F9AE02.roa
File:                     93441F8211CB11EEB8151734C4F9AE02.roa (raw, json)
Hash identifier:          e6Egs/x2MrOpLmSTkV8bn9fKgYxAdbD5nf7EYufv/sU=
Subject key identifier:   44:CF:4F:05:D2:25:94:CE:A0:E6:B0:3D:41:48:D3:79:FD:1F:DB:20
Certificate issuer:       /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial:       339B
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/93441F8211CB11EEB8151734C4F9AE02.roa
Signing time:             Fri 10 Nov 2023 15:41:00 +0000
ROA not before:           Fri 10 Nov 2023 15:41:00 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     21859
IP address blocks:        103.21.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
                          rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 15:33:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13211 (0x339b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
        Validity
            Not Before: Nov 10 15:41:00 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=654e4f0c-1849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:86:88:bb:e5:9d:1c:34:a8:da:0d:23:24:38:
                    d9:51:89:b7:06:a1:c9:9b:41:1e:86:87:75:d2:c3:
                    36:72:46:d8:42:62:7b:49:95:de:9b:5b:b1:88:a7:
                    fc:eb:29:83:e8:94:83:11:b0:27:cb:77:51:75:f2:
                    39:3d:25:39:37:ce:65:d4:cb:7e:a7:6b:d4:61:1d:
                    21:1d:87:f1:f1:c8:77:d8:e0:9e:ab:32:14:11:72:
                    ed:d5:37:78:81:bf:bd:54:38:76:f9:84:db:95:b0:
                    33:50:79:87:a4:fa:8c:c3:dc:c5:2e:a6:2a:8e:df:
                    55:8c:bc:a7:98:72:76:95:73:a0:7d:16:0e:bc:63:
                    e2:1c:80:79:35:0e:eb:d2:e7:90:f8:5e:59:d0:9e:
                    de:21:03:34:7b:e9:30:35:0f:30:72:f3:98:60:63:
                    d0:9d:04:d6:bd:f9:9d:c4:14:a8:10:84:cc:7e:ce:
                    e0:d5:1b:9d:e5:3f:e5:ec:07:9c:56:20:d1:61:09:
                    1e:32:22:ee:7d:17:de:4c:14:cd:e7:eb:cb:37:a8:
                    2c:3e:8f:03:90:35:a8:0d:4f:bd:50:2d:78:38:cd:
                    48:d3:da:8c:2a:19:28:84:73:b3:f4:d1:c6:e8:5e:
                    e6:d9:c8:75:5e:99:5e:4f:54:76:b6:2e:02:28:21:
                    1e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CF:4F:05:D2:25:94:CE:A0:E6:B0:3D:41:48:D3:79:FD:1F:DB:20
            X509v3 Authority Key Identifier:
                keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/93441F8211CB11EEB8151734C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:08:26:3d:ba:ad:01:4e:ba:b8:15:cf:a3:09:73:26:8d:93:
         de:92:18:75:ec:54:1e:e9:fc:ba:10:93:ad:66:65:09:13:b1:
         12:a9:c9:55:c3:77:ae:9f:e7:a6:e1:26:f7:e4:9b:ab:be:b1:
         26:bc:2a:7a:97:32:df:86:75:99:40:72:69:ea:5c:37:74:16:
         dc:96:62:50:52:60:46:b9:ec:1f:d3:72:82:87:25:6c:f2:03:
         3c:bb:51:21:bb:10:c7:a1:8e:e8:09:6e:13:75:38:ec:82:34:
         00:f8:de:4e:27:60:3d:bc:ef:15:cd:c3:6c:99:fa:37:62:97:
         92:02:0b:0a:05:31:a6:a7:f7:ae:19:75:80:75:06:2a:6f:2e:
         c6:a6:da:30:9e:a5:c1:c2:90:df:cd:09:e4:a5:dc:df:0a:c3:
         d1:ff:85:71:3f:b0:ba:ce:b6:c1:03:6b:4d:30:39:5e:59:0c:
         87:42:36:db:20:19:45:43:d4:43:62:e1:8b:a6:1c:01:7a:4a:
         7e:47:fd:ad:ed:65:3e:0f:67:3d:33:1c:6b:d3:00:7a:e5:ea:
         ba:bf:59:6d:b1:0f:92:a9:c7:59:a8:08:03:b4:7a:3c:15:1b:
         b0:0b:03:21:72:ea:11:16:59:f1:e5:77:39:4b:2e:a1:6f:90:
         fc:51:5c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:18:28 2024 by rpki-client on console-ams.rpki-client.org