Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/AAEE51D4A9EC11EE800F7626C4F9AE02.roa
File:                     AAEE51D4A9EC11EE800F7626C4F9AE02.roa (raw, json)
Hash identifier:          zjLP8YcqehVgErJ8jrRVX2yQpUwpELIA2MJhS+gL/m0=
Subject key identifier:   10:AA:E0:DF:BB:1A:77:53:48:86:D3:C3:FA:48:5A:D1:4A:63:43:DE
Certificate issuer:       /CN=A915D8E2/serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020
Certificate serial:       04
Authority key identifier: 7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/AAEE51D4A9EC11EE800F7626C4F9AE02.roa
Signing time:             Wed 03 Jan 2024 04:00:44 +0000
ROA not before:           Wed 03 Jan 2024 04:00:44 +0000
ROA not after:            Wed 29 May 2024 00:00:00 +0000
asID:                     139901
IP address blocks:        103.85.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl
                          rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 18:33:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D8E2/serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020
        Validity
            Not Before: Jan  3 04:00:44 2024 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=6594dbec-3ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:20:5e:ce:95:57:75:64:05:e5:40:4e:01:f3:
                    fc:9f:b9:8b:38:40:40:d7:80:d8:1a:2e:00:91:51:
                    be:5d:82:07:92:d2:97:80:e4:b8:bf:a9:b7:2e:f4:
                    1b:0a:29:94:cc:63:8e:67:00:c4:98:34:73:5a:6a:
                    fd:af:75:89:73:f5:4b:f0:ce:4c:cd:1f:fa:a9:5d:
                    6e:37:1e:79:6f:7c:cc:ea:c1:dd:53:58:b7:4d:bc:
                    dd:31:d5:57:f9:c9:db:c7:6a:a4:f6:8c:ed:b0:17:
                    c0:75:51:d5:6e:07:5f:96:cb:bc:26:37:a8:ae:48:
                    e8:ac:81:6e:f7:08:5a:71:7f:fb:1b:d3:d2:ec:12:
                    fd:69:e9:6b:34:22:ac:38:fd:9f:b1:47:e0:f3:fa:
                    53:e8:d2:ce:d0:ad:2a:f6:bb:98:4c:a5:af:ed:1f:
                    52:ef:04:f2:e6:b1:65:09:7f:63:70:0f:da:21:4d:
                    3b:1f:64:80:6a:0b:e1:20:37:f8:46:c8:22:d3:95:
                    e5:36:f3:ca:5d:8a:61:45:75:d6:4c:72:c5:9c:33:
                    d2:4e:e9:e7:e7:13:65:0d:b4:44:9c:83:cb:ee:40:
                    6e:51:ae:1d:d6:f2:44:56:f4:9d:88:d7:72:ae:05:
                    ac:63:71:ea:9b:51:2e:1a:60:1c:e8:79:a1:0f:3b:
                    fc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AA:E0:DF:BB:1A:77:53:48:86:D3:C3:FA:48:5A:D1:4A:63:43:DE
            X509v3 Authority Key Identifier:
                keyid:7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/AAEE51D4A9EC11EE800F7626C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:58:90:d6:83:57:95:e3:84:54:b9:9c:80:e6:33:f3:4b:15:
         ab:56:3a:81:28:02:32:5d:2a:24:13:6e:e5:5d:84:f3:d4:fe:
         b4:bc:a6:14:d7:6d:5d:90:ec:5a:3e:4e:7d:92:7e:f7:c3:9f:
         88:2a:9d:87:5e:eb:2f:c8:17:e5:41:15:03:53:13:13:df:30:
         3d:b3:03:4d:15:01:3d:67:63:38:9a:ed:c6:b6:06:61:6c:a3:
         f1:51:59:e1:60:53:15:5b:30:bd:64:97:08:56:49:d1:6d:43:
         76:44:67:c8:bf:bd:7b:ae:22:20:5a:1c:1a:6a:a0:d4:92:82:
         dd:17:6a:61:52:ed:aa:a3:cf:60:76:1d:ec:c6:6e:8a:b1:ec:
         48:c3:bd:a5:09:01:8c:73:83:5b:4a:3a:d3:cf:be:a7:f1:7e:
         9d:ea:c4:0c:c9:42:db:16:10:f7:39:ff:63:39:d8:d2:da:9f:
         dd:8a:41:49:f8:d7:dd:4a:90:c1:c2:b0:06:ea:92:60:02:1e:
         fe:ee:57:c9:a4:28:e9:41:ea:64:f0:4c:09:d7:a3:7e:08:21:
         9f:e2:d9:21:1d:8e:45:25:9f:18:13:2f:57:12:18:9e:04:6e:
         28:24:4d:48:24:08:3e:9f:7f:0e:72:0f:09:67:bb:07:d4:ed:
         c5:d5:ac:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 22:24:04 2024 by rpki-client on console-ams.rpki-client.org