Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/EDB5F114A63711EF89F3B833C4F9AE02.roa
File:                     EDB5F114A63711EF89F3B833C4F9AE02.roa (raw, json)
Hash identifier:          Sx0Axir5QVqEiOp6QnF0SJ0OaMXP209IGbEBkaZmJ4w=
Subject key identifier:   63:02:C8:BF:84:0D:FA:82:96:78:8A:CA:9E:C1:8E:B9:DA:1A:96:BB
Certificate issuer:       /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
Certificate serial:       2204
Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/EDB5F114A63711EF89F3B833C4F9AE02.roa
Signing time:             Wed 20 Nov 2024 06:31:08 +0000
ROA not before:           Wed 20 Nov 2024 06:31:08 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        103.205.78.0/24 maxlen: 24
                          103.205.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl
                          rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 15:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8708 (0x2204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
        Validity
            Not Before: Nov 20 06:31:08 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=673d822b-ec41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:05:9a:07:33:e5:ed:56:ce:46:2b:ac:2d:12:
                    f7:2e:7f:20:82:0a:8d:64:d8:19:d0:d4:ca:82:20:
                    7a:6b:28:aa:7f:d5:6f:22:ae:b4:3c:85:1e:92:43:
                    4a:06:7e:89:81:ac:09:66:0a:fb:2d:d9:38:0b:b6:
                    ac:88:5d:fc:7d:d5:5a:2a:2a:e1:05:0e:e6:e0:da:
                    6a:f3:a4:26:ff:87:fd:77:78:2d:0d:14:80:32:9e:
                    f4:70:62:f1:74:60:9e:f1:f7:88:cc:dc:9d:ee:6d:
                    01:b5:c5:58:95:c4:fd:18:58:5a:ea:eb:68:30:96:
                    07:94:c0:b0:9e:2c:2c:4d:77:3c:d4:c3:a8:27:3f:
                    88:93:79:1c:40:76:77:5c:4d:88:17:e5:65:4b:55:
                    67:ca:19:d9:a4:6d:7a:48:12:03:33:40:d5:3e:ce:
                    d8:e8:c6:8b:ee:1f:83:82:19:44:93:ec:80:94:eb:
                    04:14:49:c4:e6:c1:30:7d:3f:07:d4:df:79:f3:af:
                    76:5b:16:23:10:4a:fc:65:40:61:24:cf:2d:36:e0:
                    10:61:8e:a1:22:bd:3c:86:df:71:aa:33:eb:0d:b9:
                    37:0f:d6:8b:f0:1c:21:96:53:7d:a5:22:f7:ee:e3:
                    af:50:9e:4f:76:df:60:d5:9a:57:9b:ad:55:91:95:
                    78:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:02:C8:BF:84:0D:FA:82:96:78:8A:CA:9E:C1:8E:B9:DA:1A:96:BB
            X509v3 Authority Key Identifier:
                keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/EDB5F114A63711EF89F3B833C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:2c:6d:1b:89:44:80:70:7c:a2:db:8e:6c:99:b4:f4:8b:47:
         2f:ae:0a:b2:f3:a7:58:9d:73:4a:39:eb:47:5b:fd:a7:f5:99:
         ca:0e:a0:1f:c8:1d:75:d6:1d:76:3f:5f:25:50:53:47:9a:84:
         62:a9:da:39:10:fc:f0:38:64:fe:a9:ad:b7:32:0f:c5:d6:b0:
         ad:6e:e9:0e:fc:d3:78:da:26:67:73:ed:04:c4:90:55:90:04:
         74:7f:fe:fb:6f:dc:66:3d:bf:a8:29:1c:08:79:db:85:d1:45:
         0f:60:57:01:e0:a2:c2:5a:33:e3:9c:9c:ad:2a:75:0a:17:a1:
         b6:3a:bf:3b:4c:8c:21:16:e0:09:de:73:b4:eb:32:10:df:38:
         5b:49:cb:aa:a9:c6:7a:0d:c4:f9:e4:b6:a2:54:3a:d8:da:14:
         53:13:0d:6c:46:37:2d:45:52:19:9a:f2:29:59:18:ce:3e:b4:
         a1:70:88:e8:27:56:45:c0:6c:88:01:b8:81:02:88:f1:40:74:
         e3:44:48:86:77:a8:46:d9:3d:b8:94:a3:96:47:16:ac:f5:87:
         ee:46:12:d6:f1:1d:67:58:d4:fa:bd:83:bf:66:ce:bb:9e:b2:
         f2:a0:b7:24:f0:74:cf:3c:c3:cd:2c:ad:fa:12:3c:bc:f7:09:
         49:d0:58:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:19 2024 by rpki-client on console-ams.rpki-client.org