Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/7F1EA1189B9111EDBC921164C4F9AE02.roa
File:                     7F1EA1189B9111EDBC921164C4F9AE02.roa (raw, json)
Hash identifier:          B4bAqc6kkR7Hs43c2EHoV92Uje7SlbmocY/IyCwTMEI=
Subject key identifier:   15:7E:50:E8:A7:FA:CA:74:56:A2:00:03:6F:88:0C:15:7B:40:1F:59
Certificate issuer:       /CN=A915EAD0/serialNumber=51629BEB80FBDF94ED9A643FD78C81DA73B6BA1A
Certificate serial:       09C0
Authority key identifier: 51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/7F1EA1189B9111EDBC921164C4F9AE02.roa
Signing time:             Sat 08 Jun 2024 21:17:24 +0000
ROA not before:           Sat 08 Jun 2024 21:17:24 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     45204
IP address blocks:        103.9.88.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.crl
                          rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2496 (0x9c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EAD0/serialNumber=51629BEB80FBDF94ED9A643FD78C81DA73B6BA1A
        Validity
            Not Before: Jun  8 21:17:24 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6664ca63-efd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a6:00:d2:89:3f:7b:c4:7f:bc:97:84:88:75:
                    14:a8:40:12:fb:f7:d4:fb:ad:1a:05:a9:9e:56:b0:
                    02:9b:9f:68:ec:e3:a0:2e:78:3a:32:b6:2b:0f:90:
                    f4:0c:87:16:f1:ce:ee:28:a1:9f:29:65:74:4d:83:
                    f9:23:42:68:12:c2:b5:3c:fd:58:cc:7b:02:31:27:
                    6b:96:b8:b2:67:78:da:15:b7:9b:71:51:de:6e:6c:
                    5b:b6:15:ec:43:7f:3e:35:5b:18:c4:30:27:81:3b:
                    48:78:73:13:71:ca:57:91:17:b2:9f:63:52:e4:bd:
                    48:a7:cf:a0:b9:85:a9:72:a4:73:3e:e1:d4:33:34:
                    86:43:9d:d1:c9:11:90:f2:98:00:79:1a:63:9a:18:
                    b2:b5:ff:9e:59:b7:0f:83:c9:77:0c:8c:ed:7c:c5:
                    87:c1:78:3b:99:14:11:cc:b2:b3:0c:fd:74:ae:db:
                    28:fb:eb:7e:41:2f:f2:42:10:69:a8:26:f5:7f:7e:
                    61:91:25:06:18:38:3b:de:08:71:43:da:a7:f5:f8:
                    0e:53:bf:1b:df:72:2a:91:3e:b2:ba:e2:c9:0a:77:
                    49:b7:78:1f:2b:66:08:8f:9a:28:43:ee:b5:55:26:
                    59:9c:5a:94:0d:96:6d:f5:51:9d:50:14:59:90:39:
                    ee:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7E:50:E8:A7:FA:CA:74:56:A2:00:03:6F:88:0C:15:7B:40:1F:59
            X509v3 Authority Key Identifier:
                keyid:51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/7F1EA1189B9111EDBC921164C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:ea:33:54:8f:e4:ed:ac:e1:e3:c3:cc:e0:d3:33:0d:ab:e7:
         ce:3b:0e:49:4b:5f:03:b2:b1:d9:68:d6:5f:94:42:db:fa:38:
         e6:57:7a:5d:97:08:06:a6:e2:19:29:4e:35:57:31:51:ef:e9:
         c5:85:86:27:2c:48:01:0c:7a:ea:43:42:6e:0b:46:10:0d:bb:
         34:7a:05:a6:a4:ac:3d:2c:6f:48:ec:73:8f:8f:83:dd:b1:3e:
         d8:e7:c9:dd:16:71:e2:1d:f3:73:64:cb:52:2e:67:e8:fb:93:
         8c:ed:a8:d6:ef:fc:d9:32:35:00:e8:be:8b:63:1b:25:f0:8b:
         39:8a:13:d1:36:01:75:5b:44:95:05:f3:ab:60:4e:31:6c:a1:
         67:51:87:2e:91:82:26:26:67:7c:58:b7:62:bd:14:77:fa:2d:
         c1:b0:2e:9c:48:c1:fe:bf:43:8e:82:d1:ee:c6:07:ec:eb:07:
         4c:2f:a5:b0:ce:9f:64:65:32:4e:87:11:60:f9:cf:ca:c8:ad:
         9e:0f:fe:83:ea:9c:ef:f1:e6:94:08:95:58:af:a7:2f:19:07:
         fa:43:54:39:ef:51:9e:3e:f0:d7:15:ec:f6:c4:cb:b5:9e:75:
         9b:af:d0:49:d4:26:6c:cf:6b:35:06:91:83:f7:1a:16:31:65:
         ae:c5:f4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:28 2024 by rpki-client on console-fra.rpki-client.org