Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/99708CB4941611EF84FA4249C4F9AE02.roa
File:                     99708CB4941611EF84FA4249C4F9AE02.roa (raw, json)
Hash identifier:          eCvZ6amyf4sykTV8sYd6M/+OSk/o+nZahFGmPAp1D4Q=
Subject key identifier:   C6:DB:14:0C:BD:00:22:D9:AA:2A:C0:A3:43:14:82:D4:7C:2D:75:E1
Certificate issuer:       /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial:       07A6
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/99708CB4941611EF84FA4249C4F9AE02.roa
Signing time:             Sun 27 Oct 2024 03:50:26 +0000
ROA not before:           Sun 27 Oct 2024 03:50:26 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     140641
IP address blocks:        103.72.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
                          rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1958 (0x7a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
        Validity
            Not Before: Oct 27 03:50:26 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=671db881-2f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:47:87:e2:6c:e9:c5:10:1d:10:93:ab:45:98:
                    fc:95:a4:f7:19:2e:66:01:61:7b:17:0a:cf:fe:1d:
                    81:8f:f7:5e:f3:ff:ca:29:b2:95:b0:7a:ac:d4:50:
                    f6:47:a7:6b:1d:7b:8b:0e:8d:ab:67:ae:4c:97:b1:
                    74:de:6b:ad:d6:62:36:d3:0a:ca:62:97:bf:00:18:
                    67:74:a9:d0:ed:c7:c5:17:5b:c2:9b:67:03:30:b0:
                    b5:4b:b8:43:ed:fa:18:d9:cd:51:6d:8c:5e:5e:69:
                    8c:d5:a8:51:e8:33:61:bd:ae:8e:9e:c5:c7:9f:38:
                    34:d9:94:b3:ec:44:8f:33:ed:13:79:fd:30:f9:19:
                    2f:b3:6a:89:c6:27:27:a5:1a:29:9f:1e:74:be:59:
                    ea:e8:77:6d:6d:15:53:6e:84:d4:7a:e4:e8:da:87:
                    20:9d:45:d7:0b:6c:28:7f:2d:9c:8a:d6:d9:ca:f7:
                    75:38:76:68:be:e3:61:8f:ba:17:75:f5:dc:1c:7c:
                    09:94:d3:b5:3c:d8:04:89:f4:c4:de:5d:35:06:c6:
                    70:cf:5f:80:00:15:86:c3:cf:b0:4f:d1:e1:29:4d:
                    36:6f:9e:4b:47:32:20:f5:53:31:33:a8:b5:6a:78:
                    7d:97:b0:e7:3d:1c:0a:ad:a1:fd:75:25:ba:d1:dc:
                    eb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DB:14:0C:BD:00:22:D9:AA:2A:C0:A3:43:14:82:D4:7C:2D:75:E1
            X509v3 Authority Key Identifier:
                keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/99708CB4941611EF84FA4249C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:3e:01:6a:77:41:0f:16:94:09:b6:e8:f0:d0:71:ca:81:a7:
         cc:59:16:1d:98:07:d7:6b:6d:f0:c8:59:9c:47:9b:0c:42:7a:
         bb:c8:c5:5c:3e:4a:b7:50:e5:70:21:7c:f0:6e:54:a5:fd:74:
         18:b1:d2:b5:fb:04:05:c0:59:e1:5a:a5:e7:3c:80:48:d8:87:
         6f:43:69:b7:7d:14:f1:a2:95:7a:e7:7a:41:c1:5e:8c:64:fe:
         2f:ca:2c:ee:53:07:dd:47:8e:bf:ca:69:f2:ec:0c:e8:cb:ac:
         94:6d:b1:6d:00:ce:33:28:75:f4:7e:70:09:ed:7c:1e:3c:4f:
         42:27:90:47:ef:97:bd:ee:ca:c4:90:7a:5b:69:e3:23:00:a5:
         47:6c:98:df:aa:65:b6:cd:ae:1d:64:ce:e9:0a:7b:6d:66:58:
         dd:5f:3c:0f:80:df:01:8d:66:82:bf:62:b8:88:46:41:be:f7:
         fc:9b:fa:84:b7:21:d8:b6:b0:30:e9:e6:0d:4a:9d:c7:77:19:
         5a:3d:2e:d6:cd:3e:54:f8:b9:63:6b:51:93:fa:0f:35:0a:17:
         14:9a:ec:24:64:41:70:7a:60:5d:5f:f1:41:e9:e3:f8:e6:a7:
         a8:54:db:04:71:34:0b:8c:88:c4:05:d5:8c:27:83:62:0d:28:
         5c:a7:07:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:39 2024 by rpki-client on console-fra.rpki-client.org