Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/529F69FCE5CA11EBB98C5577C4F9AE02.roa
File:                     529F69FCE5CA11EBB98C5577C4F9AE02.roa (raw, json)
Hash identifier:          iGGEAjUC0++42POw1gb2SZmwmNS0zkkpPN27YBry/aI=
Subject key identifier:   13:40:65:74:6C:C5:C5:FD:8F:48:99:B7:95:52:17:8C:AD:E1:0F:0D
Certificate issuer:       /CN=A916A0AF/serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105
Certificate serial:       04A2
Authority key identifier: B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/529F69FCE5CA11EBB98C5577C4F9AE02.roa
Signing time:             Mon 29 Apr 2024 01:44:10 +0000
ROA not before:           Mon 29 Apr 2024 01:44:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     9341
IP address blocks:        103.111.80.0/24 maxlen: 24
                          103.111.81.0/24 maxlen: 24
                          103.111.82.0/24 maxlen: 24
                          103.111.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl
                          rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1186 (0x4a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A0AF/serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105
        Validity
            Not Before: Apr 29 01:44:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=662efb6a-fbab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:59:9f:8f:2f:1c:db:6f:8a:4b:99:67:8e:09:
                    9f:92:55:6d:6d:f0:6a:86:e7:de:0e:77:b5:4d:8e:
                    93:ef:7d:f4:cd:5d:4c:6a:8b:12:bd:21:70:fe:80:
                    d2:17:90:e9:b4:ca:d6:a7:60:12:f1:67:4d:5e:57:
                    c9:7e:d2:49:d2:e3:94:ac:16:81:d2:61:30:05:e2:
                    f8:bb:dc:5c:5c:5b:d4:37:28:0f:bf:93:21:69:9e:
                    16:8a:42:a4:55:74:0b:eb:86:5b:99:5c:b1:54:f7:
                    dc:96:11:ab:9a:75:b7:f8:01:61:6d:81:07:5d:82:
                    42:32:b3:fb:fa:2e:14:a2:1d:42:e7:fc:0a:40:cf:
                    89:f5:86:4a:23:64:3a:fa:36:15:f1:59:03:4f:01:
                    79:9c:18:f4:98:3f:cf:0c:2c:30:b7:3b:53:eb:ff:
                    7a:9d:64:67:09:52:1f:a8:e9:d5:b1:96:14:e5:ef:
                    46:13:94:6e:0e:d8:d2:c9:18:eb:e1:8d:e0:9e:96:
                    24:e5:c7:d7:e9:aa:05:82:4f:1e:f5:24:a9:8e:3b:
                    f8:a6:7c:a3:42:7c:a8:35:4b:b8:95:e5:1a:a1:e8:
                    54:6f:a5:98:a2:d8:95:f9:b1:c0:96:d1:83:b4:76:
                    32:d7:17:9e:a3:14:1b:9d:cd:e9:6d:b4:a4:aa:b4:
                    59:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:40:65:74:6C:C5:C5:FD:8F:48:99:B7:95:52:17:8C:AD:E1:0F:0D
            X509v3 Authority Key Identifier:
                keyid:B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/529F69FCE5CA11EBB98C5577C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:d4:b6:44:b9:20:35:24:3c:93:a9:8a:ae:ed:c7:b7:05:cf:
         a7:2a:88:09:a1:1d:32:c6:23:32:74:c6:f7:eb:3b:b8:b3:93:
         4f:e3:d8:60:e4:5a:3e:61:68:9e:c0:db:96:d9:42:52:8d:02:
         b0:8a:96:51:17:0b:fa:d1:4b:ed:e8:c1:24:a0:68:a0:dc:b8:
         7a:e2:05:e1:52:d9:ad:e2:5c:ad:93:92:0a:f8:62:b5:f7:bf:
         3f:12:09:0a:b2:51:e1:68:ea:7e:40:be:e9:0b:6e:03:50:43:
         e6:93:98:15:10:96:aa:e2:cb:cd:a5:49:e8:3d:60:85:54:b6:
         9f:8c:fa:8d:7f:c2:b7:f2:44:af:57:36:fc:29:20:b6:d2:68:
         7c:56:8c:60:f3:9d:09:5a:d9:f3:07:34:3d:25:a4:35:0c:b3:
         01:a2:1a:e0:79:ce:51:94:82:18:4f:a7:e0:6d:aa:4f:3b:20:
         10:e9:52:72:5f:5a:14:fd:09:f9:bf:e1:27:4d:19:a0:30:e9:
         d4:73:fa:9f:6a:24:91:89:31:fd:b0:fe:02:5f:aa:d5:6f:ed:
         50:b1:75:d4:90:0b:28:45:a6:06:05:00:75:32:7f:9e:67:04:
         f5:3a:f0:3c:80:7e:84:84:82:ea:ae:f2:b3:5c:a1:12:b5:5e:
         f5:3f:88:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:34 2024 by rpki-client on console-fra.rpki-client.org