Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/0FB7DCDA321D11EF81C6FB83C4F9AE02.roa
File:                     0FB7DCDA321D11EF81C6FB83C4F9AE02.roa (raw, json)
Hash identifier:          6pOmCOm+prY6qiBbbnf1zGCjzLIHPEX6FE5LXK37MGs=
Subject key identifier:   65:A0:3A:9D:6C:B6:48:2F:B3:8B:00:E3:9F:58:8D:20:8A:B5:7A:00
Certificate issuer:       /CN=A916DB8E/serialNumber=9DE3DA7A0AC6940D32ABB9CFFCB061F2AEE5661D
Certificate serial:       03F5
Authority key identifier: 9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/0FB7DCDA321D11EF81C6FB83C4F9AE02.roa
Signing time:             Mon 24 Jun 2024 11:29:47 +0000
ROA not before:           Mon 24 Jun 2024 11:29:47 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     400619
IP address blocks:        45.113.0.0/22 maxlen: 24
                          103.52.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.crl
                          rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Sep 2024 21:53:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1013 (0x3f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DB8E/serialNumber=9DE3DA7A0AC6940D32ABB9CFFCB061F2AEE5661D
        Validity
            Not Before: Jun 24 11:29:47 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=667958ab-80af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7e:6b:66:89:c5:87:47:8d:5e:15:b8:47:21:
                    0d:9a:ef:f2:41:3d:f7:9b:5a:97:13:a8:cf:99:5f:
                    ba:96:af:50:ec:e0:c3:d5:ac:2f:df:b3:2e:27:f6:
                    ab:dc:4a:f6:f3:19:3c:48:bd:5c:8d:48:da:cf:5c:
                    3f:e2:72:ad:7d:1f:8b:0a:8a:5a:8e:0f:e8:61:f9:
                    ab:87:e1:e9:37:b6:61:93:f4:f5:b2:52:78:ac:c5:
                    e4:4e:fd:ba:14:8c:97:65:27:e5:bd:1f:b2:d0:80:
                    de:b2:6e:34:8b:51:7a:40:52:fe:a4:81:e2:36:17:
                    4b:01:37:a8:b9:5b:35:5c:cb:a2:6e:7c:61:87:c9:
                    d2:33:e3:a0:dc:9c:7e:a1:a6:9c:07:59:60:95:64:
                    3b:a4:3b:28:51:38:d3:ef:ff:ca:42:d8:1d:81:a0:
                    58:27:76:95:d1:5b:99:a6:3d:22:53:3b:ab:f3:29:
                    d4:21:ff:9f:78:eb:52:7b:92:b4:d6:e7:a3:ab:43:
                    69:02:a6:27:5a:e7:64:c6:7d:b5:20:fe:a4:bd:33:
                    15:dd:42:da:1b:27:1a:02:e7:82:33:50:55:df:57:
                    c5:3f:e4:37:59:ca:bb:38:7f:93:4c:bf:63:84:27:
                    16:35:6a:46:43:64:64:17:c4:88:24:ce:71:69:75:
                    4f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A0:3A:9D:6C:B6:48:2F:B3:8B:00:E3:9F:58:8D:20:8A:B5:7A:00
            X509v3 Authority Key Identifier:
                keyid:9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/0FB7DCDA321D11EF81C6FB83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.0.0/22
                  103.52.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d6:72:2d:e2:b1:d6:8a:98:89:35:22:87:86:53:91:f5:a5:7a:
         52:f5:5c:11:14:e3:c5:fd:8b:77:0b:14:7b:52:11:a2:d3:74:
         98:66:19:8d:4d:e1:7f:9d:fb:fa:bc:e2:aa:6a:f4:f7:74:9c:
         97:c2:8c:ac:db:52:aa:c9:60:7b:f2:aa:cf:0d:35:c4:cf:4b:
         11:cf:0c:49:77:59:e0:cd:35:75:e9:dd:a8:d8:f9:be:23:c1:
         fb:ee:1a:ca:74:c6:70:b5:07:86:98:68:35:bf:2c:5e:72:3a:
         e1:e7:d9:ce:68:b2:cc:c0:b8:5f:83:ec:74:5b:1f:5c:35:1e:
         33:b8:db:78:ba:87:ac:ed:0f:9c:a5:1c:dc:46:60:11:74:30:
         ef:0e:88:86:fd:fd:0e:a2:be:b3:50:59:de:2d:49:17:2d:8d:
         5e:b2:e1:38:7b:19:f8:09:c8:44:5e:f4:c3:d9:0d:be:a7:0c:
         63:42:9e:b4:cd:25:c3:9c:df:35:e2:fa:e5:e4:15:96:72:32:
         03:31:84:e5:30:35:73:b6:2d:1a:e7:0a:d8:8d:3c:22:6e:fe:
         ce:03:95:c0:2c:56:84:71:30:fd:04:0f:9e:83:a7:6c:ab:a4:
         22:b2:07:44:48:10:43:91:69:59:2f:6c:0f:70:71:54:de:58:
         80:b5:f5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 01:31:47 2024 by rpki-client on console-fra.rpki-client.org