Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/6881BE7EEFF411EDB617DD7DC4F9AE02.roa
File:                     6881BE7EEFF411EDB617DD7DC4F9AE02.roa (raw, json)
Hash identifier:          pcKNVy8KNgNcIGTnXKtg//wrVOXs2JXaYqznl9PD1II=
Subject key identifier:   4A:0E:E1:E8:84:81:CA:27:AF:95:74:B4:75:70:3B:00:FC:C8:DB:8F
Certificate issuer:       /CN=A916E323/serialNumber=C161E985961FD957E667EF2E8CAA7737FA9285D1
Certificate serial:       D0
Authority key identifier: C1:61:E9:85:96:1F:D9:57:E6:67:EF:2E:8C:AA:77:37:FA:92:85:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/6881BE7EEFF411EDB617DD7DC4F9AE02.roa
Signing time:             Mon 03 Jun 2024 07:46:49 +0000
ROA not before:           Mon 03 Jun 2024 07:46:49 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     23470
IP address blocks:        103.193.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.crl
                          rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:58:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E323/serialNumber=C161E985961FD957E667EF2E8CAA7737FA9285D1
        Validity
            Not Before: Jun  3 07:46:49 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=665d74e9-1a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:df:5b:a2:7b:3c:5b:9b:98:e8:57:bf:53:0d:
                    7f:23:4f:b0:92:db:f1:fc:f1:60:bf:6f:0a:88:d5:
                    9d:60:e6:e0:99:c6:98:ab:52:23:fa:0a:ea:60:5e:
                    89:6b:76:01:c9:4d:c3:b0:19:da:52:cb:8e:87:a6:
                    92:b1:b1:85:91:52:9a:d0:7e:4b:8c:41:f6:db:df:
                    47:78:0b:8b:55:07:23:b7:78:be:67:13:b4:6e:e3:
                    9e:9e:d2:bc:f9:c7:46:45:37:be:ef:19:60:47:9f:
                    76:5c:3c:17:a8:25:c5:f1:6f:2d:bb:8d:e1:ae:3b:
                    9c:13:ff:89:f7:85:61:28:8d:0f:10:44:e7:9e:70:
                    52:5e:72:a9:b3:95:ae:61:a9:0b:88:ec:46:15:de:
                    a1:09:25:14:ff:e4:26:f5:64:57:d4:26:ca:f7:4f:
                    cf:ed:fb:f4:89:9a:19:ce:ca:4d:7b:15:12:3c:b5:
                    22:34:1a:ef:89:1b:27:68:f3:f4:d0:14:a1:ac:79:
                    91:79:56:19:33:98:f7:76:31:c4:9e:37:11:ed:d6:
                    45:0c:9b:29:bf:04:fc:1a:b6:db:7b:9e:37:da:2c:
                    c9:33:d6:6e:05:07:06:cd:55:12:e0:4b:4a:1f:8d:
                    a0:15:1e:f0:f9:46:d6:47:6a:bd:09:7c:97:4a:77:
                    c0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0E:E1:E8:84:81:CA:27:AF:95:74:B4:75:70:3B:00:FC:C8:DB:8F
            X509v3 Authority Key Identifier:
                keyid:C1:61:E9:85:96:1F:D9:57:E6:67:EF:2E:8C:AA:77:37:FA:92:85:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/6881BE7EEFF411EDB617DD7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:19:c9:b3:4d:5a:d7:67:24:57:d4:ba:45:bd:8e:be:cc:b3:
         17:8f:fd:06:8f:9f:33:f8:f0:eb:c8:75:e4:5d:05:bf:ee:e7:
         d0:d2:63:6d:b4:8b:e0:9c:d7:62:f0:db:97:8c:1e:2a:92:1c:
         41:7c:7d:a4:b9:ae:f3:de:79:56:b0:89:8a:69:5f:fc:ea:8e:
         05:5f:ba:be:b0:14:1a:2a:70:c4:70:25:ca:ad:e7:c1:b9:4b:
         66:9c:68:3c:a6:2b:bb:fc:a7:13:f5:18:2d:0b:f9:11:22:37:
         9d:db:51:d5:30:5c:d1:98:37:d9:54:af:1d:58:93:ab:20:3c:
         43:6d:b0:3f:fe:d4:6b:19:5b:15:02:04:d7:2f:fa:b3:ac:ed:
         af:56:7f:32:f5:4a:99:a3:97:70:d7:1f:42:01:54:a6:90:20:
         6c:93:01:5a:1c:f4:14:87:b6:01:91:fc:11:f5:a8:f9:53:07:
         a9:c7:04:7c:d7:b4:be:74:0c:8e:e3:9b:32:25:f6:b4:93:9b:
         9f:8f:ca:5a:e7:2e:1b:cc:76:4f:8d:75:05:a7:33:e7:c1:3d:
         43:b5:be:9a:dc:c5:6e:82:5b:51:26:1e:b1:ab:4b:52:63:78:
         11:0d:60:f7:af:75:3e:01:f0:3b:93:ba:44:63:6d:1a:8d:90:
         28:a0:96:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:58 2024 by rpki-client on console-fra.rpki-client.org