Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/B92D2816064311EAAFD3B416C4F9AE02.roa
File:                     B92D2816064311EAAFD3B416C4F9AE02.roa (raw, json)
Hash identifier:          snskZTPzgdK1oFEckPC5HgyDQRzXftf0PJQ8L4j0QcQ=
Subject key identifier:   D0:FF:90:F6:F2:58:FD:3C:DF:D2:3A:56:84:DE:7E:77:25:E1:00:19
Certificate issuer:       /CN=A916EB73/serialNumber=DF8500A1B20900ABB7F59EB69B07018DF8045C5E
Certificate serial:       33DC
Authority key identifier: DF:85:00:A1:B2:09:00:AB:B7:F5:9E:B6:9B:07:01:8D:F8:04:5C:5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/B92D2816064311EAAFD3B416C4F9AE02.roa
Signing time:             Fri 14 Jun 2024 16:11:30 +0000
ROA not before:           Fri 14 Jun 2024 16:11:30 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     58615
IP address blocks:        103.9.181.0/24 maxlen: 24
                          103.12.82.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.crl
                          rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13276 (0x33dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EB73/serialNumber=DF8500A1B20900ABB7F59EB69B07018DF8045C5E
        Validity
            Not Before: Jun 14 16:11:30 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=666c6bb2-f6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:79:76:3f:21:67:26:83:45:cf:90:93:53:d9:
                    39:bf:50:ef:a1:ca:be:e7:9b:c4:15:f5:fb:ca:06:
                    ea:56:f4:ee:a0:e9:2a:11:4a:0d:1f:30:26:0e:ca:
                    27:3e:cd:c0:f3:c2:91:6b:c0:6d:3a:0c:b9:c6:b8:
                    82:2f:e4:1e:8a:26:7b:00:0c:92:ef:79:24:3a:bb:
                    7e:04:d0:68:71:72:0b:44:f9:a0:75:e0:07:fd:c1:
                    64:4b:54:c7:7f:17:c5:6f:83:1c:ac:16:85:0d:af:
                    9d:70:1f:f6:f8:a3:a5:d4:7b:0a:00:0f:18:a6:ac:
                    8c:4c:ea:2c:57:3a:88:f7:4b:f4:3b:42:61:96:ef:
                    f4:68:c1:b2:bd:3a:4a:fc:43:3d:b4:2c:10:8b:e5:
                    cb:21:63:00:e4:92:6c:98:a7:84:26:74:ce:14:31:
                    55:9a:83:8e:52:1c:2f:d0:9b:c1:1f:6e:14:0f:83:
                    9c:51:65:e9:e2:4a:10:6c:80:3a:32:70:bd:da:4f:
                    f0:f1:7c:75:8e:3b:f6:14:81:44:4f:bc:9e:f3:5d:
                    b6:33:88:7f:dd:78:e9:02:3a:5b:c3:5e:9c:91:e5:
                    cf:0e:ef:3c:66:d3:a3:59:1d:b5:ab:a4:ec:f0:3e:
                    ef:7a:06:ca:ac:de:68:ab:73:a1:8f:c7:f3:3d:7e:
                    ec:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FF:90:F6:F2:58:FD:3C:DF:D2:3A:56:84:DE:7E:77:25:E1:00:19
            X509v3 Authority Key Identifier:
                keyid:DF:85:00:A1:B2:09:00:AB:B7:F5:9E:B6:9B:07:01:8D:F8:04:5C:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/B92D2816064311EAAFD3B416C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.181.0/24
                  103.12.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:c2:c1:e2:5d:83:47:b7:c9:c0:fd:f2:b3:7a:6e:b6:da:0d:
         4b:91:27:b9:22:ee:39:2b:aa:7c:cf:17:49:45:61:d4:9a:a4:
         aa:e4:86:a0:00:37:56:78:25:38:23:ae:73:26:f3:a6:7d:3e:
         e9:db:5f:56:76:0e:ab:30:3a:15:79:9c:d2:6b:0e:67:6a:51:
         ea:e7:3e:3d:ce:4c:98:c3:7b:32:f2:59:cb:f3:5e:3e:d6:09:
         75:bf:ab:ca:44:4f:a6:e8:b9:d0:6e:c3:79:bf:f5:0f:12:eb:
         aa:95:9e:67:2d:b2:14:c8:eb:59:c2:12:9c:bf:24:32:8a:f0:
         14:19:93:e7:c9:55:66:cd:30:52:2d:a1:94:20:86:7b:81:17:
         3b:15:db:6c:a0:29:c9:82:52:b8:cc:8e:36:c8:aa:83:fe:0a:
         14:6e:5b:e0:ac:91:bb:38:1e:09:b3:b8:96:ba:82:2b:40:96:
         5c:93:b3:cf:9a:dc:38:6b:61:10:ff:a5:47:ac:8a:2e:3a:c4:
         22:fe:ba:94:31:5a:16:6f:de:e3:a7:21:3f:29:1c:1b:be:d6:
         01:04:d4:c8:5d:e7:ac:e1:86:3e:1a:e2:71:40:be:13:5b:ce:
         bf:f9:d5:dd:74:4f:9b:4f:9a:8c:b1:d3:ae:3c:83:f0:7f:bb:
         fa:1b:09:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:49 2024 by rpki-client on console-fra.rpki-client.org