Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/7464EB1E876411EE8971C221C4F9AE02.roa
File:                     7464EB1E876411EE8971C221C4F9AE02.roa (raw, json)
Hash identifier:          ojB4V4VtVHXuFHAezvaTkfH4Bh/CstC86ZtstiMw1LA=
Subject key identifier:   98:9C:45:04:27:29:99:E6:D7:AF:D3:B4:9B:CF:32:13:61:D5:30:0D
Certificate issuer:       /CN=A917068E/serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25
Certificate serial:       05D8
Authority key identifier: B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/7464EB1E876411EE8971C221C4F9AE02.roa
Signing time:             Sat 31 Aug 2024 00:32:21 +0000
ROA not before:           Sat 31 Aug 2024 00:32:21 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     58580
IP address blocks:        103.62.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl
                          rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1496 (0x5d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917068E
        Validity
            Not Before: Aug 31 00:32:21 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d26495-e577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:59:10:81:ef:8f:08:7e:24:d3:f7:f9:0d:88:
                    0a:b0:fb:c7:89:4b:18:8c:81:e0:39:09:47:4d:ca:
                    25:f8:d4:fc:93:9d:6b:d8:8b:81:1b:b3:3f:40:d2:
                    13:27:a2:01:ec:db:24:72:44:eb:fe:cb:80:d5:9f:
                    ec:0e:2d:d0:f4:70:92:9a:09:7f:4e:b2:98:2b:12:
                    90:1a:3f:10:dd:b6:2e:6c:76:bb:ad:b9:d3:4a:f3:
                    2d:74:36:0d:02:9b:5d:49:cf:19:2a:99:54:f7:c9:
                    4e:6f:96:23:a3:4d:7e:18:79:46:fa:a7:31:cf:76:
                    1a:d8:88:e4:94:d0:2f:6a:24:d5:d6:86:ad:e3:54:
                    cf:f3:a3:dd:ff:9c:c1:b4:b0:57:c0:48:4e:a0:70:
                    d0:86:e1:b5:f0:b4:3e:94:28:c4:99:db:6e:2e:42:
                    f9:c3:b5:59:a9:cd:bd:c5:bb:c0:b0:d4:41:7a:05:
                    dc:3f:22:e3:81:af:b1:b5:50:bc:98:c5:06:f7:e5:
                    5e:01:6f:c6:50:52:98:c9:6f:ef:4b:a4:87:1a:ad:
                    7d:cf:7c:20:8d:8b:e4:41:51:9a:46:5b:b1:4b:94:
                    1f:01:79:31:5e:27:13:94:de:27:32:56:75:cc:19:
                    c8:58:cf:0d:52:9e:29:e7:8c:6b:9b:cd:d0:01:4a:
                    8e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9C:45:04:27:29:99:E6:D7:AF:D3:B4:9B:CF:32:13:61:D5:30:0D
            X509v3 Authority Key Identifier:
                keyid:B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/7464EB1E876411EE8971C221C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:b4:1a:4c:54:e5:3c:ab:e5:90:5c:6d:ad:61:77:c2:3c:fd:
         4c:a1:6d:ce:37:3e:bb:f6:30:b3:55:ef:a5:a8:24:3f:e1:b3:
         86:24:e0:05:68:68:9c:37:8f:3c:e8:a9:e7:47:7f:10:ef:7e:
         0c:ce:26:3b:8c:e6:d0:15:a9:d2:0e:7c:98:87:e0:72:94:94:
         70:4a:0f:a0:22:0f:df:20:1a:2e:7f:2f:a3:14:68:35:58:b3:
         02:2b:23:84:1a:28:43:68:be:62:f4:26:56:fb:af:de:c6:f3:
         9f:bb:32:be:70:dd:66:f7:04:d6:3c:23:ee:3d:4b:07:b3:c4:
         4d:10:71:bb:4d:8a:15:4f:7d:de:26:b4:56:29:7f:e3:a4:dd:
         db:df:47:3d:3b:08:51:a8:5f:f9:3d:9c:a7:84:f1:0f:8f:3e:
         44:d2:56:e1:6d:33:a6:c9:d9:0d:c2:aa:ab:a7:1c:67:e2:20:
         3b:04:47:c3:9c:b4:06:ac:ba:93:9d:ed:94:d5:51:0e:f2:dd:
         00:2a:bf:ec:9a:8e:8a:f8:aa:41:ad:5f:51:6f:1f:9c:04:3b:
         d9:83:54:de:d0:2f:70:fb:d7:77:b8:b9:2b:c6:1e:bd:3f:6e:
         31:c9:51:84:b8:70:ad:8f:a0:d8:a4:4f:aa:ff:01:89:f9:33:
         0d:f0:4d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:41:54 2025 by rpki-client