Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/67E15AC4E40611EC8410A53CC4F9AE02.roa
File:                     67E15AC4E40611EC8410A53CC4F9AE02.roa (raw, json)
Hash identifier:          VQEy4E57oyCsilPS/N4eVIUrZJ0xe1SQnIjV1RgzS+k=
Subject key identifier:   05:59:72:16:5E:50:E2:67:B5:46:BC:BC:3E:68:F5:F4:4E:AC:01:76
Certificate issuer:       /CN=A917414E/serialNumber=AF67132D837D576FFF777227A3725D601ED9105D
Certificate serial:       026A
Authority key identifier: AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/67E15AC4E40611EC8410A53CC4F9AE02.roa
Signing time:             Sun 01 Sep 2024 14:51:54 +0000
ROA not before:           Sun 01 Sep 2024 14:51:54 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     139901
IP address blocks:        103.189.10.0/24 maxlen: 24
                          103.189.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl
                          rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917414E/serialNumber=AF67132D837D576FFF777227A3725D601ED9105D
        Validity
            Not Before: Sep  1 14:51:54 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66d47f8a-0821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:15:7d:1b:39:87:8b:ff:99:aa:63:dd:90:73:
                    5b:36:23:71:0e:c9:ad:ed:a7:fc:3b:5c:d7:de:97:
                    c3:dc:83:ea:cf:79:1e:51:1b:38:b2:79:1a:27:73:
                    1e:2b:8c:61:9b:8b:f7:92:f2:1e:d6:61:25:8c:9f:
                    63:7b:5a:a1:ae:28:15:62:cf:9d:cf:1d:97:b8:8d:
                    db:2f:af:77:0b:55:38:5c:d5:15:d2:a1:c2:68:7a:
                    eb:4b:85:8d:4f:b9:95:85:f9:d7:36:c9:9f:19:f5:
                    7f:3d:1e:97:53:c0:ac:b6:92:12:43:39:ae:b7:62:
                    a7:f0:f2:a7:ad:72:3e:f9:7e:83:e9:fa:5a:98:b2:
                    1b:b7:f7:82:8a:b1:b6:86:fa:75:f0:86:e5:6f:ce:
                    c6:33:cc:76:b4:de:59:0c:13:0a:d5:ca:c5:ed:1a:
                    c4:5d:35:42:eb:85:a4:d5:6e:be:30:9a:8b:31:fe:
                    cd:ab:05:3d:97:08:4a:70:0a:68:2a:79:9f:7a:55:
                    8a:17:8b:31:b1:6f:5f:21:1a:39:5b:9d:04:8b:a6:
                    2c:e2:8b:18:ef:e4:2a:d7:87:52:c1:16:7d:07:98:
                    56:1b:5e:92:fb:1c:c7:23:50:13:8a:ec:82:1a:6d:
                    c1:47:e0:25:43:11:bd:fa:82:c2:12:38:7e:ee:e8:
                    f8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:59:72:16:5E:50:E2:67:B5:46:BC:BC:3E:68:F5:F4:4E:AC:01:76
            X509v3 Authority Key Identifier:
                keyid:AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/67E15AC4E40611EC8410A53CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:c2:92:23:e1:ad:a7:01:81:0f:e7:44:a4:31:74:49:56:25:
         2b:14:4e:0c:31:93:03:4a:e8:5c:6a:40:50:29:f9:4b:89:48:
         5e:07:39:99:a3:6f:5d:ab:d5:6f:d4:c0:17:fd:f1:64:0c:7e:
         87:6b:ba:8c:b4:cf:7c:58:92:59:f3:ad:20:88:1d:06:c8:3f:
         bf:a4:74:40:ea:88:d6:3f:b3:06:32:3b:b7:21:a2:2b:8c:5d:
         98:7b:74:cd:2a:fc:d3:d4:75:42:39:37:05:f8:47:02:35:72:
         ee:94:e6:41:8b:d8:fb:e1:a5:29:d2:04:b7:02:09:c4:eb:50:
         73:78:be:c1:8c:e8:4d:8b:61:e7:66:cb:a2:f3:33:d6:ce:b2:
         51:ae:48:5a:9e:be:67:1a:d4:27:52:1b:d6:32:f3:13:aa:ab:
         18:c5:e9:3f:02:1a:ba:64:fc:73:c4:8b:94:3f:05:69:5e:7e:
         ef:20:06:b5:9f:f8:2e:3d:13:18:f5:7f:aa:dc:b1:ec:50:44:
         89:80:68:92:14:19:51:06:7b:b1:52:1e:5f:3a:a1:50:0c:e6:
         03:e9:95:8f:9a:6f:f6:2c:b7:7c:18:17:5b:87:43:97:34:66:
         de:f4:d0:81:23:c8:92:09:11:0d:d2:79:ee:db:fb:e5:97:5f:
         13:75:e6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:40 2024 by rpki-client on console-ams.rpki-client.org