Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/335E880A5A1811EFB08E4F38C4F9AE02.roa
File:                     335E880A5A1811EFB08E4F38C4F9AE02.roa (raw, json)
Hash identifier:          uB7Em80PKGY4uO2oMYJtskRF61M8oMXLAmFb1PjEp7E=
Subject key identifier:   54:67:81:EA:CA:7B:37:3E:3A:5E:AD:09:C7:C5:7A:93:2F:CE:28:D3
Certificate issuer:       /CN=A917C5E0/serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B
Certificate serial:       0E
Authority key identifier: 07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/335E880A5A1811EFB08E4F38C4F9AE02.roa
Signing time:             Sat 31 Aug 2024 08:49:20 +0000
ROA not before:           Sat 31 Aug 2024 08:49:20 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     26658
IP address blocks:        45.125.108.0/22 maxlen: 22
                          103.193.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl
                          rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C5E0/serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B
        Validity
            Not Before: Aug 31 08:49:20 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d2d910-0a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:f6:c6:b3:c7:22:6f:fe:c7:c0:6d:5c:24:
                    82:52:f2:a2:fa:0a:8a:20:5f:13:04:e4:4f:34:5b:
                    45:fb:d7:cc:a5:57:5f:bb:25:c4:18:79:33:7f:66:
                    e5:8c:d1:4d:16:4e:60:00:11:6f:e2:04:91:3b:b2:
                    1b:5c:f6:b9:9d:66:3f:fe:f8:14:31:b5:71:b7:b1:
                    17:22:87:c6:eb:87:11:b3:e1:59:91:ef:f0:1e:a1:
                    e5:13:5a:06:19:a8:85:4c:32:7d:3f:01:a7:c4:e2:
                    b7:62:ef:cf:b5:2f:5b:a8:a7:2c:e2:65:f4:59:07:
                    2e:d4:2a:23:ea:6b:4c:07:8d:4f:87:04:24:0d:04:
                    1c:b4:ed:43:37:19:c4:97:3c:50:39:cb:e2:b7:de:
                    19:c7:37:83:d7:bf:06:61:ab:e1:de:dc:6b:2b:8c:
                    25:a8:77:ab:61:d7:ae:6b:2a:53:2d:8a:3c:bd:8d:
                    f3:50:18:70:04:61:2e:87:31:15:31:86:de:0e:c3:
                    70:da:3a:c9:5f:ae:6d:4f:25:60:6a:82:bb:86:d1:
                    88:9f:76:3f:29:43:f9:28:f2:39:32:35:f6:7e:14:
                    cc:c9:ec:e5:f5:d5:a5:8f:ba:59:3d:03:a9:52:af:
                    a0:7d:ad:2c:e4:ce:c3:3b:84:5f:f9:f8:ef:1a:e2:
                    56:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:67:81:EA:CA:7B:37:3E:3A:5E:AD:09:C7:C5:7A:93:2F:CE:28:D3
            X509v3 Authority Key Identifier:
                keyid:07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/335E880A5A1811EFB08E4F38C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.125.108.0/22
                  103.193.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:d8:14:43:4d:35:fb:20:f4:dd:42:18:5d:30:59:ac:63:3e:
         f0:ae:b8:f8:f8:19:dd:ea:c1:f8:e7:bd:96:d1:34:d0:39:a9:
         2c:54:ac:b6:aa:a3:7a:5f:77:1a:a5:eb:0f:a9:a4:41:c2:2c:
         9c:53:24:a0:c8:9d:9f:18:73:6c:98:ca:14:70:9b:03:79:1b:
         bf:56:95:cd:69:18:c0:39:42:53:72:7d:26:c6:df:40:10:e4:
         fd:a5:9d:f1:1b:41:4f:34:2f:27:61:92:e0:23:44:09:f9:45:
         d5:e8:d1:ce:3f:b1:df:38:df:bb:a3:87:b3:58:0d:65:97:fb:
         32:94:2a:db:3e:79:e2:c2:80:49:4c:20:4f:58:83:d4:4a:97:
         3c:2e:93:d8:be:e3:a8:80:fd:c9:9e:f9:5c:2e:14:1e:78:d8:
         13:18:3c:30:39:d1:92:d4:85:a2:1f:de:61:82:3e:15:a5:c6:
         e8:da:b7:2f:e0:df:f0:4c:22:c3:56:dd:28:a3:b1:80:00:35:
         48:68:c5:27:33:95:7b:69:80:63:73:dd:42:27:13:e6:36:34:
         ef:d9:ee:36:88:b7:35:00:44:11:08:f5:9e:9e:c1:11:55:35:
         0d:70:50:ed:ad:7e:86:3c:f8:31:e8:c1:9a:39:4e:08:f7:a9:
         7b:01:b4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:06 2024 by rpki-client on console-ams.rpki-client.org