Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/EBD40682641F11EBA016EF13C4F9AE02.roa
File:                     EBD40682641F11EBA016EF13C4F9AE02.roa (raw, json)
Hash identifier:          eMQqjBv2cJ2eHdQB4O4MctsT8NsP/3FJBfg3tbB3ny8=
Subject key identifier:   56:B2:A6:A4:FD:B4:6E:55:69:45:0A:7A:0C:00:B6:D2:EC:6C:59:13
Certificate issuer:       /CN=A917D84D/serialNumber=EBBE262F6E4AB33B22098DA602C2642A3D3C03F5
Certificate serial:       05B5
Authority key identifier: EB:BE:26:2F:6E:4A:B3:3B:22:09:8D:A6:02:C2:64:2A:3D:3C:03:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/674mL25KszsiCY2mAsJkKj08A_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/EBD40682641F11EBA016EF13C4F9AE02.roa
Signing time:             Sat 20 Jan 2024 23:31:41 +0000
ROA not before:           Sat 20 Jan 2024 23:31:41 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        103.127.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/674mL25KszsiCY2mAsJkKj08A_U.crl
                          rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/674mL25KszsiCY2mAsJkKj08A_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/674mL25KszsiCY2mAsJkKj08A_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1461 (0x5b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D84D/serialNumber=EBBE262F6E4AB33B22098DA602C2642A3D3C03F5
        Validity
            Not Before: Jan 20 23:31:41 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65ac57dd-7c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:06:d7:31:e3:3b:21:3b:1c:c0:93:b5:19:
                    82:cd:3d:c7:f7:a9:55:cc:a6:47:1b:2c:9b:44:73:
                    80:db:2b:1b:10:36:f4:3d:25:90:3a:d9:ff:df:40:
                    a0:cd:34:99:fe:33:05:37:04:91:65:c8:6b:c1:a7:
                    71:db:df:19:7c:3f:c1:52:d9:23:16:0c:01:bf:09:
                    4b:80:9a:ca:92:60:11:04:54:07:0b:58:10:19:d2:
                    fd:5c:db:3c:50:82:ea:bd:3f:9e:c3:5e:1f:9a:89:
                    8f:52:c1:3e:87:08:ca:f9:f3:5e:08:9e:8c:07:7f:
                    c7:6e:74:bc:14:eb:c6:82:aa:eb:6f:cb:e0:ec:73:
                    ac:fe:9d:9f:e6:05:71:80:25:88:b2:52:ab:fc:2f:
                    cb:53:1b:bb:82:34:d9:44:c3:b9:1c:ef:eb:e0:5f:
                    b8:fb:8c:cd:d3:ae:de:37:86:56:cb:60:7e:46:cb:
                    86:c3:64:96:23:53:0c:cb:00:71:6f:f9:50:ae:f6:
                    8b:8f:88:c7:68:6e:41:f7:24:31:da:ff:fd:24:72:
                    fd:8b:a1:00:17:33:32:6f:bc:05:fd:00:d3:41:8e:
                    5f:b8:76:ca:40:7f:6e:01:06:db:54:25:f1:9b:09:
                    84:da:a5:c1:55:dd:fa:db:94:25:ea:81:59:b7:08:
                    8a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B2:A6:A4:FD:B4:6E:55:69:45:0A:7A:0C:00:B6:D2:EC:6C:59:13
            X509v3 Authority Key Identifier:
                keyid:EB:BE:26:2F:6E:4A:B3:3B:22:09:8D:A6:02:C2:64:2A:3D:3C:03:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/674mL25KszsiCY2mAsJkKj08A_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/674mL25KszsiCY2mAsJkKj08A_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/EBD40682641F11EBA016EF13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:42:bc:de:b6:3e:b3:c0:a7:8a:a4:48:d9:80:b2:d6:60:e5:
         dd:91:a2:0f:4d:d4:61:22:4e:13:7e:1c:59:cb:ab:d4:50:86:
         36:01:ae:f2:38:df:ef:e2:dc:fd:5d:d3:90:da:e7:7f:5b:8e:
         61:e1:12:1c:cb:03:bd:96:b4:d2:97:ec:bb:47:9c:ba:b9:b8:
         ed:66:f8:09:4b:9e:11:9c:d9:a1:ed:b5:ab:16:12:ab:38:8b:
         a9:e4:7f:9b:f7:1b:8f:89:3f:fe:18:be:4b:69:a7:b3:8d:c1:
         a1:11:e5:0e:dc:c9:11:f7:4e:e1:f9:7f:51:85:5e:98:51:42:
         e2:be:9b:c6:d7:09:5b:74:e9:20:a2:ac:aa:9d:ec:59:28:26:
         38:3d:91:eb:40:e4:94:83:9e:bc:91:13:e8:b9:b6:a2:fe:48:
         f8:99:90:bf:6d:f5:84:1f:0d:bb:63:e5:a2:4d:89:aa:b3:c2:
         36:0a:7b:0e:ef:9b:60:c1:fd:3d:f8:64:1a:55:29:5d:73:02:
         6b:ec:81:91:ef:ef:4d:01:36:a7:27:7b:07:55:b7:f7:75:b8:
         85:2a:46:a1:c4:ba:23:be:89:b0:70:73:68:1f:6a:c0:b3:06:
         e5:45:63:dd:c7:47:47:dc:15:8f:0e:8c:70:26:41:5b:ff:ca:
         7e:c8:61:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:11:46 2024 by rpki-client on console-fra.rpki-client.org