Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/1F24033CDF7111EEB534147FC4F9AE02.roa
File:                     1F24033CDF7111EEB534147FC4F9AE02.roa (raw, json)
Hash identifier:          F7+/UI/IdrG7UJylIwMQeWeh8x4KccRZsFSY0IMAJig=
Subject key identifier:   7E:A1:11:CB:60:3D:99:42:E0:4B:06:F7:A3:86:22:92:E2:6B:58:55
Certificate issuer:       /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial:       1562
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/1F24033CDF7111EEB534147FC4F9AE02.roa
Signing time:             Fri 12 Jul 2024 17:54:55 +0000
ROA not before:           Fri 12 Jul 2024 17:54:55 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     206204
IP address blocks:        103.239.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 16:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5474 (0x1562)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
        Validity
            Not Before: Jul 12 17:54:55 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66916dee-576a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:82:a9:9c:31:31:5c:04:13:fa:02:a3:8c:
                    8c:08:81:65:55:e9:c4:61:ce:b9:0c:04:4b:7b:e0:
                    4f:5f:d8:b6:f5:ab:f0:f2:40:3f:f2:9c:53:f7:46:
                    9a:d9:cb:5d:7d:c1:a0:1e:00:7d:e2:f6:c3:5a:9d:
                    81:4a:82:4b:25:22:63:1a:45:c1:b0:fc:aa:5f:2f:
                    a1:d3:6a:b1:c9:cf:22:63:ef:93:be:9f:f9:93:e1:
                    1f:5a:cd:fe:1d:88:2b:77:3a:b2:85:bc:df:19:c2:
                    29:0a:77:6e:ec:9f:ca:46:af:f7:5d:cc:82:78:73:
                    0e:74:52:12:08:0d:ce:bb:99:1c:d0:8a:a0:b6:9c:
                    25:a4:be:e0:60:3a:f1:3b:f4:37:be:3a:34:15:89:
                    af:cd:8d:82:c6:18:40:f6:d1:31:dc:57:9b:df:b2:
                    d0:4d:1d:a8:80:8e:34:27:f1:ca:35:b5:f1:08:97:
                    81:1b:28:f7:22:d6:83:4d:62:b1:1b:ab:54:4b:55:
                    bf:53:12:38:48:1d:c3:50:13:ea:61:45:10:26:28:
                    81:88:86:1c:dc:45:03:9e:ae:4d:7b:3a:59:4a:72:
                    20:a4:43:08:9b:ab:74:26:96:db:03:6f:a2:84:ae:
                    8d:ad:1d:f6:01:5f:37:27:21:9b:f4:fa:0f:ce:7f:
                    3c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A1:11:CB:60:3D:99:42:E0:4B:06:F7:A3:86:22:92:E2:6B:58:55
            X509v3 Authority Key Identifier:
                keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/1F24033CDF7111EEB534147FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:d0:9f:10:12:cb:85:98:ef:eb:65:de:c8:e2:58:82:d4:25:
         b4:bd:d4:45:82:f5:58:ff:47:69:71:b6:86:4b:fc:55:54:56:
         be:47:5f:5c:cc:8c:f0:19:67:17:e8:a6:68:68:8a:ef:ff:34:
         20:77:45:1b:06:f3:4f:41:a9:9b:95:4f:88:56:d3:6a:fa:bd:
         22:cc:c6:99:02:1c:a0:ea:50:17:ea:54:57:4e:dd:7e:2d:49:
         15:26:de:04:b0:cf:b3:5a:10:89:fa:40:e8:23:b3:de:73:19:
         44:7f:f0:1a:18:11:72:a4:ec:b6:90:14:7f:ec:77:c9:6b:ed:
         b8:fc:05:c8:50:e9:ce:3e:e7:92:e7:45:bb:b6:10:4b:3d:bc:
         7b:93:b9:93:aa:7a:0b:c7:00:7b:79:b1:f2:f7:04:98:60:7f:
         63:9a:df:c3:1d:51:db:6a:05:da:ab:91:88:eb:66:32:9f:4d:
         ae:85:72:53:3f:56:f0:b7:1d:ef:3f:ba:02:83:cc:a8:2d:e8:
         37:66:4e:9d:36:bd:6f:43:66:e8:74:32:64:22:95:5c:9a:33:
         be:6d:7e:3d:2f:61:47:6c:3c:ef:33:52:44:d8:b2:6d:56:77:
         67:7a:81:d2:43:51:c2:33:a9:ee:d5:c9:70:c4:18:52:32:a6:
         c4:3b:db:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:21 2024 by rpki-client on console-ams.rpki-client.org