Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918801E/EDBCB56676D011EB8A26713BC4F9AE02/872F917EA12D11EB967F285EC4F9AE02.roa
File:                     872F917EA12D11EB967F285EC4F9AE02.roa (raw, json)
Hash identifier:          n4tE7RUdO0Vp1mzQgXwPTDyfXHKbO16arwKC9WSMtpw=
Subject key identifier:   ED:1F:8F:AF:E6:9B:2E:57:77:51:91:2E:46:7C:2C:C6:8B:F1:9F:B7
Certificate issuer:       /CN=A918801E/serialNumber=DF6F39F2BDF76E06A494842AD8BFA41DD936530F
Certificate serial:       059D
Authority key identifier: DF:6F:39:F2:BD:F7:6E:06:A4:94:84:2A:D8:BF:A4:1D:D9:36:53:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32858r33bgaklIQq2L-kHdk2Uw8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918801E/EDBCB56676D011EB8A26713BC4F9AE02/872F917EA12D11EB967F285EC4F9AE02.roa
Signing time:             Sat 17 Feb 2024 00:12:55 +0000
ROA not before:           Sat 17 Feb 2024 00:12:55 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     48024
IP address blocks:        43.230.84.0/22 maxlen: 24
                          103.49.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918801E/EDBCB56676D011EB8A26713BC4F9AE02/32858r33bgaklIQq2L-kHdk2Uw8.crl
                          rsync://rpki.apnic.net/member_repository/A918801E/EDBCB56676D011EB8A26713BC4F9AE02/32858r33bgaklIQq2L-kHdk2Uw8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32858r33bgaklIQq2L-kHdk2Uw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 00:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1437 (0x59d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918801E/serialNumber=DF6F39F2BDF76E06A494842AD8BFA41DD936530F
        Validity
            Not Before: Feb 17 00:12:55 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65cffa06-e10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:69:dc:71:13:c6:48:4a:ed:f5:c0:60:72:b9:
                    84:74:ae:78:fb:4f:b4:1c:2c:71:b3:e4:7b:28:b6:
                    3a:66:1d:27:ae:c5:95:3c:6d:c7:a5:d6:22:2f:01:
                    09:65:e8:06:35:6e:d3:ed:fa:c2:85:21:99:57:bc:
                    d3:aa:31:dd:2e:28:a4:10:10:c6:32:aa:ac:f0:f1:
                    44:e0:12:a7:98:ee:73:0c:f2:6b:03:8b:b9:16:d7:
                    db:ef:93:78:03:26:38:48:57:f5:5c:33:88:f2:23:
                    98:00:2f:6e:c6:4b:6d:24:a7:1c:2b:8c:a1:3a:03:
                    14:bd:df:7f:f3:2e:da:8a:4e:c4:72:f4:b6:cc:70:
                    74:05:b1:32:06:6e:33:33:ec:d9:5f:bb:82:b0:a0:
                    aa:53:7f:18:50:66:7e:3f:8c:c6:ce:1d:32:95:55:
                    d8:ad:63:cd:1f:87:be:21:1b:3b:19:dc:97:96:4b:
                    82:e1:64:1d:70:6f:0d:e9:af:21:c2:6d:43:7e:e9:
                    a8:ed:a8:1b:78:ef:a4:51:7d:05:4b:b7:e4:a9:09:
                    54:ba:95:d1:bc:28:be:bf:f9:e1:3b:45:23:a4:a3:
                    59:78:ad:56:85:6a:71:8a:32:e9:9b:73:e5:19:4e:
                    10:96:06:7f:2c:90:a4:f1:9d:44:07:45:96:e1:78:
                    0b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1F:8F:AF:E6:9B:2E:57:77:51:91:2E:46:7C:2C:C6:8B:F1:9F:B7
            X509v3 Authority Key Identifier:
                keyid:DF:6F:39:F2:BD:F7:6E:06:A4:94:84:2A:D8:BF:A4:1D:D9:36:53:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918801E/EDBCB56676D011EB8A26713BC4F9AE02/32858r33bgaklIQq2L-kHdk2Uw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32858r33bgaklIQq2L-kHdk2Uw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918801E/EDBCB56676D011EB8A26713BC4F9AE02/872F917EA12D11EB967F285EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.230.84.0/22
                  103.49.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:ad:8f:47:34:dd:e9:6e:51:99:9f:dd:e0:fe:aa:3b:31:71:
         b5:f9:6e:82:20:33:82:aa:fb:5b:b5:bf:c1:fe:8f:15:1b:9f:
         45:cb:2b:98:d7:10:1d:0e:7a:57:06:55:10:19:50:1d:16:a2:
         27:be:bb:89:28:55:66:9c:dc:39:db:d9:5d:78:85:c3:5b:38:
         e1:06:84:ce:75:46:3d:2d:84:2f:c3:63:ae:3f:e7:31:70:b8:
         e8:84:05:d3:24:95:34:77:36:03:b1:03:94:7c:b5:2d:4d:4c:
         ad:1b:45:b2:a5:b6:a0:28:de:73:20:92:fa:33:a6:e1:6e:d3:
         63:5d:d2:a7:dc:14:1d:e2:d6:11:74:04:f0:7d:65:b8:81:13:
         df:dd:18:1b:ca:53:e0:15:64:b1:09:58:63:bf:36:2f:af:0d:
         2c:74:ee:26:1a:42:a6:18:c2:5f:4a:48:44:d0:ac:5e:48:bc:
         67:f4:36:ef:89:46:22:4d:bf:52:48:95:e0:40:82:2d:8d:ad:
         d6:77:a5:76:1e:30:df:cc:c0:f7:e4:c8:74:7e:ac:0f:e0:b5:
         af:90:20:c2:c5:ea:83:f2:1d:1e:07:68:f8:7b:df:70:4d:4b:
         56:36:29:bc:ad:90:f8:2a:6a:c3:57:ac:a0:a4:62:54:99:17:
         cf:7d:0e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:58:23 2024 by rpki-client on console-fra.rpki-client.org