Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/F03A9990818D11EF828B5F39C4F9AE02.roa
File:                     F03A9990818D11EF828B5F39C4F9AE02.roa (raw, json)
Hash identifier:          dUMepTVWQKE3ai+QtqXtxVSKoR/Ht5Lax6C4qhoDMO4=
Subject key identifier:   2E:87:B8:40:89:DF:1B:68:96:B6:B2:CF:61:E0:63:AF:07:42:86:6B
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       03D1
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/F03A9990818D11EF828B5F39C4F9AE02.roa
Signing time:             Thu 03 Oct 2024 13:46:49 +0000
ROA not before:           Thu 03 Oct 2024 13:46:49 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     149977
IP address blocks:        203.32.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 977 (0x3d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Oct  3 13:46:49 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66fea049-ae41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b2:d3:35:41:90:a4:a7:19:1c:af:56:ac:eb:
                    85:ce:b2:88:03:d5:f6:3c:cf:9f:88:79:96:c9:4b:
                    de:0b:66:42:71:5d:c8:52:25:6b:b4:06:43:17:3a:
                    1e:0b:44:41:b3:9d:c9:43:5f:30:d4:6c:6b:c5:8b:
                    5c:4e:6b:c1:cd:55:6a:04:e0:29:6b:70:44:ac:76:
                    f2:e7:92:61:3f:c6:56:1c:dd:9f:3f:c7:27:d4:5f:
                    06:bb:c8:2a:f9:cc:26:2d:f4:55:c3:15:b8:94:68:
                    e7:53:70:c3:a5:a8:66:36:a4:da:ce:a0:85:b9:fa:
                    01:68:dd:ca:43:d0:bb:72:30:9b:41:c1:1e:99:c5:
                    48:e1:d5:57:48:a7:99:36:f6:e6:ce:ef:c1:55:f2:
                    30:aa:96:86:25:46:62:3c:a9:5c:ea:56:0d:43:f9:
                    13:98:6a:08:61:0f:ac:53:2e:10:43:1c:f6:27:a8:
                    47:d8:bd:83:75:01:f8:af:af:4c:e2:d5:94:7a:1e:
                    f3:47:79:a5:4e:b8:70:ac:9c:d0:cb:3a:ba:b7:35:
                    82:ec:ff:21:e9:88:e6:d4:da:62:67:35:53:67:4a:
                    40:c0:e6:11:22:9c:f9:54:0b:a7:b9:d0:ef:a8:67:
                    7b:3a:b7:3a:6b:62:ec:22:47:a0:db:01:87:e9:ba:
                    c9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:87:B8:40:89:DF:1B:68:96:B6:B2:CF:61:E0:63:AF:07:42:86:6B
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/F03A9990818D11EF828B5F39C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.32.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:1b:ed:39:fa:95:5f:72:d2:ba:f0:1c:8d:ec:05:21:2a:45:
         65:27:ff:02:4b:8c:ab:da:2f:51:31:ee:f4:be:59:27:05:69:
         1a:81:88:a2:cd:2a:0e:64:80:19:00:fc:d0:c9:db:8b:e8:ad:
         20:28:fa:e3:4f:ea:b7:a6:24:28:8b:dd:74:34:71:51:73:df:
         13:24:5e:3e:3a:24:08:85:b5:c0:db:f8:7a:95:54:f6:06:a2:
         e5:b9:d3:9c:ec:e1:1e:83:3c:5b:ae:c8:6c:9f:08:56:93:e3:
         62:82:61:ed:58:4d:d1:b3:52:91:45:dd:ec:20:96:88:2d:fd:
         12:44:0a:80:c3:ac:95:67:51:1f:7f:ee:23:e6:2f:2d:b8:36:
         b3:39:62:b4:53:c2:50:cc:4c:ff:c1:af:2d:3f:35:3b:04:5a:
         42:26:69:c6:22:06:f3:36:6b:cb:34:28:c3:2a:b2:21:8e:e6:
         d2:d6:c6:15:72:6a:c2:dc:f1:ec:3e:1a:ba:26:65:b0:05:73:
         1a:29:26:86:66:a8:38:b1:a0:17:67:02:d4:57:4e:98:fa:05:
         15:6f:1c:20:73:5c:e5:d8:41:2d:22:4c:2b:39:9c:9a:71:dd:
         34:15:d8:71:bf:08:ad:90:13:59:9a:34:e5:3c:9d:7b:3e:53:
         26:3e:3f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:12:00 2024 by rpki-client on console-fra.rpki-client.org