Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/E75A8B8095D011EFA2CE197BC4F9AE02.roa
File:                     E75A8B8095D011EFA2CE197BC4F9AE02.roa (raw, json)
Hash identifier:          ubjd6kbUD8bksNcH7B3eSW+lUAafi7y46OOL0li4jwI=
Subject key identifier:   96:91:34:A7:D3:52:4E:F3:96:43:EA:34:AA:E6:66:93:1F:0A:C7:98
Certificate issuer:       /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Certificate serial:       0267
Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/E75A8B8095D011EFA2CE197BC4F9AE02.roa
Signing time:             Tue 29 Oct 2024 08:36:34 +0000
ROA not before:           Tue 29 Oct 2024 08:36:34 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     152601
IP address blocks:        103.189.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
                          rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615 (0x267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
        Validity
            Not Before: Oct 29 08:36:34 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=67209e92-65f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ed:d0:51:ab:62:59:c6:e0:9a:3d:99:89:4c:
                    38:83:cd:54:46:c7:a0:b4:5b:e3:6a:f1:72:3e:e2:
                    f3:76:42:be:38:8c:d3:8c:41:0a:ef:91:0e:6b:69:
                    34:3b:cc:c6:9f:0f:7c:fd:81:4a:b4:3c:3e:f7:14:
                    be:62:1c:15:1b:42:94:4e:fb:c3:0e:f4:2c:60:4c:
                    a2:4c:28:37:6f:28:78:3d:9c:45:94:52:c6:f2:3c:
                    7d:06:72:c0:36:be:01:3d:59:26:64:71:b5:0d:e4:
                    65:a4:c4:99:17:31:38:39:fc:ae:81:33:53:d2:60:
                    81:6e:28:84:78:7a:e3:d3:a3:21:88:d9:f3:a3:8d:
                    95:ca:d8:75:1d:fb:4e:03:e7:14:9f:e6:f0:88:2d:
                    46:58:f7:37:03:aa:f4:d0:a3:a5:9e:40:78:4b:79:
                    d4:96:9e:71:28:50:55:2a:8b:86:3a:1e:61:35:f9:
                    df:b4:ab:6a:1d:bf:bc:68:31:0f:91:6d:5f:fa:37:
                    59:1f:fe:f2:e8:b6:f5:71:9f:09:50:07:0a:3b:df:
                    0f:fb:b9:77:24:2e:af:29:e8:cb:0e:1a:f3:41:1d:
                    00:47:f7:a2:13:4b:ac:63:de:e8:ea:9a:01:37:6a:
                    7b:ed:30:c1:0f:46:ab:0b:af:30:23:cd:85:2b:06:
                    39:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:91:34:A7:D3:52:4E:F3:96:43:EA:34:AA:E6:66:93:1F:0A:C7:98
            X509v3 Authority Key Identifier:
                keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/E75A8B8095D011EFA2CE197BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:d3:52:5c:b6:3e:df:a8:e9:54:da:74:f8:53:fe:fc:a5:03:
         be:c8:0b:6e:31:58:c6:54:34:11:75:f8:7d:a7:de:82:76:20:
         b5:d0:71:19:ae:80:1c:73:49:93:41:72:4f:74:9a:07:56:a2:
         71:9b:e2:9e:f1:06:d2:55:48:37:0f:2a:d8:27:21:50:6b:35:
         b3:b2:71:99:2c:c9:86:9d:46:59:8d:28:13:7e:e9:13:20:fb:
         74:a2:a7:39:9a:8c:ff:2b:73:63:2f:11:86:e0:73:f7:91:f6:
         77:fe:21:0b:b7:dc:58:d2:9b:85:5d:0c:80:93:ad:96:13:eb:
         f7:f1:9e:c4:57:e4:66:6e:c0:9f:99:3f:50:00:30:4d:5b:2d:
         5d:4c:7f:32:b1:45:4b:c6:b8:30:f4:be:12:1d:7f:9f:c6:c7:
         72:58:be:e8:10:f5:5e:de:96:cd:bd:74:54:74:38:35:42:1f:
         16:b6:fc:be:e2:35:0b:22:63:a9:3f:16:db:07:23:10:96:14:
         36:d9:96:dc:02:15:9a:f6:ad:07:b3:90:db:e4:bc:df:2c:ee:
         14:e6:16:c1:3f:a1:18:94:2c:5d:bb:03:9c:62:3d:80:aa:b5:
         7f:e0:d7:4a:f2:20:84:5f:4b:d3:fc:23:a0:cf:be:3f:44:29:
         78:c4:e0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:45 2024 by rpki-client on console-ams.rpki-client.org