Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/71FDE240807E11EF9EE1801DC4F9AE02.roa
File:                     71FDE240807E11EF9EE1801DC4F9AE02.roa (raw, json)
Hash identifier:          q+b+4tTt/sEDZ8Vyjb3CjEmYUVtMW/WyT/A34CwEyBk=
Subject key identifier:   1C:CD:08:61:58:E7:F9:6B:B3:79:EC:4F:73:1F:49:E4:39:26:C9:67
Certificate issuer:       /CN=A9192210/serialNumber=781F95B0C8AB2EF7FD73CF8FC10D2FA86ECCDC4A
Certificate serial:       0725
Authority key identifier: 78:1F:95:B0:C8:AB:2E:F7:FD:73:CF:8F:C1:0D:2F:A8:6E:CC:DC:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/71FDE240807E11EF9EE1801DC4F9AE02.roa
Signing time:             Wed 02 Oct 2024 05:23:24 +0000
ROA not before:           Wed 02 Oct 2024 05:23:24 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     38803
IP address blocks:        103.145.116.0/23 maxlen: 23
                          103.145.116.0/24 maxlen: 24
                          103.145.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.crl
                          rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1829 (0x725)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192210/serialNumber=781F95B0C8AB2EF7FD73CF8FC10D2FA86ECCDC4A
        Validity
            Not Before: Oct  2 05:23:24 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66fcd8cc-d531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b1:a9:7a:87:d4:a5:93:23:2d:66:bc:5c:ea:
                    81:1d:1a:e0:66:0e:eb:1b:39:cb:4c:fb:52:ad:98:
                    85:2e:0b:a7:d9:61:0e:dd:57:f9:9a:22:37:89:4f:
                    5a:b3:a3:24:ab:d5:f0:54:1c:f4:67:ac:93:c0:c6:
                    01:11:cd:82:53:68:84:e5:28:99:8b:88:ae:cc:6c:
                    cb:60:ed:2a:33:f7:e8:14:45:a3:59:c4:32:00:ee:
                    47:13:85:44:96:fc:72:fe:46:86:41:1f:a2:f2:63:
                    a7:b2:2a:54:a1:59:0d:44:cc:fd:c6:96:35:fd:25:
                    3b:31:27:3f:f4:bb:2c:fd:ad:91:74:8b:90:15:03:
                    5e:fe:4b:83:81:fc:02:ca:64:db:e1:97:b2:1a:d9:
                    bf:b7:1b:5a:97:b0:8c:37:72:b6:06:97:2c:59:c1:
                    70:e2:79:09:02:c0:c1:1e:af:02:19:a9:3a:37:b1:
                    b6:a5:f9:52:52:e5:8b:d3:0a:db:69:d2:d1:ef:ac:
                    8e:c1:64:40:4e:24:c8:94:4c:3c:52:b4:91:2d:1a:
                    a9:2b:95:90:bf:84:85:34:7a:62:5d:c7:f4:2b:d4:
                    10:d7:51:1c:37:53:a5:a3:2d:8a:af:49:ba:73:ab:
                    98:15:2e:a2:5f:12:7b:b4:4e:a3:2e:dc:6d:f2:54:
                    09:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CD:08:61:58:E7:F9:6B:B3:79:EC:4F:73:1F:49:E4:39:26:C9:67
            X509v3 Authority Key Identifier:
                keyid:78:1F:95:B0:C8:AB:2E:F7:FD:73:CF:8F:C1:0D:2F:A8:6E:CC:DC:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/71FDE240807E11EF9EE1801DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:6d:1e:1c:f7:ce:17:79:a3:59:0e:d7:a8:4f:59:7d:cb:92:
         88:e2:24:14:9e:e5:f6:30:98:12:b9:d7:c2:06:79:f1:52:d1:
         11:f7:3a:14:c7:57:d2:f5:49:89:a2:90:09:77:35:38:cf:4f:
         a8:84:15:77:c2:ae:70:3c:60:fd:c0:2f:d0:f0:8b:15:64:2e:
         2d:55:aa:e8:35:2a:fd:5e:62:85:e9:5c:97:e6:a0:2e:2e:81:
         ee:13:ff:c0:a2:f1:b5:63:94:8e:1b:7a:c0:38:80:3a:97:62:
         f3:6f:b6:20:84:e8:f2:71:e7:79:72:0f:43:de:b6:65:21:6f:
         58:e5:a0:4b:ec:48:2f:80:da:3b:b1:2d:49:4d:e1:86:57:fa:
         a2:57:eb:da:b7:41:fb:c6:a6:9a:08:99:2a:4e:b8:36:22:12:
         81:7e:5a:5b:1a:46:79:35:a3:c1:ec:4b:f0:4a:be:fd:d2:2e:
         5c:1c:62:ca:af:75:34:fa:3e:ce:b2:ce:93:ed:53:3a:a4:d6:
         89:58:b1:09:73:85:06:1d:6e:bd:e1:b3:ac:f9:81:4e:47:aa:
         73:31:eb:a7:08:5f:e8:da:99:54:b5:cc:5c:19:d8:79:bc:34:
         ff:13:4b:4c:5e:ed:f2:8a:19:53:5e:2f:70:fe:f6:21:91:c1:
         f0:bc:7b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org