Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/7F8EB8C20DB411EFBA2A803DC4F9AE02.roa
File:                     7F8EB8C20DB411EFBA2A803DC4F9AE02.roa (raw, json)
Hash identifier:          KCGD8h5Nf+guvZv7KJlNiaGP9mrB8OevRNbRbpz7xuA=
Subject key identifier:   E8:71:FC:74:B5:5C:3A:7F:6E:F5:D3:0E:CB:86:5A:5C:C0:F4:B5:55
Certificate issuer:       /CN=A9193F3A/serialNumber=7BFD5D63FF201F18735C11800A62F6A727AE8C11
Certificate serial:       099F
Authority key identifier: 7B:FD:5D:63:FF:20:1F:18:73:5C:11:80:0A:62:F6:A7:27:AE:8C:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_1dY_8gHxhzXBGACmL2pyeujBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/7F8EB8C20DB411EFBA2A803DC4F9AE02.roa
Signing time:             Thu 14 Nov 2024 19:58:39 +0000
ROA not before:           Thu 14 Nov 2024 19:58:39 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     59214
IP address blocks:        43.255.52.0/22 maxlen: 24
                          103.227.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.crl
                          rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_1dY_8gHxhzXBGACmL2pyeujBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2463 (0x99f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193F3A/serialNumber=7BFD5D63FF201F18735C11800A62F6A727AE8C11
        Validity
            Not Before: Nov 14 19:58:39 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6736566f-3a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4b:52:de:2c:1e:6f:48:12:24:87:37:c7:7f:
                    d6:20:43:52:3e:84:6b:79:94:65:ad:7c:8f:2f:81:
                    55:3f:8c:1d:32:01:51:55:82:8b:6a:93:47:2a:9b:
                    14:b2:4c:39:59:70:74:67:21:2f:95:c0:7c:6a:61:
                    39:4c:23:9f:27:4e:0c:51:77:8e:e0:ce:11:0f:04:
                    9b:bf:65:e0:d9:bd:1b:1a:e5:93:72:f7:d6:0c:8d:
                    9e:f8:d9:fa:76:94:8c:bd:f2:2f:8e:9f:8d:d5:f6:
                    bd:6a:6a:3c:16:26:f0:c6:6c:9f:64:90:97:46:65:
                    95:7d:89:3b:04:11:86:26:8e:49:de:4f:d6:e7:20:
                    c7:bd:8b:e0:a5:db:d7:dc:19:0f:ae:52:20:9a:e0:
                    8b:76:ce:fd:9a:b2:47:08:4b:e4:f2:56:06:67:08:
                    5c:d0:25:a2:46:27:0d:48:6e:e9:23:72:60:96:4c:
                    c4:a5:d6:06:33:bd:e6:1d:bc:71:65:10:7e:b5:95:
                    14:0f:d5:33:bc:63:26:50:23:17:9c:b8:89:03:f1:
                    63:b6:46:c1:8f:84:f4:13:b3:8e:b3:3e:18:3a:fb:
                    b0:4b:22:4d:fc:6e:1b:db:8c:b7:6a:9e:44:41:78:
                    33:6f:88:e0:9a:78:80:31:67:42:9e:84:b6:be:cb:
                    af:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:71:FC:74:B5:5C:3A:7F:6E:F5:D3:0E:CB:86:5A:5C:C0:F4:B5:55
            X509v3 Authority Key Identifier:
                keyid:7B:FD:5D:63:FF:20:1F:18:73:5C:11:80:0A:62:F6:A7:27:AE:8C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_1dY_8gHxhzXBGACmL2pyeujBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/7F8EB8C20DB411EFBA2A803DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.52.0/22
                  103.227.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:4e:85:0d:82:c0:23:74:fa:80:b4:4a:4a:be:3e:f2:ba:50:
         46:7d:69:d6:b1:54:bb:d6:2e:74:a1:e5:32:10:71:7a:e0:1f:
         6f:f6:03:3c:aa:dd:e1:98:3d:be:18:80:c4:22:64:58:76:9d:
         69:a3:57:f4:ee:19:02:3a:e0:4d:24:eb:40:1f:12:b6:08:29:
         5a:f0:29:52:12:94:78:83:e9:47:02:86:bc:84:15:66:de:0b:
         c0:dd:3a:41:28:82:df:6c:5e:5c:0e:3c:fd:8d:05:7e:48:43:
         40:ff:fa:b7:58:25:47:a9:9b:48:69:3e:62:66:a5:ee:e4:4c:
         95:83:0f:60:50:26:ba:76:6e:86:6a:b9:c6:bf:cf:d5:de:48:
         d8:3a:c5:01:3a:83:73:2c:82:ba:3e:6a:20:ec:cd:1b:e0:82:
         bc:f3:0f:63:3b:04:4f:88:db:79:15:62:3e:46:56:f8:13:cb:
         d3:66:27:a6:b5:23:cf:ea:f0:8a:ef:a3:ac:24:3e:a9:95:d7:
         70:2d:e9:f1:d6:56:45:3c:52:bf:91:07:23:e2:9b:fb:0e:67:
         2e:79:67:4c:2a:82:82:a5:ae:8a:70:14:18:20:a9:0a:1c:cd:
         ae:94:3e:b7:ff:40:75:2a:03:76:be:c5:79:97:ae:4e:82:b5:
         e9:4d:0e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org