Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/7FB6349E967111ED94CA8D6AC4F9AE02.roa
File:                     7FB6349E967111ED94CA8D6AC4F9AE02.roa (raw, json)
Hash identifier:          IkBbAKpYbcppJK4s7Lux0mr/S6wEZBpwnFhMZ3gHdyY=
Subject key identifier:   DA:16:C7:70:0A:AB:06:23:E3:33:55:0F:49:E2:94:59:72:F2:AA:22
Certificate issuer:       /CN=A919941E/serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D
Certificate serial:       FF
Authority key identifier: C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/7FB6349E967111ED94CA8D6AC4F9AE02.roa
Signing time:             Thu 23 May 2024 05:39:41 +0000
ROA not before:           Thu 23 May 2024 05:39:41 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     56262
IP address blocks:        103.3.80.0/22 maxlen: 22
                          103.3.80.0/24 maxlen: 24
                          103.3.81.0/24 maxlen: 24
                          103.3.82.0/24 maxlen: 24
                          103.3.83.0/24 maxlen: 24
                          182.255.40.0/22 maxlen: 22
                          182.255.40.0/24 maxlen: 24
                          182.255.41.0/24 maxlen: 24
                          182.255.42.0/24 maxlen: 24
                          182.255.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl
                          rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919941E/serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D
        Validity
            Not Before: May 23 05:39:41 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=664ed69d-696b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dc:ac:9a:0a:7c:5b:4d:5a:fa:82:f3:e0:e7:
                    73:5a:66:9b:a8:c8:14:f0:6c:6b:f8:e1:28:00:2c:
                    27:d3:8b:93:19:34:67:67:48:a8:b0:1d:47:76:96:
                    ea:c6:82:06:bd:0c:4d:22:64:66:48:17:45:a0:18:
                    36:a5:41:7f:4c:26:dd:fa:a6:e3:66:b8:1c:75:ba:
                    a5:6d:d9:4e:72:b5:57:36:fa:ef:27:80:c6:1b:3a:
                    28:89:ec:a8:c9:61:a8:01:a7:a2:1b:5a:d6:c7:06:
                    48:67:80:0d:e3:04:22:37:98:05:81:3b:b1:f0:eb:
                    9d:34:eb:2f:a4:b1:39:d0:46:e8:1d:42:b8:3c:18:
                    ba:98:9d:f9:46:29:26:2e:af:ea:3e:98:7e:b4:e6:
                    15:8f:2b:73:bd:a2:32:84:2d:bd:9e:a4:7c:e5:bd:
                    26:49:39:6c:f9:26:0e:a5:d0:79:27:26:98:03:c6:
                    75:48:4e:fd:9c:3a:56:7b:73:20:9e:07:7d:71:e7:
                    3d:cb:3f:7f:95:f8:d4:50:8c:70:ed:66:f0:c2:03:
                    ce:2b:a7:83:5b:f2:74:26:f4:96:06:41:bb:10:05:
                    67:3f:12:fb:3b:06:58:de:65:6a:a0:3f:66:58:70:
                    59:c3:91:2a:9a:67:14:39:12:f6:8f:c6:de:22:27:
                    f1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:16:C7:70:0A:AB:06:23:E3:33:55:0F:49:E2:94:59:72:F2:AA:22
            X509v3 Authority Key Identifier:
                keyid:C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/7FB6349E967111ED94CA8D6AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.80.0/22
                  182.255.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:5f:6d:07:24:34:88:a4:71:a3:f9:c8:2b:b6:a0:58:e4:bd:
         51:03:7b:d0:60:d5:e1:64:35:20:2a:ee:19:79:91:b6:af:55:
         28:9b:88:e3:1c:41:fd:d8:e0:30:d0:82:5a:f1:45:14:2a:9b:
         b4:71:6f:20:8f:a5:7f:88:43:2b:14:f1:4e:98:77:c4:9f:21:
         e3:7c:75:05:c1:2a:73:e1:14:e6:98:a8:a7:ed:47:b7:72:5b:
         a7:c9:0d:e0:0a:96:a6:d2:5e:4c:dd:02:80:9a:69:e2:ed:9d:
         62:e4:2d:c3:65:8e:f8:fa:4a:a3:0f:3d:35:c7:82:84:d4:24:
         51:40:38:71:35:2b:2f:29:98:d5:85:95:a9:e2:f2:81:be:c8:
         29:10:0e:00:64:2e:b9:ad:ce:10:d3:20:7b:08:06:17:99:22:
         81:5e:36:ea:a6:95:b4:8f:81:33:e3:a9:65:97:5e:9e:07:b7:
         6f:3c:09:ed:ca:58:7f:ff:11:fd:4c:5e:f9:ea:d4:66:c9:dc:
         d9:ef:03:04:b7:8d:0c:1b:bd:28:a0:cd:1a:31:88:ba:f1:92:
         8a:af:95:ac:8f:e2:96:7b:eb:30:31:5f:06:e7:f2:51:f4:a9:
         f2:dc:6b:27:a2:bf:4a:70:1e:fc:c1:e5:b9:f0:85:9e:5a:29:
         3f:94:58:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:53 2024 by rpki-client on console-fra.rpki-client.org