Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/AD03DBB2419D11EABC319278C4F9AE02.roa
File:                     AD03DBB2419D11EABC319278C4F9AE02.roa (raw, json)
Hash identifier:          lXRhvrRkiDZ89FEGOujFjOkOv02tmbv3I/6VRa5eWzo=
Subject key identifier:   78:DA:F9:D3:92:CF:17:E4:DF:DA:C2:88:7C:FC:41:A5:C6:6B:AF:1E
Certificate issuer:       /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Certificate serial:       0A77
Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/AD03DBB2419D11EABC319278C4F9AE02.roa
Signing time:             Fri 02 Aug 2024 20:29:11 +0000
ROA not before:           Fri 02 Aug 2024 20:29:11 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     17408
IP address blocks:        103.13.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
                          rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 18:42:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2679 (0xa77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
        Validity
            Not Before: Aug  2 20:29:11 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66ad4196-6456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8d:10:74:ce:da:24:04:62:a8:8f:99:e2:71:
                    dc:a4:f2:b5:17:7e:23:7f:a1:f2:da:8e:67:d1:80:
                    8a:8a:c8:9e:0b:11:c2:b0:bf:1c:9a:59:89:ef:e4:
                    7f:10:cb:37:65:c3:d6:b2:13:4b:11:bd:96:4b:94:
                    2b:1b:d4:51:63:38:cc:28:ef:0b:c0:17:48:0c:de:
                    fa:4e:19:ac:db:d8:ba:9f:97:01:06:3d:a6:d0:50:
                    80:bc:2e:25:38:cc:84:66:da:9f:2d:d3:55:66:21:
                    c5:ed:99:08:d8:da:91:2a:fe:32:18:08:7f:cd:fa:
                    57:31:1d:e4:2c:0e:6d:c5:60:8d:61:4b:a5:ce:4e:
                    ca:2c:ab:11:d6:20:d2:dc:0b:6b:33:bf:00:44:43:
                    b8:22:39:b3:dc:a9:53:76:01:24:28:73:d5:d9:f0:
                    c2:d2:79:81:ee:d0:08:52:58:96:42:ae:96:1b:44:
                    64:36:c0:ea:e1:09:2c:d5:04:bb:54:bc:4a:03:9b:
                    7b:a7:2d:a5:8b:33:1f:3d:ec:76:b6:68:89:4c:d2:
                    b2:74:35:05:b3:61:48:c3:4f:8c:08:f3:97:f6:3d:
                    83:db:c2:6e:c4:ed:b5:62:cc:e8:72:53:ea:c1:2c:
                    e4:37:32:e6:5b:05:bd:f7:c5:26:bd:f6:3c:1a:b6:
                    ec:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DA:F9:D3:92:CF:17:E4:DF:DA:C2:88:7C:FC:41:A5:C6:6B:AF:1E
            X509v3 Authority Key Identifier:
                keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/AD03DBB2419D11EABC319278C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:12:69:36:b3:df:96:2d:09:cd:80:95:a0:26:e1:a8:dd:ec:
         b5:19:85:a2:8d:3c:33:7a:55:b3:76:b6:bd:76:6b:49:b6:19:
         91:54:e3:0b:02:bf:82:37:e3:77:7c:2b:13:47:28:6b:fa:d7:
         68:c0:b3:86:b0:e6:20:4e:47:6f:7e:be:3d:3c:42:f2:e5:4f:
         4f:50:00:9f:2d:57:4d:77:ae:75:ac:46:a9:da:5e:65:ee:7f:
         f8:34:01:87:00:c6:26:d0:bd:ac:8b:15:f9:3c:e2:f6:5c:8f:
         19:87:2d:c4:44:96:27:68:01:37:cc:35:eb:03:53:1b:ac:53:
         d2:e3:15:3a:f0:39:e1:5a:4a:26:c9:9f:38:7d:be:e6:80:94:
         01:15:97:0e:d1:7d:5f:e9:d4:c0:1c:78:d9:a7:bb:6f:f2:07:
         75:4c:97:e4:f0:11:f8:b5:c9:a6:1f:98:56:db:e4:21:d3:a0:
         87:36:91:e6:6e:c3:a8:df:87:1d:9f:90:c9:0b:6c:8a:41:81:
         54:b0:fe:d6:b1:e1:73:00:1b:db:5f:11:fb:5b:e4:16:00:8c:
         8d:e8:84:f3:0e:42:c0:47:19:d0:d2:db:bb:e2:fe:5a:17:3d:
         d2:64:27:d4:ba:50:2d:78:64:1f:a2:23:92:b7:a7:5b:b2:15:
         3d:63:1c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:07:26 2024 by rpki-client on console-fra.rpki-client.org