Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/EA74C41E84D911EF9E11D46FC4F9AE02.roa
File:                     EA74C41E84D911EF9E11D46FC4F9AE02.roa (raw, json)
Hash identifier:          iwk36RqjK4+CbUIlYGdivIX0PP8tUC3WVzRS7SZf7Rc=
Subject key identifier:   38:9E:32:D8:6B:09:DC:26:E6:F8:81:E9:7C:1E:D3:14:61:41:1C:0D
Certificate issuer:       /CN=A919B883/serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Certificate serial:       0919
Authority key identifier: 92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/EA74C41E84D911EF9E11D46FC4F9AE02.roa
Signing time:             Mon 07 Oct 2024 18:28:15 +0000
ROA not before:           Mon 07 Oct 2024 18:28:15 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     30058
IP address blocks:        103.119.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
                          rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2329 (0x919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B883/serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
        Validity
            Not Before: Oct  7 18:28:15 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=6704283f-d32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:15:11:37:51:38:8b:e2:97:c5:8e:4a:6b:53:
                    9f:47:7c:4f:ba:4c:a8:0e:66:20:0f:e5:a1:6b:d6:
                    6e:5b:75:98:eb:96:3a:a5:a8:ca:d1:0e:bf:9d:d8:
                    4c:a0:12:e8:2e:10:0f:87:f4:26:86:c2:80:77:8a:
                    35:9e:b1:b1:1f:ca:de:c1:40:39:09:4e:4f:42:aa:
                    31:48:2e:39:a8:53:aa:b5:9f:eb:d7:c9:7b:b0:15:
                    c9:ac:75:ed:e6:06:9b:de:4c:d7:fe:70:ab:bc:1d:
                    71:5f:c0:ab:fd:ad:c6:d8:ff:3b:71:d8:a8:e2:96:
                    1a:91:75:da:9c:f9:4e:19:51:16:71:80:d4:e1:39:
                    42:d5:da:63:99:23:11:42:71:d8:e3:91:45:e4:53:
                    64:0d:5d:5d:c2:76:d6:b5:d3:1f:a2:4b:95:47:ee:
                    76:5d:f8:7b:ef:f7:83:7c:65:23:54:c3:9f:d8:8f:
                    8c:cc:d8:06:78:43:02:59:a3:3c:fd:2a:c6:ea:fe:
                    26:60:7a:bc:75:ef:f2:16:99:f9:48:97:f3:fe:4b:
                    7a:37:33:ac:61:03:1a:62:30:3d:4d:bd:4f:94:a5:
                    79:de:0c:07:b7:26:f2:71:91:6a:c9:ad:0d:53:3b:
                    74:32:37:16:4b:d2:d0:bd:24:b3:9c:d9:16:83:75:
                    ca:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9E:32:D8:6B:09:DC:26:E6:F8:81:E9:7C:1E:D3:14:61:41:1C:0D
            X509v3 Authority Key Identifier:
                keyid:92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/EA74C41E84D911EF9E11D46FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:b1:d4:75:28:9e:ba:9c:db:91:8f:c1:e9:a9:5b:d1:68:71:
         4f:5d:e0:3e:fd:ac:30:5d:2f:f1:d9:4e:24:39:79:37:39:06:
         16:c4:a8:90:2f:03:a7:b1:94:d2:07:3c:f4:74:55:0c:1d:ee:
         c7:f4:70:32:84:58:b2:a4:88:d2:1d:79:7d:fa:41:69:51:1f:
         a9:97:bb:68:c9:7b:4f:32:23:53:2a:cf:b3:8d:6c:2d:1d:74:
         53:dc:bb:d9:73:a0:24:95:ac:ad:8b:6e:2e:2b:5b:8b:6e:c0:
         ed:14:58:47:1f:13:3c:46:1f:81:d8:71:32:8c:42:5f:24:1c:
         42:77:a5:7a:e0:ca:52:aa:94:02:fa:55:c2:4a:fe:82:05:a5:
         11:bb:77:cd:9b:1e:82:23:0e:3b:6a:3e:62:d5:2c:d3:03:b3:
         0c:2e:e0:3a:f3:a7:8a:76:20:cd:0e:2a:71:10:d2:34:78:6d:
         f8:e5:de:5e:40:9d:c6:5a:66:0a:2b:f9:dd:96:ee:d9:e3:69:
         a4:9d:17:ed:ff:7d:ea:e8:6e:7a:22:b8:96:58:f0:aa:2b:79:
         09:dd:43:66:ab:4b:a0:76:40:53:46:f0:38:2a:1b:3f:7f:15:
         c1:b0:55:ca:95:15:60:ea:5e:9c:4a:7a:bc:13:0c:e4:62:cc:
         1e:fd:5d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:34:56 2024 by rpki-client on console-ams.rpki-client.org