Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/903E8812E38A11EAA3B8AE59C4F9AE02.roa
File:                     903E8812E38A11EAA3B8AE59C4F9AE02.roa (raw, json)
Hash identifier:          zahf38WJUaJrn85EVjhYTZf4G0B8Ut3ofdI2dvU3v80=
Subject key identifier:   03:C6:B2:CB:5A:10:D3:68:3D:27:45:4F:B6:C1:E8:72:7A:9F:36:BF
Certificate issuer:       /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7
Certificate serial:       06F2
Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/903E8812E38A11EAA3B8AE59C4F9AE02.roa
Signing time:             Fri 08 Dec 2023 22:09:28 +0000
ROA not before:           Fri 08 Dec 2023 22:09:28 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     59268
IP address blocks:        103.66.88.0/24 maxlen: 24
                          103.66.89.0/24 maxlen: 24
                          103.66.90.0/24 maxlen: 24
                          103.66.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl
                          rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1778 (0x6f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7
        Validity
            Not Before: Dec  8 22:09:28 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65739418-1f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fd:c4:52:02:a0:4b:88:39:e2:16:ef:d0:89:
                    dc:09:f7:c2:2c:ae:5a:d4:ad:c3:04:90:8f:3a:f8:
                    e8:19:a8:31:b4:a5:be:ec:c9:7a:e6:62:cf:cd:73:
                    90:31:19:90:db:76:fe:33:69:89:30:73:83:2d:21:
                    a4:22:1f:ac:8a:d2:97:9a:cc:0f:2f:06:8b:49:00:
                    60:8a:91:af:87:bb:e7:63:e6:a9:28:7d:f3:f0:6b:
                    58:37:74:64:55:a3:31:3a:cc:d0:ad:94:fa:45:94:
                    de:9e:5e:69:5e:46:f0:3d:6d:a2:7c:8b:ac:61:51:
                    5a:8d:e7:e9:a2:f7:df:d7:13:30:f2:b3:97:02:81:
                    78:ed:50:42:5e:08:4e:57:04:97:4c:2b:06:2d:21:
                    41:b0:f0:80:3c:10:90:fb:67:3a:2a:f7:c1:70:c7:
                    66:65:16:a0:69:f2:dc:85:56:9a:eb:59:87:74:08:
                    a5:2f:8d:97:47:05:fc:0c:e4:1f:84:ed:3e:e6:d2:
                    95:d2:4c:25:c8:71:d2:d9:f3:77:84:00:37:b5:08:
                    b4:db:d0:6b:56:8a:f4:fb:b9:5f:dc:7d:b0:ee:bc:
                    c8:84:ab:0c:a8:fb:69:73:f4:c6:b3:a5:2c:e9:0a:
                    4d:fa:0f:1a:8b:1c:75:65:76:cc:ae:3f:52:e2:72:
                    2e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C6:B2:CB:5A:10:D3:68:3D:27:45:4F:B6:C1:E8:72:7A:9F:36:BF
            X509v3 Authority Key Identifier:
                keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/903E8812E38A11EAA3B8AE59C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:12:e5:d8:ac:bf:20:49:ee:8a:76:f6:45:4b:04:8b:e0:5b:
         fe:d4:06:af:db:c6:76:3d:b4:3b:60:5c:a6:6e:33:54:5f:8d:
         7a:8e:d9:85:67:0c:49:73:95:6d:49:3d:21:36:fc:c9:c3:c8:
         d7:ee:94:2c:75:e3:cb:15:20:48:04:6b:43:11:2e:08:5f:10:
         d0:44:66:d0:58:cd:e1:28:95:0f:c7:93:1c:81:e2:f6:07:1a:
         06:ab:1c:3d:e4:39:7d:86:3a:82:c9:73:91:71:2d:08:67:05:
         e2:28:7e:4b:f1:82:31:45:a4:a3:4a:f1:c4:2e:e3:cf:3b:03:
         26:b6:e3:8a:60:32:89:0f:c4:d2:f5:b0:5d:c3:1e:0f:60:0f:
         e8:da:65:7b:7c:d4:31:d8:bb:ed:7b:a5:04:99:42:f0:44:4f:
         4f:5c:b1:7f:68:0b:ce:1b:89:5e:25:b9:40:fb:70:a2:f2:a4:
         41:99:e5:07:e9:f7:65:ca:61:dc:0c:d5:20:8c:26:64:d8:82:
         fa:a6:d2:c0:e4:5c:8a:da:4b:8b:1e:33:0f:0d:ee:cf:dd:7d:
         68:70:51:91:d9:e6:71:ba:fa:da:8b:9d:b1:c3:00:9b:a4:18:
         61:c4:31:e9:ac:53:68:30:d5:26:04:1f:1c:09:f3:d0:3c:b4:
         4d:e6:89:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:36 2024 by rpki-client on console-ams.rpki-client.org