Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/F8582E301E6411EF99A50843C4F9AE02.roa
File:                     F8582E301E6411EF99A50843C4F9AE02.roa (raw, json)
Hash identifier:          WZAvMLA7XCZBUfmYwgO0fzvkozQG6w4S0/OxMTRTt+M=
Subject key identifier:   6C:28:A2:5C:7E:55:16:51:2E:24:E4:EB:48:9A:C6:79:44:4F:E4:B6
Certificate issuer:       /CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
Certificate serial:       010A
Authority key identifier: 85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/F8582E301E6411EF99A50843C4F9AE02.roa
Signing time:             Thu 30 May 2024 09:14:08 +0000
ROA not before:           Thu 30 May 2024 09:14:08 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     150774
IP address blocks:        103.74.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl
                          rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
        Validity
            Not Before: May 30 09:14:08 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=66584360-5881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:56:72:ba:c5:03:7c:33:22:31:86:5a:2f:5e:
                    fa:02:1d:c6:75:28:42:da:c3:1f:ff:81:5d:22:33:
                    6c:ca:35:41:01:9f:23:bb:a0:50:1c:a2:42:ee:0f:
                    ef:31:71:c9:b3:a8:70:70:12:db:dc:d0:6b:fb:6c:
                    07:d4:37:ff:c2:7a:68:3c:f8:c6:e9:0d:34:cb:98:
                    d2:a4:a9:68:b0:6d:38:1d:25:b6:97:56:f8:a0:8d:
                    a2:c3:eb:13:3f:3e:15:f4:b7:c2:70:94:ea:bb:0b:
                    d6:1f:1d:44:ca:c4:9b:2a:e6:65:cd:56:7e:ea:0a:
                    e0:5c:25:05:42:52:36:bb:15:4e:2f:06:f7:5f:d5:
                    38:26:01:4d:58:28:ed:27:c8:a7:7f:55:f1:65:ad:
                    16:9c:c7:d5:b6:4e:1b:67:6e:6b:48:a4:45:74:45:
                    07:64:95:44:ad:cf:0b:1e:12:b3:bf:23:6b:85:77:
                    b1:1c:40:ca:cd:90:9b:25:bc:81:c8:e9:4a:cf:a0:
                    bc:59:84:47:04:b7:9c:06:26:13:1e:86:bb:b6:ec:
                    32:68:bb:31:b5:ab:30:cc:13:8a:88:be:7f:d8:84:
                    eb:0f:56:e3:5d:00:42:07:cc:1e:3e:4d:bb:95:08:
                    2c:80:c9:65:d0:4f:93:c0:ff:73:0b:7b:c1:1a:80:
                    48:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:28:A2:5C:7E:55:16:51:2E:24:E4:EB:48:9A:C6:79:44:4F:E4:B6
            X509v3 Authority Key Identifier:
                keyid:85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/F8582E301E6411EF99A50843C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:87:de:47:45:28:b0:ab:d7:f4:99:1e:ed:27:f6:7d:6d:f9:
         b4:fe:38:00:a4:4c:c2:b9:d3:1c:a1:7f:9e:d5:cf:59:98:50:
         24:28:b6:0b:87:bd:24:54:8e:95:42:9f:1c:51:1a:26:55:6b:
         b7:61:9d:76:6a:9e:a1:38:a4:91:10:23:e3:a3:66:75:37:91:
         81:82:bc:13:f9:4a:d3:05:b4:64:ed:a3:38:9f:e3:42:ba:ce:
         cd:ed:bc:86:69:68:09:8e:e7:d3:8d:75:b8:d1:92:45:75:4e:
         a8:24:c8:15:06:f4:b8:0a:02:f7:42:b8:fb:93:73:7f:7e:36:
         3c:6c:e5:24:86:cf:d1:cf:a1:3c:e2:e1:e9:ac:ed:18:a4:88:
         2c:60:d6:a0:03:48:40:23:50:24:ae:20:b5:1a:5f:0b:56:75:
         d0:18:e7:40:86:fa:b7:f4:25:6b:ba:9b:23:59:e9:b0:78:e8:
         c2:32:36:e9:0f:49:96:45:56:1e:dd:bd:24:db:57:95:43:45:
         75:b8:86:fb:7d:0f:ef:ff:42:ea:f3:ca:29:c7:4b:79:11:dc:
         78:8c:00:fb:5b:33:53:a4:3b:6f:cd:73:35:27:07:5e:ec:9b:
         4b:45:c3:16:6c:58:e7:05:b9:29:d3:a7:a3:76:54:17:12:31:
         38:0f:e0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:24 2024 by rpki-client on console-fra.rpki-client.org