Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/94A6144A68C711EE8C53A031C4F9AE02.roa
File:                     94A6144A68C711EE8C53A031C4F9AE02.roa (raw, json)
Hash identifier:          rmTNlu1SG/qosakmBYsrJuce56ugEQR8IKZ27NyvOjk=
Subject key identifier:   36:7D:35:F8:4A:B9:4C:03:EC:B2:A2:68:39:1A:9C:CB:87:0D:B0:A9
Certificate issuer:       /CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Certificate serial:       27
Authority key identifier: 72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/94A6144A68C711EE8C53A031C4F9AE02.roa
Signing time:             Wed 06 Dec 2023 08:41:39 +0000
ROA not before:           Wed 06 Dec 2023 08:41:39 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        103.38.221.0/24 maxlen: 24
                          210.79.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
                          rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 07:50:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
        Validity
            Not Before: Dec  6 08:41:39 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=657033c3-1360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:10:98:9d:5d:c3:b7:f5:ef:1e:ef:4d:77:51:
                    f6:11:37:09:5b:94:4c:6a:02:d1:c2:f1:aa:80:46:
                    c1:04:43:cc:61:4a:15:7e:c2:93:ca:69:79:36:43:
                    ef:f1:13:58:fa:e2:ed:6c:f6:ff:5f:06:d7:4e:3d:
                    f8:3c:94:f0:2f:f0:bf:0a:7b:e1:ac:c2:2b:9a:d2:
                    60:c5:e4:c9:63:3d:92:81:6b:95:e7:d6:57:23:93:
                    37:4f:92:ac:48:57:34:7f:40:32:15:69:49:f2:94:
                    53:44:54:b4:12:04:3b:c4:e5:5d:62:4d:84:dd:c1:
                    41:3c:21:4c:8f:dd:f8:7d:fb:2e:99:bc:ce:51:23:
                    c3:c9:48:c2:82:e5:6d:03:56:9a:62:79:03:dd:cb:
                    2a:6b:7e:ec:d0:71:62:cc:5a:2e:1c:2d:4f:41:67:
                    39:0e:f8:c0:0f:4f:a7:59:9c:01:74:e5:99:d1:17:
                    23:f6:8c:51:03:1b:17:52:bb:29:ef:0b:b0:85:d4:
                    46:99:fc:95:a9:27:4e:43:19:25:b0:34:bb:b4:44:
                    fe:48:af:1e:a9:8c:23:58:b7:c6:a8:b5:ec:db:53:
                    0b:a2:65:48:50:e0:e0:32:08:0c:95:21:2b:ee:c5:
                    70:68:fa:ef:12:bc:04:ab:9e:b0:6f:31:33:30:ef:
                    3c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7D:35:F8:4A:B9:4C:03:EC:B2:A2:68:39:1A:9C:CB:87:0D:B0:A9
            X509v3 Authority Key Identifier:
                keyid:72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/94A6144A68C711EE8C53A031C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.221.0/24
                  210.79.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:ca:7a:6d:18:ba:07:76:a8:77:20:32:7c:0e:33:b3:cc:95:
         e8:d1:96:c7:59:0a:0d:a1:58:aa:67:a2:e5:c8:63:e6:a0:33:
         bd:c7:45:ff:84:05:f7:f6:f2:ba:40:62:fd:34:f1:43:93:ad:
         41:af:6a:87:6d:a5:57:36:56:21:5e:2e:40:9a:69:50:b2:56:
         7c:bb:d1:00:e0:17:ba:53:35:ed:30:3a:09:fe:f1:9f:77:b2:
         25:81:77:14:bd:cc:c9:67:91:18:71:b2:2b:9b:a1:6a:a7:71:
         c1:0e:97:ef:68:d5:69:32:a3:8e:0e:c6:17:fa:76:fb:82:4b:
         60:cd:40:e2:61:e4:24:8a:c3:86:ae:b0:f1:2d:84:2b:2b:ba:
         77:39:9a:e7:c7:53:af:d5:ee:64:7a:7d:ac:68:a6:97:7f:4a:
         bd:3f:33:2e:df:e5:69:7e:c1:a2:72:7a:47:a3:cf:37:fe:bf:
         65:2b:86:fc:08:a5:96:f0:d1:a2:57:56:e3:49:43:92:d5:27:
         8b:7b:51:f2:2f:e0:e6:6b:3a:80:19:d3:c5:da:3b:e6:2f:d5:
         cc:bd:29:33:76:e7:ae:59:d2:1b:90:ac:32:2d:c8:72:52:66:
         45:2b:73:6c:05:8b:97:49:f9:d7:8c:cb:a7:f5:d8:5f:b1:2a:
         ef:1a:2d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 10:34:17 2024 by rpki-client on console-fra.rpki-client.org