Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/256273EE355011EEBCB7D945C4F9AE02.roa
File:                     256273EE355011EEBCB7D945C4F9AE02.roa (raw, json)
Hash identifier:          6f4mwYSjUSUujqQ+GQ2FcpkaNcT4+yFJky2zL1B9jBs=
Subject key identifier:   60:F5:6F:BA:0E:EA:83:28:4F:1D:63:96:C1:33:27:14:1E:22:39:DA
Certificate issuer:       /CN=A919EF67/serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
Certificate serial:       FA
Authority key identifier: F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/256273EE355011EEBCB7D945C4F9AE02.roa
Signing time:             Tue 05 Dec 2023 18:32:04 +0000
ROA not before:           Tue 05 Dec 2023 18:32:04 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     150371
IP address blocks:        103.19.48.0/24 maxlen: 24
                          103.19.49.0/24 maxlen: 24
                          2001:df3:3f40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl
                          rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF67/serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
        Validity
            Not Before: Dec  5 18:32:04 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=656f6ca4-11aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f7:33:af:80:cc:92:15:c3:83:d4:e0:a3:37:
                    d8:0a:69:c7:61:39:bf:24:15:6f:be:91:f5:dd:fe:
                    cf:86:8c:4e:ce:bf:47:60:d4:e4:86:65:29:bf:74:
                    ba:eb:64:99:fb:5a:2a:d8:c9:76:44:ff:b5:95:35:
                    66:9e:4e:05:ef:11:ab:d0:50:a7:76:1e:d3:33:6c:
                    e3:ab:a7:fe:58:f0:be:5a:fd:01:84:63:a1:69:2f:
                    3e:37:3f:f8:42:65:a1:84:2c:c3:30:c8:3c:2c:0a:
                    7f:c3:e6:a5:f0:a9:08:11:39:43:56:c2:3c:60:dd:
                    ed:ca:16:b2:a7:97:4d:b8:38:c1:52:89:d2:af:0e:
                    5c:ce:31:b7:f8:72:85:bd:fc:8a:b6:de:e7:4b:45:
                    eb:8d:7a:7a:26:a4:1b:d1:cf:82:71:81:0f:13:ac:
                    0c:6b:2e:21:13:db:ad:08:11:7f:57:d5:d5:17:fd:
                    a5:e3:4a:f8:fb:bb:ea:0e:26:d9:16:29:98:c5:bb:
                    92:f6:bc:39:6d:41:d6:a5:92:7b:36:5a:5e:d7:f5:
                    28:b7:89:8e:b8:9d:16:3d:b7:b6:ae:5b:ed:dd:24:
                    f7:3b:78:30:6a:a9:84:23:74:99:35:a3:fb:c7:25:
                    71:cd:25:3e:20:d3:3e:41:29:b9:69:25:bf:e5:2f:
                    06:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F5:6F:BA:0E:EA:83:28:4F:1D:63:96:C1:33:27:14:1E:22:39:DA
            X509v3 Authority Key Identifier:
                keyid:F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/256273EE355011EEBCB7D945C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.48.0/23
                IPv6:
                  2001:df3:3f40::/48

    Signature Algorithm: sha256WithRSAEncryption
         e5:3e:1d:62:a9:59:56:1e:9d:91:89:55:26:ab:27:46:2d:da:
         99:06:62:4c:83:e8:a0:e7:f6:b2:f3:2a:47:c2:30:f4:64:4a:
         9a:f0:13:63:cb:11:0b:dc:10:42:2f:00:1b:31:2c:a3:4b:ae:
         14:64:5a:f4:f1:5e:0b:e4:89:27:af:2e:e4:5d:20:98:91:9d:
         af:f1:bc:73:74:9f:5c:07:72:61:e6:23:43:b1:5c:00:d0:52:
         11:68:61:1e:e6:2a:26:f0:ae:e5:d9:dc:b8:5f:28:03:52:ac:
         b1:96:f2:6d:9f:b4:2a:39:a5:ad:39:29:98:f6:ba:55:c0:56:
         9f:89:ab:df:9e:31:7f:b3:80:bb:2b:be:1a:9d:14:26:a9:16:
         81:11:5f:0d:7f:11:d0:fb:9c:e0:9a:a0:85:33:79:7d:c3:00:
         d3:95:93:4a:25:9c:b6:e5:ba:5d:97:fc:70:62:52:e1:42:3a:
         01:da:9f:70:bf:45:ff:d4:55:52:e2:ab:3d:5e:f5:a4:1d:32:
         6d:aa:d9:d1:b1:af:ae:df:0b:86:7d:c6:72:01:c7:91:2d:5a:
         78:a4:18:05:9a:43:73:20:be:0a:7b:8b:b0:0e:25:b2:c2:50:
         dd:cc:62:05:17:0b:32:87:56:34:2b:6a:07:7f:19:75:52:ce:
         fe:70:54:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:54 2024 by rpki-client on console-fra.rpki-client.org