Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/52B59ED2108D11ECA2542150C4F9AE02.roa
File:                     52B59ED2108D11ECA2542150C4F9AE02.roa (raw, json)
Hash identifier:          YHM2Ry9OqK4ZQ8qnXB/9z3rSEtR8bDIhVl02jmEtILs=
Subject key identifier:   89:A9:F9:ED:27:55:EE:C2:FE:D9:6A:A7:2F:66:EB:EC:BD:75:85:31
Certificate issuer:       /CN=A91A4707/serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655
Certificate serial:       04A0
Authority key identifier: 98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/52B59ED2108D11ECA2542150C4F9AE02.roa
Signing time:             Thu 14 Nov 2024 23:42:48 +0000
ROA not before:           Thu 14 Nov 2024 23:42:48 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     58459
IP address blocks:        103.101.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl
                          rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184 (0x4a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4707/serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655
        Validity
            Not Before: Nov 14 23:42:48 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67368af8-2063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:ed:e4:3b:22:a5:44:96:d4:2a:cb:e1:04:
                    9e:df:d7:60:e0:30:0b:fa:09:cc:6e:2f:a0:a1:ab:
                    b6:9e:61:c7:ed:a3:20:62:b6:e0:92:6a:2d:9e:9e:
                    4c:76:32:a2:32:34:69:9b:69:72:4f:40:84:3a:f8:
                    8e:97:dd:00:6c:c0:b7:bb:a9:bf:cb:24:b9:24:f4:
                    40:32:69:2a:46:e3:a5:ea:14:b1:c7:97:46:2d:f4:
                    12:67:f7:af:f0:19:9a:b6:ae:60:8a:26:21:54:06:
                    3a:7d:e2:34:03:e6:ef:cb:0c:23:ee:fd:9b:04:a4:
                    cb:8a:c4:ae:24:75:28:cc:e1:69:f8:99:f0:5b:ab:
                    4b:fb:a1:04:b0:1c:63:07:00:12:5a:7c:ef:8d:5c:
                    b1:b9:34:f0:13:d7:06:57:7e:a9:ed:1b:89:a4:47:
                    33:71:9e:c0:97:27:ec:f4:25:9b:2f:00:02:a3:c0:
                    e1:6d:1e:39:cc:c1:cd:73:c1:9b:ad:79:84:a1:8f:
                    e0:eb:25:e9:12:d9:7d:68:7b:f4:c4:98:5c:46:3a:
                    19:54:52:34:64:6e:b0:22:18:dd:47:04:b5:28:96:
                    bd:7c:08:2a:6a:a2:9c:8f:ae:46:a1:17:34:a8:a9:
                    02:9e:d2:c1:22:32:b9:42:eb:1f:85:23:e5:8e:8a:
                    df:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A9:F9:ED:27:55:EE:C2:FE:D9:6A:A7:2F:66:EB:EC:BD:75:85:31
            X509v3 Authority Key Identifier:
                keyid:98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/52B59ED2108D11ECA2542150C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:db:9d:ef:46:ef:6a:4a:ac:2b:fb:14:51:fb:ed:b4:af:99:
         eb:51:92:82:5d:00:e7:6b:05:da:df:55:e1:3d:55:6c:16:64:
         44:8f:53:e7:25:be:47:4a:13:e7:f6:0d:68:7d:07:f3:07:f1:
         28:af:05:8a:66:7f:80:1e:ae:5b:99:d0:18:1f:1f:1c:17:b8:
         cc:e9:77:5b:8a:c3:52:67:81:4c:bf:1e:d1:cf:68:62:dc:2d:
         c4:b2:15:6a:d7:53:2c:39:58:0b:b0:0e:45:f5:c2:b4:57:60:
         66:78:95:bb:e9:4c:07:e9:b7:f3:8d:ec:bf:22:1c:d1:b3:0b:
         18:b7:b1:d8:77:08:32:58:d3:a6:29:e6:31:e0:66:4b:15:ae:
         b9:f9:21:de:56:17:9a:25:ee:ba:1e:f5:ad:3e:5d:cd:0c:c2:
         2e:75:94:c3:be:4f:01:d1:17:6e:0f:05:73:d8:a5:92:6f:33:
         27:e1:36:a9:1b:eb:e3:78:8a:5d:d4:5f:db:a8:e8:d1:46:12:
         74:c4:0e:be:df:19:5f:bf:b9:16:4a:1a:10:0c:14:83:4c:4c:
         2b:fd:5a:58:9f:1d:34:9e:0a:ce:9a:15:92:80:6b:28:5c:69:
         62:85:f9:c6:c4:32:31:f0:89:59:16:ed:8c:92:b7:56:d5:9a:
         35:5d:05:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:27 2024 by rpki-client on console-ams.rpki-client.org