Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/07BAAB7C9B1611EFB5C28465C4F9AE02.roa
File:                     07BAAB7C9B1611EFB5C28465C4F9AE02.roa (raw, json)
Hash identifier:          rbz8foe2dtSyz0TizkW11a5dBxrihDXELagr4VmLtrE=
Subject key identifier:   A9:31:C7:30:08:02:F2:93:E3:3B:A1:2A:26:69:30:6C:3D:74:50:CE
Certificate issuer:       /CN=A91A8047/serialNumber=8848AACDF2951303E7098F419D8CA00422890C69
Certificate serial:       04
Authority key identifier: 88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/07BAAB7C9B1611EFB5C28465C4F9AE02.roa
Signing time:             Tue 05 Nov 2024 01:49:15 +0000
ROA not before:           Tue 05 Nov 2024 01:49:15 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     134673
IP address blocks:        103.209.224.0/22 maxlen: 22
                          203.18.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl
                          rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8047/serialNumber=8848AACDF2951303E7098F419D8CA00422890C69
        Validity
            Not Before: Nov  5 01:49:15 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=6729799a-4bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:37:6d:5d:13:01:0b:b5:4c:0d:a9:1c:d6:27:
                    8a:a2:c9:44:04:ab:fd:cf:ac:1a:95:23:ab:62:24:
                    37:ac:73:82:89:55:11:c9:d5:d6:5f:0d:e0:21:36:
                    11:a4:cb:1a:09:c8:d4:87:5b:c8:4e:1c:0c:7c:d4:
                    8d:a8:56:98:0e:c5:f8:0e:36:b5:2c:b3:01:e7:e3:
                    b7:fb:9c:94:b7:9f:dc:c5:10:b5:94:32:7e:ed:41:
                    b6:2a:a1:a9:d2:bd:d3:00:8b:b0:de:67:1d:53:f5:
                    21:92:b7:c2:25:49:e3:2d:d4:1b:10:8f:c4:cd:c3:
                    21:41:bd:53:fc:62:ac:5d:39:be:cb:5b:24:36:21:
                    5c:15:f3:8e:75:55:0a:7e:13:d2:2f:de:ca:63:48:
                    d5:8c:95:78:da:75:ec:e5:c6:62:36:89:06:44:3f:
                    6a:a5:28:a4:80:b0:79:c2:9d:08:be:3b:c8:52:35:
                    01:66:79:6c:d7:df:f6:4b:ae:fb:6d:31:f5:f1:ff:
                    35:73:18:c2:88:09:c4:7c:70:8c:39:76:72:40:20:
                    9b:a2:38:a8:03:8f:f5:5b:52:09:39:cd:32:b4:22:
                    ff:97:08:a4:b2:7a:84:f5:ee:be:4a:5a:89:eb:ec:
                    3b:f5:51:c0:db:a2:2c:8a:f4:9e:27:c7:e5:2a:bc:
                    3f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:31:C7:30:08:02:F2:93:E3:3B:A1:2A:26:69:30:6C:3D:74:50:CE
            X509v3 Authority Key Identifier:
                keyid:88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/07BAAB7C9B1611EFB5C28465C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.224.0/22
                  203.18.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:5b:e8:21:b3:3c:fc:40:d8:ea:f9:43:62:c5:6e:0e:ad:d1:
         5d:cd:ac:0c:d8:27:30:71:af:12:26:0a:b9:08:19:6e:cc:58:
         27:32:b5:89:d9:57:3b:e3:e3:56:d2:30:5a:17:53:55:88:37:
         8c:e6:e0:4a:aa:e7:e8:cf:e3:8d:33:4c:cf:36:2b:fd:52:ac:
         23:25:0f:a9:84:8b:55:27:5e:b6:34:12:be:f6:69:e4:ec:25:
         57:62:cf:ef:b3:5b:0e:b8:33:a0:b2:9b:3d:82:53:5e:41:0b:
         69:3c:08:ed:93:90:23:46:5a:01:f4:a6:e9:b3:6b:b7:f1:92:
         0a:19:c0:18:bb:64:11:fa:00:66:4f:70:95:ba:e7:5b:4d:06:
         b0:97:17:0e:a7:c9:61:53:09:cb:bc:c0:c6:21:06:49:a4:40:
         e3:ca:5c:e6:34:f8:a2:46:1c:3a:84:b5:e2:de:7a:4e:93:ab:
         f0:a7:45:15:6b:3c:32:70:f4:83:0a:ec:40:30:d5:b0:e1:fc:
         dd:c9:60:bd:31:95:e6:aa:f6:d8:30:aa:bb:87:6e:84:81:74:
         eb:cd:ca:15:74:b7:6f:e3:ef:1c:ca:68:4c:80:3f:fa:69:d6:
         b6:36:00:99:00:da:ba:64:dc:9e:82:db:8f:76:91:71:13:77:
         8d:41:d2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:31:31 2024 by rpki-client on console-fra.rpki-client.org