Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/7AFB859484C711EF9740BE81C4F9AE02.roa
File:                     7AFB859484C711EF9740BE81C4F9AE02.roa (raw, json)
Hash identifier:          JaP8DbxQir8/0bWtIBOnJ0xxJ2zmG81J8TY5KOYqo20=
Subject key identifier:   7D:68:69:A6:8D:0F:B7:CC:6E:31:B1:49:ED:EB:3A:0C:CD:D8:81:1E
Certificate issuer:       /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial:       051C
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/7AFB859484C711EF9740BE81C4F9AE02.roa
Signing time:             Mon 07 Oct 2024 16:16:17 +0000
ROA not before:           Mon 07 Oct 2024 16:16:17 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     55933
IP address blocks:        103.214.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
                          rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1308 (0x51c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
        Validity
            Not Before: Oct  7 16:16:17 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=67040951-a265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dc:d7:f0:9b:31:3c:b2:dc:10:5a:37:42:60:
                    c3:db:a5:c1:ca:b0:b9:42:a5:c4:10:d0:6a:64:45:
                    b8:8a:54:00:c7:a2:8c:08:d4:bb:cf:32:1c:9f:2d:
                    a1:98:33:71:c7:ff:24:91:7f:1f:81:33:50:c6:47:
                    a4:d3:ba:f3:15:c4:60:6b:4f:df:08:69:e9:92:cc:
                    18:ba:0b:f3:cb:93:e9:37:e2:13:85:4c:b5:29:be:
                    74:94:e9:85:00:a0:35:44:fd:6f:a7:da:f4:34:ee:
                    12:82:d5:1a:10:a5:c4:5b:da:86:5e:e2:3e:1e:46:
                    c1:72:9f:d9:03:d7:53:cb:65:bd:a3:60:98:c6:79:
                    54:99:26:20:9a:2b:44:44:93:b0:32:5a:02:16:a5:
                    4c:d3:7a:53:bf:0a:bb:1f:36:f6:b8:b9:00:c2:33:
                    2a:8f:98:4e:d1:cc:22:1b:fd:7f:11:0c:c7:e2:ca:
                    84:78:89:3b:61:57:d7:d0:5c:d0:7d:86:f0:24:a4:
                    89:12:7c:93:db:5a:bd:af:a0:7d:d7:58:86:3d:39:
                    c9:95:ae:7c:0e:68:5c:84:45:83:41:55:8c:50:34:
                    99:1a:a2:21:83:a4:12:49:f3:53:0c:6b:90:01:dd:
                    88:e4:96:c9:28:fe:ae:80:d7:b0:52:2a:c5:90:76:
                    a9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:68:69:A6:8D:0F:B7:CC:6E:31:B1:49:ED:EB:3A:0C:CD:D8:81:1E
            X509v3 Authority Key Identifier:
                keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/7AFB859484C711EF9740BE81C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:cc:69:b5:46:58:08:d3:6f:e9:67:f7:1a:82:c6:7e:a9:86:
         19:f2:83:61:57:03:fb:20:8c:bf:f2:03:4b:ed:fe:ca:73:fa:
         68:3b:ec:e9:5d:06:90:f1:2c:51:26:72:52:e8:59:9a:27:00:
         c4:0f:63:04:47:f9:1c:f4:a0:e7:85:5c:05:af:a5:c2:e5:fd:
         a6:1a:a6:85:89:67:c2:78:d5:9c:e3:3c:74:c0:22:70:11:60:
         52:2c:cf:53:fb:ae:c2:5f:20:96:e8:66:7c:9d:eb:9e:d4:90:
         5e:aa:53:61:5e:04:80:c4:8c:b5:f8:f1:4e:ad:8b:da:1e:94:
         68:83:ad:8a:0f:23:78:1b:a3:ef:6f:a6:e2:c9:89:66:b3:1b:
         6c:cc:81:08:4a:e2:2f:a5:23:e2:f3:a5:30:4f:28:5c:d3:08:
         9a:c7:c4:dd:05:d5:7c:52:f4:1d:8e:55:c5:5c:d6:06:26:c6:
         ef:c0:d4:5c:8b:64:36:7c:e1:2b:6a:4d:d5:1c:e8:63:a0:2f:
         f6:a6:4b:89:7c:35:5f:ff:a8:88:24:5d:85:db:32:89:8f:07:
         5f:ea:c6:3b:18:42:89:46:0d:38:c3:37:28:38:a7:6f:b9:3f:
         02:bc:a4:c0:5c:66:ae:f5:a8:da:44:ab:cf:8a:c2:92:3f:8d:
         37:2f:e8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org