Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/4EEEF95AEA4311EE86C1DD73C4F9AE02.roa
File:                     4EEEF95AEA4311EE86C1DD73C4F9AE02.roa (raw, json)
Hash identifier:          sNaiox7ZLy/qcCMPoqhVCHuvx1nQF3lXdAn0nDRf6jo=
Subject key identifier:   DC:09:31:F8:F3:DC:A1:9A:D5:7A:D1:9B:43:A1:11:8B:F2:AA:62:81
Certificate issuer:       /CN=A91ACF30/serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581
Certificate serial:       0719
Authority key identifier: D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/4EEEF95AEA4311EE86C1DD73C4F9AE02.roa
Signing time:             Mon 25 Mar 2024 01:02:10 +0000
ROA not before:           Mon 25 Mar 2024 01:02:10 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     132837
IP address blocks:        103.248.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl
                          rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1817 (0x719)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACF30/serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581
        Validity
            Not Before: Mar 25 01:02:10 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6600cd12-3849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ea:b8:89:ac:5d:a8:93:f1:ac:4f:5f:69:4f:
                    10:b9:b1:00:d3:0e:de:fb:cb:c5:7b:80:b4:b2:e4:
                    85:a2:eb:e7:94:5e:0c:52:83:2f:96:d1:1a:c3:59:
                    82:5f:78:32:82:ef:cb:40:cd:42:79:f5:27:63:ce:
                    10:7b:24:ee:cc:86:91:21:c5:dd:c8:cb:9c:4a:a9:
                    f4:43:c5:6b:14:a6:75:ce:8b:5d:74:65:af:28:7b:
                    ff:1b:53:b4:bd:de:ce:a9:c4:56:17:49:6e:3b:81:
                    a7:c3:3d:6f:35:a1:e3:7a:94:2b:52:02:cb:1d:84:
                    06:cf:5e:c1:15:39:59:81:17:3e:e8:eb:b7:8f:6d:
                    99:da:c5:82:6d:44:7b:48:0e:ee:8d:cd:e8:ea:bb:
                    7e:a5:62:e4:d3:13:ae:9a:0c:f0:ed:cd:88:a3:ea:
                    e5:9a:ad:88:c2:dd:11:77:9e:72:44:1e:1d:c9:ad:
                    de:da:f0:cd:04:0d:7d:a4:8f:b2:03:a5:cf:de:75:
                    c4:d4:eb:83:8d:d0:20:f5:ff:c7:e3:b2:7b:1d:aa:
                    6e:96:00:0b:4a:ba:66:75:9c:07:7b:50:e3:fd:6b:
                    5a:6f:af:d0:92:b6:7f:46:99:9b:0c:17:df:19:fb:
                    ab:47:d0:06:5d:24:c4:15:55:cd:c3:cd:9b:63:b9:
                    ad:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:09:31:F8:F3:DC:A1:9A:D5:7A:D1:9B:43:A1:11:8B:F2:AA:62:81
            X509v3 Authority Key Identifier:
                keyid:D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/4EEEF95AEA4311EE86C1DD73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:f3:47:81:23:bf:af:3e:94:36:cf:8b:48:bc:f6:c4:9e:fe:
         aa:bd:20:76:f7:d8:71:3a:bc:05:80:4b:8d:e5:86:24:50:8e:
         bc:48:4b:fc:03:7e:c7:f6:ff:a8:6b:2d:01:85:9e:78:5f:dd:
         2a:7e:d0:02:2c:18:b5:61:9f:bb:de:2a:6c:f2:2a:f0:14:85:
         10:d4:5b:db:6d:5f:fe:fd:06:74:32:37:25:c5:ca:75:15:37:
         d6:ac:cc:97:f3:c2:f6:31:e9:a5:db:f6:27:e8:2f:87:37:40:
         10:4b:77:0a:e2:d9:3a:11:0c:ce:39:82:49:98:ac:66:9f:77:
         99:db:bb:13:a4:fa:3a:96:70:28:8d:1c:f5:09:61:73:e8:fd:
         9e:55:34:f6:18:f9:7f:0c:16:1b:25:2a:44:55:02:a1:c2:54:
         e1:25:a2:9e:fe:0b:33:1b:c5:c6:92:93:ab:05:71:dc:14:25:
         59:30:9e:e6:5b:71:b7:3c:f2:24:50:0a:29:42:9d:cd:ad:3c:
         86:4d:30:60:ff:31:1f:c5:7e:da:6b:47:f7:2a:9d:ac:80:81:
         bb:4a:02:d1:07:e7:42:08:cc:90:b0:44:68:2d:31:68:d9:c1:
         91:8b:8f:63:66:d1:35:12:11:40:dd:43:8c:d2:83:aa:ea:df:
         b8:d5:fc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:18 2024 by rpki-client on console-fra.rpki-client.org