Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/C33EB0EC7C4211EB933D233EC4F9AE02.roa
File:                     C33EB0EC7C4211EB933D233EC4F9AE02.roa (raw, json)
Hash identifier:          d3qr5RqMQclwYYIrxTT2M2ZEqEhw3tr48jNwaXCY/ZQ=
Subject key identifier:   13:1A:07:F9:DD:ED:8F:6C:B9:17:DB:1A:31:BC:E0:7D:33:02:E2:DA
Certificate issuer:       /CN=A91B3CA4/serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302
Certificate serial:       079A
Authority key identifier: B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/C33EB0EC7C4211EB933D233EC4F9AE02.roa
Signing time:             Tue 28 May 2024 22:33:33 +0000
ROA not before:           Tue 28 May 2024 22:33:33 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     139039
IP address blocks:        103.138.212.0/23 maxlen: 23
                          103.138.212.0/24 maxlen: 24
                          103.138.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl
                          rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1946 (0x79a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3CA4/serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302
        Validity
            Not Before: May 28 22:33:33 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66565bbd-4dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:91:0d:46:16:b3:b3:1c:5f:37:26:0f:92:d8:
                    be:3d:58:08:ef:96:66:38:e2:4e:7d:eb:98:5e:76:
                    f6:11:6e:fd:94:b5:45:de:c6:98:db:ea:62:3b:3a:
                    e1:b5:29:af:34:2f:4b:12:b0:7e:a9:38:59:2e:24:
                    50:59:74:c2:ac:61:7c:19:2b:e2:ac:a1:19:ef:36:
                    bc:1a:56:23:0e:98:ac:a7:5f:7b:ca:07:ae:42:8c:
                    dc:79:ab:43:54:ab:29:86:9b:aa:03:44:09:92:92:
                    26:86:e5:a4:11:8b:27:55:7c:63:da:fe:de:e2:80:
                    ea:08:55:ef:d9:72:ec:51:3d:62:ef:52:56:8e:56:
                    5a:18:17:09:72:3f:03:db:7a:1e:4c:11:e6:e4:4d:
                    94:ce:f8:d3:3f:84:4d:c9:42:0b:be:83:89:18:46:
                    81:f2:3e:66:85:d7:fa:7c:7b:17:0c:99:d8:44:e9:
                    f4:23:14:a4:d9:50:d4:bb:14:98:a2:14:95:e6:c1:
                    89:45:f4:93:03:4f:6f:a2:c9:c6:84:73:b7:ee:8f:
                    db:67:52:82:90:0e:1c:ee:9f:b1:0c:da:97:39:64:
                    e2:c1:14:2f:c6:c8:61:ba:63:84:b3:cd:b5:21:ec:
                    47:f0:01:45:4a:76:30:29:f7:70:01:8c:05:88:9c:
                    e6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1A:07:F9:DD:ED:8F:6C:B9:17:DB:1A:31:BC:E0:7D:33:02:E2:DA
            X509v3 Authority Key Identifier:
                keyid:B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/C33EB0EC7C4211EB933D233EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:08:38:6b:98:0b:40:09:b0:fa:70:c3:71:b2:a8:1b:b8:8a:
         8b:73:b0:f3:e2:0f:cc:56:36:fd:c1:4b:6d:c3:7b:ce:3e:ab:
         23:28:e2:ae:d8:c6:88:83:63:b4:91:5a:91:b7:84:c2:7d:13:
         55:25:15:63:bf:e2:7e:2e:ff:96:08:8a:d5:9c:d5:2a:9d:6f:
         e9:ec:9c:25:32:d8:85:58:46:6e:05:e6:8d:8e:49:c5:d5:0e:
         bd:e2:a3:b1:86:f9:0f:05:86:bb:8f:a7:4a:15:4c:3b:d3:c4:
         e1:78:89:56:58:a0:57:50:78:55:c4:73:5d:10:28:70:b5:7c:
         48:ae:8c:e4:18:38:57:0b:2a:53:25:e8:1f:1d:5d:20:f7:88:
         17:3a:23:b9:4a:34:6f:a3:54:9e:9b:e5:fa:ea:2b:f2:95:4c:
         6e:9a:ed:7f:68:0d:e4:7b:d4:13:6d:37:b3:68:13:51:f3:3f:
         b4:d1:30:49:5d:9e:9a:31:50:5d:de:fc:28:c3:9c:cd:7c:fb:
         fd:10:6d:9f:49:86:eb:3e:56:85:b1:20:e5:a0:61:2d:3d:fd:
         02:ee:19:98:4f:ac:a4:61:bb:94:6f:ca:f7:a3:d5:00:8a:8d:
         b6:11:77:dd:cd:30:9d:ca:84:ea:8c:e2:ec:7c:1c:21:b8:87:
         af:ca:80:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:11 2024 by rpki-client on console-fra.rpki-client.org