Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/84F58DCA7DCB11EC99806E25C4F9AE02.roa
File:                     84F58DCA7DCB11EC99806E25C4F9AE02.roa (raw, json)
Hash identifier:          /8Nf4uZDSnN/p9IwW8sx2sknWcMkeU0uy8pmXCNQQ4k=
Subject key identifier:   4A:3C:B4:19:D7:8A:C9:3C:30:75:F3:4D:99:8C:49:A2:40:4C:1D:96
Certificate issuer:       /CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162
Certificate serial:       030B
Authority key identifier: 8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/84F58DCA7DCB11EC99806E25C4F9AE02.roa
Signing time:             Sun 03 Mar 2024 02:54:40 +0000
ROA not before:           Sun 03 Mar 2024 02:54:40 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     131284
IP address blocks:        103.133.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl
                          rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 779 (0x30b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162
        Validity
            Not Before: Mar  3 02:54:40 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65e3e66f-857b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:51:db:69:b8:e5:20:64:fc:68:48:b6:ec:e3:
                    09:3a:ab:3f:f8:e3:09:f5:ea:c3:82:b0:d1:50:a1:
                    4b:c8:c7:7c:51:e1:4f:e4:c2:0a:21:09:39:94:6e:
                    8c:ce:93:73:ff:f5:86:f3:b1:45:cb:16:54:84:b1:
                    b6:09:01:af:f3:a7:d7:39:bc:75:8d:fa:04:02:92:
                    79:3f:ef:1c:47:7d:15:1b:6d:8e:98:65:44:e3:8f:
                    ca:cc:88:fc:40:fb:5d:ee:fc:f3:3a:65:08:89:15:
                    45:32:10:5b:f8:b9:3c:58:9d:77:bd:39:06:bc:b1:
                    3c:08:d1:6c:9c:57:08:e7:6d:4e:26:b6:86:47:b0:
                    86:74:23:c8:35:55:d8:7b:8f:56:b9:45:28:c5:a1:
                    79:65:0c:69:14:ab:d7:f7:c7:1c:cf:f5:06:8e:fc:
                    06:56:a0:51:c9:22:1d:2b:b8:11:ab:5c:86:21:b6:
                    88:e9:fc:a8:58:15:f3:16:e1:3f:80:23:3f:ee:5e:
                    15:f7:f3:9b:eb:90:74:32:be:e1:20:f8:dc:71:10:
                    2e:1f:22:9e:a3:36:53:6a:df:18:43:22:b2:34:9b:
                    0b:8f:29:b0:41:95:8d:45:e9:cf:65:72:f2:eb:e5:
                    06:15:3f:44:9d:7a:cc:12:65:90:2d:1b:4f:d4:fd:
                    13:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3C:B4:19:D7:8A:C9:3C:30:75:F3:4D:99:8C:49:A2:40:4C:1D:96
            X509v3 Authority Key Identifier:
                keyid:8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/84F58DCA7DCB11EC99806E25C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:e1:d7:3f:40:c6:3d:41:14:94:f4:72:4b:98:89:3a:7a:3a:
         72:4d:8d:04:ba:47:4d:4d:80:82:38:de:13:1a:a3:36:39:cc:
         4b:f0:8a:e1:16:66:5c:72:f3:30:25:97:99:eb:d7:cb:c1:9d:
         5b:3b:1a:93:67:62:a4:d7:93:47:4b:3e:5f:05:56:75:ed:55:
         a3:d8:ea:d7:fa:ea:bc:c8:8b:f4:51:c4:91:9e:4e:fc:a6:70:
         bf:50:56:0c:ab:b6:ca:20:c7:0a:e0:80:94:de:1e:f0:b0:86:
         d9:22:3b:4a:6b:de:ce:13:4b:22:d8:eb:f0:55:eb:2c:c4:46:
         86:56:9a:5c:2e:af:39:5a:2c:48:a6:cf:36:22:9f:12:8f:70:
         0d:bb:7f:d6:12:21:c9:01:46:b6:3f:cb:62:91:67:e1:07:74:
         e8:c2:56:33:0b:86:af:96:9e:e4:a3:64:80:90:de:96:c6:ac:
         e6:52:04:96:69:31:fc:7c:3b:81:8e:3b:83:ff:4f:e6:f7:05:
         45:08:72:f9:12:10:26:84:39:1b:ea:40:b7:6c:ce:87:16:b6:
         32:30:ee:46:c8:37:2d:f8:08:32:22:07:3a:4d:8d:a9:b8:5c:
         a1:1c:85:fd:1f:c0:fe:29:54:45:af:06:8d:1b:cb:f3:22:9d:
         1c:fe:2c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:27 2024 by rpki-client on console-ams.rpki-client.org