Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/C29855340DC711EFA3C7527AC4F9AE02.roa
File:                     C29855340DC711EFA3C7527AC4F9AE02.roa (raw, json)
Hash identifier:          Y60lVXZCMvlg24lDH++SKV1ufImtIdM82ov4PLfGH4o=
Subject key identifier:   45:02:3A:0D:7B:BC:DE:BB:CF:AD:FF:F1:1E:0F:90:E1:FA:4D:13:03
Certificate issuer:       /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708
Certificate serial:       08CC
Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/C29855340DC711EFA3C7527AC4F9AE02.roa
Signing time:             Thu 09 May 2024 05:48:29 +0000
ROA not before:           Thu 09 May 2024 05:48:29 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     198247
IP address blocks:        103.244.134.0/24 maxlen: 24
                          103.244.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl
                          rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2252 (0x8cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708
        Validity
            Not Before: May  9 05:48:29 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=663c63ac-a24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:47:06:07:72:af:bd:6c:d7:82:99:96:34:7a:
                    a6:fe:b3:5f:e8:4c:8a:24:28:1a:0d:2a:66:1b:12:
                    b9:0b:38:ac:40:a2:f8:f2:45:2c:84:c5:e3:82:7b:
                    63:49:d9:37:bd:7b:c6:a5:8b:2e:7a:64:9d:74:11:
                    d1:e8:bd:d3:f7:e7:fd:a3:c6:71:24:6f:6e:24:74:
                    68:6a:2a:dd:50:33:f2:f1:84:11:25:2b:c5:31:d9:
                    28:45:80:ac:c0:1a:0d:53:3a:d8:dc:23:25:09:3e:
                    1c:17:9d:c9:05:b8:a1:85:09:fb:01:02:24:c5:10:
                    5e:42:cd:b0:f1:d0:a9:f3:f5:38:eb:92:72:35:ce:
                    c7:a1:d8:8d:13:51:b6:f8:49:06:c4:d2:d2:cd:71:
                    5f:b4:18:7a:04:eb:f5:7a:1a:4f:a1:a6:f3:b2:b4:
                    f1:a1:8f:b7:03:20:63:9c:72:70:1e:95:da:df:7c:
                    9c:e1:24:8f:d9:2d:d1:0b:d4:b0:16:67:24:6b:7d:
                    7a:3b:53:e9:ac:69:67:cc:82:b2:02:16:b7:bc:87:
                    b8:44:ac:55:fd:e0:9c:59:f0:6c:0a:92:29:d2:0f:
                    92:0b:5e:01:74:08:75:1b:24:91:0d:47:e4:9e:d0:
                    b9:b7:df:f2:ef:e7:8d:81:88:df:b6:16:f0:5f:7e:
                    f9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:02:3A:0D:7B:BC:DE:BB:CF:AD:FF:F1:1E:0F:90:E1:FA:4D:13:03
            X509v3 Authority Key Identifier:
                keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/C29855340DC711EFA3C7527AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:2c:98:9f:51:e9:92:35:6f:52:54:a8:10:c9:73:49:e3:03:
         3b:ed:e6:22:1d:79:76:b2:a6:b5:04:ab:d8:d8:77:e3:42:52:
         74:34:e7:64:af:32:f4:e3:76:75:2e:f8:d9:bb:a6:4f:60:73:
         7c:ff:9b:a6:61:56:c8:c4:30:a2:ff:c1:04:79:8c:74:4b:54:
         5c:2e:71:54:9c:14:98:bc:58:11:5d:87:10:71:73:e0:6f:bd:
         b8:f1:b1:de:ef:62:98:7c:ee:9b:d1:aa:02:33:bc:6d:21:64:
         ec:a7:44:34:39:70:0f:4d:37:1f:73:e3:43:68:1e:cb:00:63:
         c5:e4:af:21:ac:76:06:0d:97:ef:85:f7:14:f0:d0:1a:01:75:
         ad:66:e3:ef:f2:e7:e2:3d:a2:b0:89:d2:5a:91:e7:68:d5:19:
         44:39:70:aa:1e:9b:ac:e9:8e:7b:ca:fb:13:17:de:b5:2b:20:
         30:d3:a8:88:25:78:de:93:bd:d4:3c:9b:45:b9:39:20:ae:a5:
         2a:17:d0:a3:68:70:a8:14:bd:35:42:1a:62:b9:ba:a7:d5:52:
         b2:fb:81:d6:5f:d3:04:c5:9b:7e:2e:ee:b9:66:e0:d3:f2:bc:
         be:ae:da:73:ae:b9:5c:40:3b:68:36:dd:40:43:c2:ad:1d:65:
         fb:40:74:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:45 2024 by rpki-client on console-fra.rpki-client.org