Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/0112375EA05411EDB043385AC4F9AE02.roa
File:                     0112375EA05411EDB043385AC4F9AE02.roa (raw, json)
Hash identifier:          Kq1jWdH8x/n2DzsxB5OFw0vmNSRkGTF3DaCAJgxryGQ=
Subject key identifier:   CC:AC:7F:8A:36:62:40:DC:14:5E:F6:B9:DF:1E:46:6D:19:D2:F8:8D
Certificate issuer:       /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial:       070F
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/0112375EA05411EDB043385AC4F9AE02.roa
Signing time:             Wed 31 Jan 2024 00:12:37 +0000
ROA not before:           Wed 31 Jan 2024 00:12:37 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     8075
IP address blocks:        203.32.8.0/24 maxlen: 24
                          203.32.10.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
                          rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1807 (0x70f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
        Validity
            Not Before: Jan 31 00:12:37 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65b99075-4eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:01:48:49:b1:b1:55:7a:21:b6:74:19:ee:1d:
                    bd:32:eb:db:3b:81:ee:ba:98:40:87:2d:7e:6a:c7:
                    c0:e1:a4:5b:87:bc:21:62:51:47:2d:18:80:e7:aa:
                    f5:78:82:1c:bc:6a:94:e3:ef:27:50:b4:cc:90:98:
                    44:0b:70:9f:14:76:bf:2c:25:e1:78:9a:d8:f7:5c:
                    c8:7e:bd:d7:24:b7:7b:38:9f:13:9b:55:a9:fd:de:
                    05:92:ee:78:38:10:40:d2:e8:c2:a5:7d:87:aa:cb:
                    2e:fb:8c:98:6d:09:c5:cc:42:fe:16:3b:0f:ac:37:
                    78:0c:f3:f4:42:52:02:63:4d:c7:59:3f:6d:62:f9:
                    11:fc:9a:bd:82:48:b0:b2:99:94:b7:83:3f:03:3a:
                    04:a9:0a:3d:9f:5b:54:b9:fe:41:c4:cf:b0:1b:37:
                    02:b0:f0:2b:b9:f6:40:e1:56:79:2e:d9:d2:c3:d7:
                    2a:0a:b0:bb:75:a1:e5:11:cb:fe:04:b7:d2:b5:36:
                    fb:93:1f:d4:13:0a:eb:9f:88:22:3c:2b:c5:84:aa:
                    a1:01:d3:0e:1c:06:5c:c2:44:56:65:69:13:41:b2:
                    f3:db:c8:c9:d9:74:82:59:81:21:21:16:e5:fa:97:
                    c7:00:bd:57:47:d5:74:3a:e8:ba:3f:ee:83:a9:22:
                    29:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AC:7F:8A:36:62:40:DC:14:5E:F6:B9:DF:1E:46:6D:19:D2:F8:8D
            X509v3 Authority Key Identifier:
                keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/0112375EA05411EDB043385AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.32.8.0/24
                  203.32.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:cb:0b:29:1b:c3:63:6c:5f:95:d3:6d:f5:e1:42:07:0e:95:
         c3:3a:a8:92:3e:54:83:52:ea:72:54:9e:99:1b:7f:cf:df:8c:
         96:bf:b9:2c:e7:8a:42:6c:97:76:c6:56:a2:0d:b6:5b:91:09:
         05:f1:a8:56:1f:46:81:ed:24:6a:ae:74:67:d9:06:7c:52:38:
         f1:cc:19:72:90:ac:ca:2d:3b:f8:a0:3c:d7:25:4f:7e:67:a2:
         62:8f:89:4c:85:13:7d:5d:cd:25:2b:cb:64:d5:77:40:85:ee:
         fb:de:46:16:9b:ec:e4:6a:c2:d4:9e:84:d6:db:0c:fc:76:32:
         fc:7e:a8:db:57:12:d7:17:de:34:bc:62:2e:b5:d0:70:97:e7:
         e0:cd:51:1a:c4:11:0f:11:2c:7b:d8:30:44:0f:f4:28:20:7f:
         e8:f9:17:74:02:bb:af:0d:a8:8a:bd:98:79:de:5d:51:d5:2b:
         b4:36:2a:a7:2e:e8:4e:b6:43:5c:59:f7:ea:af:4c:fe:d9:8a:
         7c:00:95:e2:17:20:d8:9c:2a:0b:9c:c4:3e:57:20:f8:6d:bd:
         bd:f4:2f:37:60:4d:ef:94:80:82:ed:2a:f1:fe:9d:fe:f7:dc:
         5c:89:f2:52:e4:86:38:3b:72:82:26:9f:9c:74:8b:55:a0:bb:
         fb:1b:18:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:22:24 2024 by rpki-client on console-fra.rpki-client.org