Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/507C31C21D7211EFA095B25AC4F9AE02.roa
File:                     507C31C21D7211EFA095B25AC4F9AE02.roa (raw, json)
Hash identifier:          1y/ITkoFaBAOp9EAsg22Me68ifQMXDcby23ipO0Xd9s=
Subject key identifier:   D8:FA:21:EA:5E:86:0E:81:8F:F4:CE:DD:31:33:99:E3:16:4D:3D:72
Certificate issuer:       /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
Certificate serial:       14
Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/507C31C21D7211EFA095B25AC4F9AE02.roa
Signing time:             Sat 15 Jun 2024 10:29:36 +0000
ROA not before:           Sat 15 Jun 2024 10:29:36 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     17559
IP address blocks:        203.14.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl
                          rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Oct 2024 04:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
        Validity
            Not Before: Jun 15 10:29:36 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=666d6d10-723d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:33:2c:82:cb:e3:ee:a6:d4:34:7d:1b:15:
                    66:27:9d:4a:0b:09:b1:77:92:54:2c:53:b6:5f:4a:
                    9a:ef:64:2e:4a:db:0a:15:b6:09:47:ba:f1:00:24:
                    e3:dc:fa:d8:6e:6d:8f:e2:f6:d0:ed:72:92:20:79:
                    cc:f7:75:06:d0:46:72:ae:03:c7:1a:ab:4b:0f:c1:
                    1b:2f:30:3b:44:14:a3:0c:33:db:c7:84:e5:a1:75:
                    47:ba:c5:29:b7:13:66:20:18:65:db:d4:1c:d5:41:
                    0a:7b:7e:2c:9b:f4:af:c5:ab:e5:69:d6:8c:b4:a8:
                    14:6d:96:fc:24:2f:fe:ce:fa:68:c0:c9:f8:08:cb:
                    43:00:79:b2:0a:28:79:0c:14:b4:f6:6d:39:2f:fc:
                    9c:75:bc:e2:7b:80:fb:ca:e3:d9:94:c5:23:cc:d5:
                    fc:06:86:20:61:be:9b:ab:95:fe:23:96:1a:f4:88:
                    e3:b7:ad:2d:dc:0b:84:a2:99:50:c8:49:12:95:53:
                    ad:cf:f5:44:24:0c:ba:9c:20:6d:08:d1:aa:43:d3:
                    d0:e6:94:df:b0:de:57:51:81:75:f3:4d:4e:f0:eb:
                    36:8e:70:97:dd:52:e7:db:65:c6:a9:cd:15:99:ec:
                    f6:45:d1:be:ee:95:df:cd:04:db:5d:98:13:25:bd:
                    e3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FA:21:EA:5E:86:0E:81:8F:F4:CE:DD:31:33:99:E3:16:4D:3D:72
            X509v3 Authority Key Identifier:
                keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/507C31C21D7211EFA095B25AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.14.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:1f:30:a4:80:28:a1:91:97:c0:9f:9a:59:94:c1:5f:49:ed:
         a7:d3:0a:df:12:17:7d:1a:ba:37:70:c4:9b:36:d2:f6:b7:d4:
         62:d6:0e:d2:14:10:20:66:ec:dc:f5:0d:38:26:de:af:0a:3c:
         9c:dc:bc:22:7e:49:f5:6e:ae:2c:b5:29:ba:42:56:70:31:bb:
         a2:d9:6c:5a:a7:22:1c:84:eb:c0:fb:69:20:0e:3f:df:e8:2e:
         bb:d7:04:84:30:7b:9a:ad:7d:ad:0c:e1:fc:44:d1:a7:c0:d9:
         79:6b:b9:1d:0c:2c:bf:76:28:70:73:b6:87:b3:a0:08:47:bd:
         e1:49:f9:0f:7f:63:08:96:05:2c:80:0d:2b:ad:db:94:ca:bd:
         07:a7:aa:c3:64:81:2f:7c:8f:09:dd:ae:2a:6c:31:ea:d1:0f:
         69:97:76:9b:00:cd:5b:f8:c6:42:d6:fe:c0:08:e6:d7:a2:35:
         3f:7e:1b:0a:6c:d5:a2:6a:b2:ad:8e:4f:9b:6b:de:a2:1b:81:
         d3:b3:5b:58:1d:88:ae:03:20:77:b5:30:ea:22:16:0b:49:51:
         fe:ae:19:0a:6c:47:87:ca:ae:6f:ab:a6:86:07:32:76:bd:c8:
         3b:6b:be:24:2d:84:3b:8e:36:3f:95:5a:f2:d6:dd:4f:59:3f:
         7b:34:8e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 06:46:21 2024 by rpki-client on console-fra.rpki-client.org