Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/E72434CA69E011EFBD9DBA75C4F9AE02.roa
File:                     E72434CA69E011EFBD9DBA75C4F9AE02.roa (raw, json)
Hash identifier:          G4KsLmxeAP7/JJm6vWHK6Z6vUjbZ/olzKXC4RCzIV1I=
Subject key identifier:   4D:E0:5A:99:06:FB:F0:CC:FF:FB:39:D4:B9:99:71:B2:DD:99:36:86
Certificate issuer:       /CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
Certificate serial:       33FC
Authority key identifier: 49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/E72434CA69E011EFBD9DBA75C4F9AE02.roa
Signing time:             Tue 03 Sep 2024 10:41:48 +0000
ROA not before:           Tue 03 Sep 2024 10:41:48 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     58463
IP address blocks:        103.23.180.0/24 maxlen: 24
                          103.23.181.0/24 maxlen: 24
                          103.23.182.0/24 maxlen: 24
                          103.243.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl
                          rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13308 (0x33fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
        Validity
            Not Before: Sep  3 10:41:48 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=66d6e7ec-6b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4d:b5:3c:2e:65:60:f3:43:11:3b:70:dc:a0:
                    38:cf:ee:40:ea:44:18:55:79:1a:5a:2c:6f:e3:c4:
                    1d:fa:e5:fd:c7:b3:5f:54:ae:13:7c:53:ba:b6:d0:
                    7c:5b:d6:97:2d:6a:5a:7d:cc:c3:9f:4a:3d:84:fe:
                    2f:40:af:47:b5:a5:5f:59:11:51:3b:23:78:d9:1a:
                    f7:c6:0e:df:62:f7:8c:b2:75:38:93:17:9e:25:a9:
                    ca:03:d5:05:6c:07:de:74:fa:97:30:ca:99:a0:e5:
                    21:d9:14:0a:b6:44:e3:a2:d8:78:3c:d7:26:d6:9a:
                    ee:a1:87:74:3c:bd:98:d8:b0:12:fc:e5:70:55:a9:
                    ab:ef:1a:4d:3a:1d:8f:2a:9e:4e:6a:d7:52:a3:3b:
                    f0:83:11:07:20:89:f3:1c:6f:b8:08:54:e7:66:f4:
                    83:30:8e:76:55:69:5f:13:5a:66:25:73:0e:37:0f:
                    b4:0a:a4:21:86:92:4a:48:46:28:e4:63:0c:b8:0b:
                    21:0b:4c:78:81:13:5c:d7:89:2a:9e:8b:79:72:36:
                    d7:e5:ac:ab:6e:c4:19:8f:01:58:b9:50:c7:e7:91:
                    67:cd:f5:3b:56:8a:d1:4b:fb:43:5d:f9:84:7f:48:
                    77:38:e3:42:b7:e1:ed:6b:ba:85:74:a2:ed:a1:22:
                    d8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E0:5A:99:06:FB:F0:CC:FF:FB:39:D4:B9:99:71:B2:DD:99:36:86
            X509v3 Authority Key Identifier:
                keyid:49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/E72434CA69E011EFBD9DBA75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.180.0-103.23.182.255
                  103.243.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:93:97:5b:cf:50:d9:e2:60:1f:c5:2a:4d:5f:f7:f6:33:2d:
         b2:41:6a:3d:1c:46:9a:ae:0e:9e:0c:04:3a:e0:6b:e5:32:07:
         0f:3d:36:b0:53:7f:46:31:8c:2e:4a:d8:fa:d6:13:27:ac:76:
         57:e7:b8:bd:c8:98:40:1b:02:20:1d:ed:7c:02:d9:83:75:db:
         d5:dd:33:8c:d0:8c:53:17:2a:e7:56:1a:a6:01:54:ff:2d:41:
         07:06:0c:65:8e:72:bc:d4:c5:b7:32:c5:53:fd:a0:5e:93:bc:
         9d:f2:a6:f6:32:00:6a:5c:e5:23:33:7a:68:98:f3:4f:f3:01:
         a3:85:de:ab:3d:b1:d8:77:4b:58:8d:c9:cc:88:d1:cc:f2:82:
         8c:2b:b5:da:8c:fe:e3:2f:61:f4:33:02:6f:fc:3a:b2:70:18:
         8d:46:f5:33:00:24:ce:d7:7e:38:de:85:cd:ec:18:92:c6:c1:
         6a:41:6f:bd:73:42:28:fb:a6:13:f6:aa:08:b7:65:b4:54:4b:
         db:6d:84:be:e7:fe:de:7e:78:83:42:c9:ab:08:1f:69:1b:02:
         40:94:80:70:58:07:17:a2:9f:45:86:ce:34:80:c6:6d:29:df:
         29:6c:5d:6c:2f:3e:2e:40:c9:a0:be:5d:86:d8:fe:ed:c2:8b:
         22:f0:84:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:56:21 2024 by rpki-client on console-fra.rpki-client.org