Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/33FF50C6601611ED894DD02FC4F9AE02.roa
File:                     33FF50C6601611ED894DD02FC4F9AE02.roa (raw, json)
Hash identifier:          Aau/lAVFBQSjfKYJocyqGtnZDvR4wa/EhBEq8CNCLyU=
Subject key identifier:   EB:84:DD:78:7A:30:52:48:7B:5B:DD:79:36:D2:04:59:33:C7:38:30
Certificate issuer:       /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD
Certificate serial:       0BE2
Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/33FF50C6601611ED894DD02FC4F9AE02.roa
Signing time:             Sat 04 May 2024 19:57:56 +0000
ROA not before:           Sat 04 May 2024 19:57:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     139053
IP address blocks:        103.214.82.0/24 maxlen: 24
                          103.214.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl
                          rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3042 (0xbe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD
        Validity
            Not Before: May  4 19:57:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66369343-7e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:4d:a7:53:16:50:99:b8:44:19:0e:75:f1:
                    6d:a3:1a:95:9c:14:86:fa:c6:ed:e9:b6:c2:fa:1e:
                    54:6a:04:42:86:24:61:e2:8c:07:2b:63:30:40:fc:
                    87:d3:86:1d:47:6d:a4:d6:ef:ff:cc:b6:be:26:2d:
                    9a:c4:1a:18:87:1c:5c:f4:ce:02:38:60:19:a7:b6:
                    78:36:df:1c:7f:23:42:0b:5d:19:86:eb:81:0f:2d:
                    04:cc:ad:b6:e4:5d:76:ce:03:7d:b8:5c:00:00:f3:
                    02:8a:5f:17:af:4a:32:4a:2a:53:bd:b5:2a:1b:9f:
                    c3:f7:a1:3f:0b:32:35:74:76:10:32:b1:10:d7:67:
                    73:2a:50:42:e9:a0:70:03:4d:a6:3a:80:1b:28:9f:
                    41:bd:cb:24:97:30:c0:54:bc:b1:0b:10:6f:8a:b1:
                    e6:5a:dc:7e:59:e0:bd:97:6d:71:1e:6a:57:eb:b0:
                    27:f4:11:07:d1:df:0c:cc:a9:6d:4a:e3:ab:b9:e0:
                    fc:0a:91:63:f5:90:cd:2c:73:ae:10:97:8c:62:1b:
                    b1:dc:8b:da:43:87:5b:fa:3a:6e:a2:d1:e1:c8:8d:
                    f7:5b:cf:95:f6:d9:9a:80:77:98:f2:86:9d:f0:27:
                    3a:11:be:c4:08:8c:c8:10:c9:22:77:1d:48:2c:ff:
                    72:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:84:DD:78:7A:30:52:48:7B:5B:DD:79:36:D2:04:59:33:C7:38:30
            X509v3 Authority Key Identifier:
                keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/33FF50C6601611ED894DD02FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:e5:20:b3:e1:25:13:e0:5b:d2:ea:0c:8a:68:e1:f9:79:28:
         86:b9:4f:63:cf:45:22:98:d0:f8:ae:c1:bc:48:a9:82:2f:fa:
         5a:0c:3e:ca:ec:60:88:f6:ff:d9:8b:b6:15:5e:40:d4:02:c4:
         a3:df:8a:10:7c:f3:80:0b:ce:7d:f9:e5:f1:e3:71:55:47:1a:
         a6:9c:ab:f8:75:a5:df:d2:50:a5:08:15:6e:2c:e9:80:c0:7c:
         47:b4:86:ea:13:5f:cc:3b:f9:09:bd:f0:92:7a:df:98:ab:67:
         94:ae:dd:31:76:c2:9e:c2:6f:21:b2:0e:24:88:db:fb:b4:32:
         be:d2:1a:f9:29:47:16:70:29:88:96:bc:a8:cf:4c:ca:00:96:
         0c:07:5c:b5:96:d1:d0:1a:fb:15:10:29:53:86:33:d4:c7:fa:
         c7:47:2d:b7:aa:b7:44:63:98:98:d9:4f:9f:55:f2:9d:90:14:
         80:5a:fa:49:67:6d:ac:88:2e:80:51:51:a5:21:12:c3:f9:f2:
         fd:f6:93:78:4e:e2:22:b0:c6:9f:93:e4:e7:49:1e:e0:ba:74:
         a6:e7:68:7b:93:74:05:c4:52:a9:b4:72:d6:16:c7:ca:14:53:
         2e:ee:2d:b2:58:d1:6c:de:da:56:ce:33:de:9d:66:8c:4a:8a:
         a8:dd:4b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 20:45:25 2024 by rpki-client on console-ams.rpki-client.org