Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/763018B4D29811ED8CDDB83AC4F9AE02.roa
File:                     763018B4D29811ED8CDDB83AC4F9AE02.roa (raw, json)
Hash identifier:          kB/0ibOjCq9dbW0BRMR/SkO1yELJz7RuZWoFT7e9L1o=
Subject key identifier:   79:D5:FC:64:62:0E:4F:4D:75:6A:70:81:F0:C0:AF:74:59:B9:63:78
Certificate issuer:       /CN=A91EDADE/serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893
Certificate serial:       012F
Authority key identifier: A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/763018B4D29811ED8CDDB83AC4F9AE02.roa
Signing time:             Thu 07 Nov 2024 02:56:06 +0000
ROA not before:           Thu 07 Nov 2024 02:56:06 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     45352
IP address blocks:        58.84.40.0/22 maxlen: 22
                          58.84.40.0/24 maxlen: 24
                          58.84.41.0/24 maxlen: 24
                          58.84.42.0/24 maxlen: 24
                          58.84.43.0/24 maxlen: 24
                          103.197.56.0/22 maxlen: 22
                          103.197.56.0/24 maxlen: 24
                          103.197.57.0/24 maxlen: 24
                          103.197.58.0/24 maxlen: 24
                          103.197.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl
                          rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDADE/serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893
        Validity
            Not Before: Nov  7 02:56:06 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=672c2c46-3dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:14:d6:e6:87:38:a0:63:9a:02:8c:8b:93:62:
                    56:7b:da:fe:96:1e:39:30:7e:5a:ef:f4:1e:c7:f9:
                    6b:4e:fb:4d:df:a8:f6:0d:61:db:b5:c7:7f:c4:78:
                    fa:67:5b:aa:da:12:db:89:93:e4:3b:4c:0e:98:ba:
                    99:b9:12:d5:6e:46:7a:df:a1:52:86:34:32:90:cd:
                    0c:eb:55:13:b7:11:fe:6d:7e:74:0d:0d:d0:f1:c7:
                    c8:50:f3:d2:e7:78:93:38:d4:1c:ca:53:c6:d4:a0:
                    92:06:f0:a7:fa:de:2b:90:84:7a:2f:36:4e:7f:91:
                    6d:b4:58:4c:96:81:a3:5c:e2:1c:02:3b:5e:1a:3d:
                    cd:c2:05:1d:b1:31:d5:da:0b:20:27:97:04:b5:ab:
                    de:cb:d3:0a:ec:c8:23:7b:c1:19:61:ad:b5:6e:19:
                    9b:3e:d4:3d:66:63:ed:cd:0a:9e:14:53:05:df:2b:
                    fc:55:23:9f:e7:a6:ff:e9:f1:53:3c:7e:f3:cc:55:
                    a9:28:94:87:91:e3:f2:f8:a1:86:db:b0:0a:9e:e7:
                    58:3a:1a:4c:22:03:79:fb:60:17:11:0c:cc:85:b7:
                    b0:b4:2b:bc:aa:e9:98:a7:5e:dc:08:99:26:dc:07:
                    f6:bc:a9:66:d3:ce:97:18:9c:aa:71:a5:80:9b:95:
                    3f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D5:FC:64:62:0E:4F:4D:75:6A:70:81:F0:C0:AF:74:59:B9:63:78
            X509v3 Authority Key Identifier:
                keyid:A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/763018B4D29811ED8CDDB83AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.84.40.0/22
                  103.197.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:b1:e7:46:29:14:cd:89:71:04:b4:be:1f:18:8a:09:11:3f:
         b4:8d:51:9e:e9:6d:c8:19:0d:a9:e5:ad:a2:2e:4a:00:38:25:
         75:bd:7b:96:c4:c2:34:98:f5:b5:ed:fc:d0:9a:17:ad:74:4b:
         05:3d:57:15:b3:40:a1:c2:dd:6f:14:6e:dc:87:38:71:90:05:
         b3:95:e4:07:4a:80:90:dd:82:5d:11:5a:9a:05:be:b7:d5:e8:
         37:26:f4:3d:03:54:1e:15:d9:9a:ae:15:a0:e0:f9:20:30:49:
         f6:6e:c0:70:e2:bc:4a:f8:39:7d:b2:60:1c:df:03:99:ed:61:
         a7:3c:f5:44:d7:a6:c0:a0:9c:98:11:62:27:de:9c:ce:eb:bc:
         cd:07:2f:4d:69:9e:86:6a:46:31:60:69:e5:7e:21:6a:74:2d:
         2d:8f:a0:f4:13:a6:85:a1:e8:82:f8:e4:66:ae:14:a0:00:57:
         33:ac:02:7c:88:21:87:b9:8e:dc:d1:ed:c4:a9:e6:0c:44:32:
         27:f6:40:91:dc:5a:31:b7:57:01:7c:58:7d:96:26:97:29:72:
         53:64:f5:f8:b0:e7:9b:55:ed:aa:06:bf:9d:3a:97:b2:5b:e9:
         67:5d:d3:f2:74:24:52:81:b6:3f:af:93:52:b8:d4:6f:9c:d6:
         b6:8f:f2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:00 2024 by rpki-client on console-fra.rpki-client.org