Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/F696F52C8C7311EF995EA751C4F9AE02.roa
File:                     F696F52C8C7311EF995EA751C4F9AE02.roa (raw, json)
Hash identifier:          +xX9dK06mt7FZ9rZ/AJGfib2jU/nTKYDpNjOLCFKHSE=
Subject key identifier:   3A:AD:D3:D3:51:2D:DB:12:ED:5C:C6:32:82:DB:BD:1A:9B:D6:87:75
Certificate issuer:       /CN=A91F2364/serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2
Certificate serial:       0F
Authority key identifier: 47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/F696F52C8C7311EF995EA751C4F9AE02.roa
Signing time:             Thu 17 Oct 2024 10:38:36 +0000
ROA not before:           Thu 17 Oct 2024 10:38:36 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     932
IP address blocks:        103.224.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl
                          rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2364/serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2
        Validity
            Not Before: Oct 17 10:38:36 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=6710e92c-7dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:23:6e:07:ea:97:ac:d4:c6:ef:cf:d1:3c:fb:
                    1e:b8:5a:94:45:1d:19:40:30:93:80:63:23:74:d1:
                    ab:bc:94:0c:bf:4e:52:9b:81:69:8d:6c:82:51:b7:
                    28:a4:e7:6f:f7:25:fc:de:6f:a1:a3:59:e9:3b:94:
                    13:8f:c9:d0:57:35:c1:eb:d0:4e:3d:e8:de:ee:9f:
                    b8:bf:8e:97:c0:22:81:a0:cf:83:f8:d0:6a:8e:b3:
                    fa:2f:69:2e:7a:e4:4a:ef:fc:6b:0f:2c:2c:2f:82:
                    3d:00:90:77:89:ba:78:31:6b:5a:99:72:75:4f:62:
                    d0:c0:a1:ac:50:60:14:9a:75:c3:54:bf:f0:b8:8c:
                    49:ed:3a:b4:9b:0c:5f:2c:49:96:e5:f7:4c:1e:6f:
                    9d:2d:a6:a1:c2:56:ac:d8:c4:43:cb:f3:ff:d9:12:
                    48:ae:62:bb:a3:e2:b8:49:08:da:69:3b:67:40:1f:
                    70:ca:f4:34:35:0a:74:9f:60:90:49:4b:9a:36:d1:
                    d5:5a:56:2a:14:ed:3b:30:aa:f0:98:ea:f5:62:77:
                    12:73:17:eb:f3:9e:ea:00:a6:6d:8f:2d:ee:28:4d:
                    2c:63:32:de:5a:a9:8f:c2:f3:ef:51:7d:c5:a1:71:
                    0d:bd:68:37:ca:13:43:51:00:09:25:29:3a:1c:0e:
                    56:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AD:D3:D3:51:2D:DB:12:ED:5C:C6:32:82:DB:BD:1A:9B:D6:87:75
            X509v3 Authority Key Identifier:
                keyid:47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/F696F52C8C7311EF995EA751C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:63:4f:83:7e:57:1f:50:2b:41:40:84:13:62:13:d0:08:45:
         74:d8:d0:3b:f3:2e:ad:51:d6:ff:e0:ae:66:af:cc:ac:6b:59:
         73:5f:50:0d:2c:fd:53:06:18:e3:9e:8c:ec:7a:ac:0f:49:db:
         a1:bb:b4:13:cd:de:66:ac:e4:87:7e:9a:99:7a:9b:5d:51:ea:
         f1:11:65:15:18:28:e7:65:d6:c3:44:4d:36:c6:ae:55:a8:a5:
         06:58:52:86:a6:1b:43:b0:31:60:17:3d:dc:6c:a7:fa:24:2f:
         75:89:4f:2a:b8:7f:67:7c:87:61:48:0d:73:8d:02:bd:05:2b:
         6b:f7:4f:e2:cc:4c:eb:63:30:ed:81:6a:25:c1:61:5e:07:cb:
         ae:be:98:83:48:47:89:5c:fb:a2:01:78:61:b2:77:15:61:41:
         97:89:ff:e8:02:ce:6e:22:da:e4:a0:a8:80:57:d8:ac:77:61:
         48:6e:5a:ec:02:37:75:cc:03:1d:d2:77:6b:bb:ad:fe:b9:7b:
         23:8a:04:00:7f:b5:bb:94:ec:20:a6:7a:2b:bd:cb:85:17:f9:
         f9:69:4d:2b:0f:e2:58:30:54:eb:a3:39:9f:e6:da:bc:d2:f1:
         48:f0:3b:18:60:65:bd:06:ce:dc:c0:4e:23:5b:41:2b:38:81:
         ad:6a:c1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:45:06 2024 by rpki-client on console-ams.rpki-client.org