Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/065737305C9511EDABB9FA49C4F9AE02.roa
File:                     065737305C9511EDABB9FA49C4F9AE02.roa (raw, json)
Hash identifier:          A8fyC9uXabeEBw+br5m/fOOprlHijT/2fFIlwKoMBqg=
Subject key identifier:   E7:73:8A:BC:4F:C7:01:A8:3A:71:48:40:AE:F2:96:22:3D:A7:93:D8
Certificate issuer:       /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
Certificate serial:       1464
Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/065737305C9511EDABB9FA49C4F9AE02.roa
Signing time:             Thu 02 May 2024 17:35:44 +0000
ROA not before:           Thu 02 May 2024 17:35:44 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     1002
IP address blocks:        103.114.190.0/24 maxlen: 24
                          103.114.191.0/24 maxlen: 24
                          2402:d240:1776::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl
                          rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 16:50:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5220 (0x1464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
        Validity
            Not Before: May  2 17:35:44 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6633cef0-7142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cf:79:90:3d:d1:00:b4:ea:aa:41:bf:e9:7e:
                    29:2e:aa:0e:fa:db:08:47:10:92:ab:97:8f:61:51:
                    ad:7a:d7:bb:d4:79:10:0e:8f:44:11:d1:13:4f:e8:
                    ea:bb:d1:a6:0f:76:1e:80:70:83:5a:fb:9b:c8:9f:
                    44:c6:18:64:a3:de:97:a3:d3:1e:7c:3b:e8:2a:33:
                    de:fd:1f:74:3d:ed:c1:85:36:3a:6d:b1:1d:a7:ce:
                    1d:24:2d:9b:8c:24:3a:52:b5:6e:ae:ef:6f:3a:b4:
                    39:55:2a:26:81:25:21:5b:ce:77:a4:32:b7:e6:75:
                    95:27:2e:c1:e6:95:29:f7:93:d6:85:00:de:a4:08:
                    00:74:8b:17:06:b1:b6:28:aa:d8:c7:c8:6b:19:41:
                    cd:f8:a4:db:84:a2:10:00:f2:7f:73:7a:18:d2:fb:
                    d7:27:09:c4:d6:5f:47:b4:12:86:e7:e7:b7:03:ae:
                    60:8c:3f:eb:02:33:15:35:e8:25:de:7b:35:83:50:
                    df:ae:d9:19:30:67:95:0b:a7:92:5c:ed:c6:1b:0e:
                    f0:39:a6:62:0c:01:1b:a7:bc:af:b5:00:aa:08:33:
                    d9:c5:75:ed:37:b2:96:d2:e7:62:d1:1c:ff:3b:fa:
                    48:61:4e:bb:36:0b:29:7f:92:be:2e:06:9f:c7:e0:
                    2f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:73:8A:BC:4F:C7:01:A8:3A:71:48:40:AE:F2:96:22:3D:A7:93:D8
            X509v3 Authority Key Identifier:
                keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/065737305C9511EDABB9FA49C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.190.0/23
                IPv6:
                  2402:d240:1776::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:7e:f6:1e:24:6f:d5:d3:75:66:eb:5d:8b:76:a8:9e:be:f6:
         c6:c9:d4:92:8e:be:43:78:06:89:6f:dc:c8:a2:79:da:a6:82:
         c4:10:ec:fe:76:17:4c:be:3e:b9:10:ea:18:ef:32:af:05:99:
         81:d7:ae:59:61:6d:d7:98:69:22:56:0d:9e:f3:7e:71:24:d3:
         93:a0:7c:d5:4a:af:3b:79:c0:20:f7:34:98:21:17:6a:b0:5f:
         32:77:ae:18:ef:fc:66:0a:8e:d5:06:d1:4c:f2:12:2a:85:73:
         d8:b6:a6:1e:eb:e2:01:e9:8f:a8:20:47:18:98:b6:15:fe:9d:
         50:f7:a8:23:f1:0e:14:5b:a8:84:f4:09:4a:43:2b:fe:26:c8:
         de:3f:05:b8:8d:c6:7f:e0:3d:d7:97:a4:bd:54:15:be:2f:07:
         db:68:cc:c7:4f:c6:cb:93:b3:07:81:2c:37:43:26:cd:a7:da:
         91:e7:50:09:7d:9e:e2:1a:25:af:18:bd:ce:d1:67:78:c6:77:
         8c:d6:ba:77:e5:70:f3:92:56:3c:70:b7:ed:38:ae:1c:db:5c:
         16:f8:26:b7:27:02:40:af:3c:77:e5:76:ac:fe:7a:9d:28:a2:
         e1:c0:09:34:14:14:f6:af:a6:d1:e9:63:82:76:93:ea:d9:f1:
         02:1e:eb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:45:08 2024 by rpki-client on console-fra.rpki-client.org