Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/E7084A18E1FF11ED8291C918C4F9AE02.roa
File:                     E7084A18E1FF11ED8291C918C4F9AE02.roa (raw, json)
Hash identifier:          22WycCO2D6eQ7c9Ztptk+GoHCg5R5HirhILZQLigfu4=
Subject key identifier:   52:6A:D1:A0:60:0C:C8:90:2C:E8:B9:9C:76:C7:F2:CF:F2:11:40:6B
Certificate issuer:       /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
Certificate serial:       1467
Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/E7084A18E1FF11ED8291C918C4F9AE02.roa
Signing time:             Thu 02 May 2024 17:35:47 +0000
ROA not before:           Thu 02 May 2024 17:35:47 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     397702
IP address blocks:        103.114.190.0/24 maxlen: 24
                          103.114.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl
                          rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 16:50:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5223 (0x1467)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
        Validity
            Not Before: May  2 17:35:47 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6633cef2-6042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d9:6b:f0:f0:c6:f8:69:f9:41:e5:50:30:3d:
                    28:fa:07:3d:89:f6:04:6f:49:24:95:cd:9b:8e:c9:
                    a9:ca:f0:97:60:75:38:52:13:c9:61:cb:12:21:d3:
                    16:e1:4c:4d:78:e5:11:cb:bd:fe:ac:d0:0d:21:63:
                    37:73:65:5a:22:63:5d:4c:37:dd:cf:5e:16:15:95:
                    bb:34:e3:b3:9e:66:58:15:5c:72:c5:36:19:32:d0:
                    89:39:bd:f3:c8:a4:aa:3a:6f:63:b9:3e:37:c2:32:
                    02:5d:df:1b:9b:cb:5c:9b:c8:b5:4f:f1:59:a9:ac:
                    51:23:80:91:e0:63:82:83:b9:ee:98:fd:74:ec:27:
                    75:77:69:5b:22:87:97:d1:b1:0e:3b:95:ae:62:f9:
                    3c:55:be:b5:a2:5c:80:22:6c:c7:99:d0:f8:c0:df:
                    1e:e8:56:ad:16:01:56:38:52:6f:38:a6:8f:90:14:
                    11:91:df:ee:6b:c6:7b:7c:c2:0d:bb:88:a8:33:c2:
                    3d:92:bb:0d:d0:fb:29:8f:4c:54:0e:ca:ca:db:83:
                    8d:72:6b:fb:37:84:9c:5c:f6:45:55:37:3a:08:63:
                    78:0c:f4:1b:79:b9:da:22:26:b8:ed:13:84:5c:64:
                    91:72:81:cf:ff:91:b7:10:9b:08:52:3f:c0:11:1a:
                    67:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6A:D1:A0:60:0C:C8:90:2C:E8:B9:9C:76:C7:F2:CF:F2:11:40:6B
            X509v3 Authority Key Identifier:
                keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/E7084A18E1FF11ED8291C918C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:49:03:22:58:82:7f:85:ea:3e:d7:91:11:82:f5:b2:14:4c:
         c0:ba:82:9e:6e:bd:fc:3a:e1:d8:f4:9b:9b:89:ce:1c:6b:a7:
         a5:e9:00:46:b6:e9:6c:19:9d:0f:c7:55:3e:6d:6c:b3:4c:59:
         90:fe:d9:cf:9e:d1:ff:10:c9:df:cb:d2:c7:76:c6:0a:be:38:
         61:a1:ec:6d:fe:cb:87:10:90:4f:c8:f4:c8:e4:b2:2c:1e:4a:
         84:79:28:9d:19:cf:09:c2:46:c1:57:be:eb:82:4a:47:54:5d:
         43:18:01:c8:75:54:b1:ed:74:da:5b:0a:31:04:b1:e9:2b:76:
         41:97:73:6c:40:22:60:f3:ca:69:4d:38:cf:49:7a:94:7e:27:
         d6:07:06:7a:b1:7f:c7:87:f8:9d:cb:aa:3b:c3:ed:75:8b:66:
         97:10:dc:4e:fd:f2:7d:26:af:a5:ae:30:d4:d5:11:9b:db:c2:
         65:aa:f7:96:62:f4:4c:b0:32:92:08:95:82:a7:9f:41:75:a0:
         86:b7:7c:26:d9:36:47:ba:67:c6:cc:3c:b0:21:31:08:7d:0b:
         33:22:c3:b4:22:d4:13:c4:1c:fc:59:64:43:e7:b0:8a:0c:66:
         c8:9a:5e:48:30:02:5a:b3:b2:7c:cb:68:e5:41:f0:2f:59:f6:
         5c:94:45:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:45:08 2024 by rpki-client on console-fra.rpki-client.org