Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/87BCB892503311EB85660C6AC4F9AE02.roa
File:                     87BCB892503311EB85660C6AC4F9AE02.roa (raw, json)
Hash identifier:          dyTYw+hWmz+HO+6oA8+K+pAgO2H1Op7aBkzuxVkbyTk=
Subject key identifier:   D8:42:3F:AD:55:4A:D1:98:25:C6:9A:B1:10:33:19:6C:5F:48:30:1C
Certificate issuer:       /CN=A911018B/serialNumber=15371EEA2AA2EA7DACD0D756BD29859201E54D25
Certificate serial:       061E
Authority key identifier: 15:37:1E:EA:2A:A2:EA:7D:AC:D0:D7:56:BD:29:85:92:01:E5:4D:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTce6iqi6n2s0NdWvSmFkgHlTSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/87BCB892503311EB85660C6AC4F9AE02.roa
Signing time:             Thu 28 Dec 2023 23:21:27 +0000
ROA not before:           Thu 28 Dec 2023 23:21:27 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     141443
IP address blocks:        103.159.130.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.crl
                          rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTce6iqi6n2s0NdWvSmFkgHlTSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1566 (0x61e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911018B/serialNumber=15371EEA2AA2EA7DACD0D756BD29859201E54D25
        Validity
            Not Before: Dec 28 23:21:27 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658e02f6-da84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a9:36:ec:a6:c9:29:04:e7:98:a4:ef:59:0d:
                    f3:fe:a0:3f:08:5b:51:13:44:f9:a2:40:5a:d1:cf:
                    d4:0d:bf:b9:55:b8:41:03:63:d9:be:82:b0:57:df:
                    a8:90:70:68:00:19:49:d4:0e:aa:4b:b4:2a:75:5e:
                    77:07:8a:2e:e8:64:7c:1a:ad:37:f5:7f:78:64:6e:
                    ee:97:0b:3d:29:17:5c:cc:bf:75:33:19:26:88:2a:
                    1b:68:0f:88:0b:9c:92:f2:31:f1:95:69:52:d8:e5:
                    67:0a:c3:2c:bd:dc:4c:9a:c4:d5:5a:03:ac:6c:52:
                    9b:2d:e5:d9:80:9f:dc:a3:b0:8c:25:b2:41:41:c6:
                    44:b1:be:b7:ea:86:e3:61:00:f4:1a:ec:00:61:74:
                    a6:d1:da:6f:ee:48:9d:81:3f:d0:1d:2e:e7:da:3a:
                    b1:45:76:6f:e9:2f:a2:4d:ff:ae:bb:05:a1:d7:df:
                    68:57:dc:4d:0f:a7:0e:ee:2b:29:3a:42:0b:15:50:
                    f4:ae:40:09:9b:16:89:9a:f5:a1:d0:46:af:2f:bd:
                    89:fc:90:73:5a:66:08:d7:b6:88:44:7a:3f:9e:63:
                    f6:93:db:86:54:fd:bd:ad:c9:c8:d6:01:d9:38:b3:
                    3c:d2:82:99:fe:2f:df:ec:cc:77:78:c4:ef:da:45:
                    c4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:42:3F:AD:55:4A:D1:98:25:C6:9A:B1:10:33:19:6C:5F:48:30:1C
            X509v3 Authority Key Identifier:
                keyid:15:37:1E:EA:2A:A2:EA:7D:AC:D0:D7:56:BD:29:85:92:01:E5:4D:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTce6iqi6n2s0NdWvSmFkgHlTSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/87BCB892503311EB85660C6AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:02:3d:82:02:c4:20:1a:ed:0a:4c:1a:a3:ca:fe:5f:8d:53:
         bd:3f:79:aa:9c:65:46:24:bc:2d:9c:ce:cc:75:5e:20:18:c9:
         a7:29:9b:12:41:89:a4:1f:3e:30:2c:0b:9a:fb:59:85:04:7b:
         b2:7c:6e:05:79:97:d9:09:38:ee:73:c7:fb:cf:af:3a:c3:4b:
         bd:bb:cd:81:78:39:30:5f:05:7b:a3:85:15:d4:df:02:d0:9c:
         94:ff:f1:06:09:85:af:a1:ce:0e:3b:d1:23:c4:e9:8c:e8:51:
         de:f4:2c:1a:8a:9e:7d:2f:9b:36:4f:ba:33:6e:29:78:58:e4:
         1b:4e:41:d0:2e:ae:86:16:bb:e2:13:da:89:76:ea:71:c0:72:
         f4:6c:f5:6b:41:58:3a:51:2c:38:12:bf:23:f4:1a:de:da:44:
         19:6b:dd:8a:37:c8:a2:a1:1f:46:56:18:5f:de:12:57:66:24:
         a4:7c:4f:24:20:c5:dc:4f:09:64:b0:2c:9d:3d:62:21:df:57:
         c1:b6:9b:34:d8:41:53:5a:c4:0b:66:1c:df:5b:9f:95:a3:cb:
         2c:7c:84:ab:6e:8f:c4:0f:2b:2c:5a:9a:cd:d8:d1:e6:f6:89:
         a5:b0:cf:14:a0:c7:55:40:13:9f:f8:b6:0f:f9:17:91:fd:0b:
         8e:96:63:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:34 2024 by rpki-client on console-ams.rpki-client.org