Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/3D93BEB65E6611EEA526DB11C4F9AE02.roa
File:                     3D93BEB65E6611EEA526DB11C4F9AE02.roa (raw, json)
Hash identifier:          RP0OxzWG7KYqc4R60tEcX5gGCkxkcJN3xWnhogApIVI=
Subject key identifier:   E1:1F:A7:2A:04:4D:97:64:63:42:A1:61:D8:C5:F7:33:7D:37:6E:60
Certificate issuer:       /CN=A91105F6/serialNumber=69C56E26D764F1AE4F468628E57531D3734AC027
Certificate serial:       B5
Authority key identifier: 69:C5:6E:26:D7:64:F1:AE:4F:46:86:28:E5:75:31:D3:73:4A:C0:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/3D93BEB65E6611EEA526DB11C4F9AE02.roa
Signing time:             Wed 17 Jan 2024 05:26:42 +0000
ROA not before:           Wed 17 Jan 2024 05:26:42 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     141400
IP address blocks:        163.233.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.crl
                          rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:33:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91105F6/serialNumber=69C56E26D764F1AE4F468628E57531D3734AC027
        Validity
            Not Before: Jan 17 05:26:42 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65a76511-b741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:38:d2:f6:26:c2:0a:1b:17:df:9d:cc:66:e1:
                    11:fb:0b:01:b0:d2:63:39:75:c7:a9:c4:12:4a:fc:
                    ba:00:d5:0d:e2:96:d5:cc:e4:31:5e:c3:ca:a9:00:
                    b2:7a:c0:82:27:a0:d3:a8:38:db:85:76:83:d2:2f:
                    bf:1e:59:94:88:4a:bb:51:3c:4e:6f:b2:0f:44:7a:
                    1f:fa:3c:8f:0d:21:50:9f:84:c7:f0:18:11:d9:b8:
                    92:d0:4a:04:24:36:ea:8f:02:59:05:24:5f:50:f8:
                    f7:33:80:a1:bb:8a:98:26:ee:61:b6:87:cf:f4:d5:
                    39:7f:b6:61:73:49:83:06:a1:37:6c:1c:ee:7a:0d:
                    06:19:22:55:fd:f8:c7:9e:c6:e1:f6:03:5b:5b:6b:
                    e0:80:6a:b0:bf:8c:8f:cf:66:02:5f:a4:25:5a:87:
                    ed:d4:de:6b:20:e1:03:33:bc:0b:68:b4:1b:1c:a8:
                    80:f7:74:90:e2:4e:10:d1:00:a0:b9:72:c3:12:ec:
                    64:e3:5f:d3:1e:90:18:67:fc:ba:25:d8:56:b9:b1:
                    bf:8b:56:6b:3a:cc:15:cb:e6:9f:d0:c5:0d:84:85:
                    72:86:13:2e:ab:df:5a:63:64:25:49:e1:2d:a9:04:
                    1d:76:c0:b0:13:e9:56:f7:25:8d:80:dc:f6:d4:ff:
                    9c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1F:A7:2A:04:4D:97:64:63:42:A1:61:D8:C5:F7:33:7D:37:6E:60
            X509v3 Authority Key Identifier:
                keyid:69:C5:6E:26:D7:64:F1:AE:4F:46:86:28:E5:75:31:D3:73:4A:C0:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/3D93BEB65E6611EEA526DB11C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.233.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         15:58:cd:6d:e8:e0:94:38:6b:70:89:da:aa:16:05:57:e0:1b:
         b4:e2:27:b4:d6:1a:4c:be:11:fa:51:9c:c8:02:87:02:e0:fb:
         33:d6:37:4c:a8:4f:fa:6d:63:06:91:81:5d:ed:3b:8d:6f:23:
         94:60:5e:61:72:41:fb:24:08:a0:71:6b:c7:25:bb:b2:63:0a:
         d5:f3:3e:67:e5:77:81:5d:bf:6d:b6:e6:3c:24:b4:7b:e4:f6:
         94:8d:16:d4:34:35:6f:5e:55:34:be:91:b4:01:d1:6a:9f:16:
         22:b7:1b:0a:a7:60:ad:db:1a:d0:1c:d4:fb:f4:82:66:cd:5d:
         06:cd:41:56:28:c1:f0:04:2b:d4:74:84:bb:88:20:93:5b:9e:
         1f:ce:f0:29:3a:2b:cd:d6:0b:d0:e2:cd:ff:25:73:bb:d8:d1:
         95:dc:a7:47:c2:ce:c3:0a:32:51:9b:cd:79:57:46:13:d5:c6:
         fd:fe:c9:6e:82:4b:9a:f2:6c:dc:67:70:9a:3c:4b:39:21:ae:
         40:75:bd:d9:5a:d3:e8:b9:b1:68:01:3d:86:20:74:00:db:05:
         d6:42:c4:0f:f2:d0:e3:64:85:ac:4a:dd:8c:9f:71:95:49:6a:
         8b:c5:a1:e5:2f:90:e3:6d:87:fd:fe:26:fb:a2:c1:fc:02:70:
         20:55:7c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:31 2024 by rpki-client on console-ams.rpki-client.org