Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/E5817A58B8BE11ED83994B4AC4F9AE02.roa
File:                     E5817A58B8BE11ED83994B4AC4F9AE02.roa (raw, json)
Hash identifier:          wVHle4DHj+Xgjwwiq8R+NOE0g124bZkko55edUj9vKE=
Subject key identifier:   8C:D6:EC:D0:B5:91:72:A6:EB:D4:06:D8:0D:A9:1F:C8:9D:B3:3B:BF
Certificate issuer:       /CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
Certificate serial:       C2
Authority key identifier: 62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/E5817A58B8BE11ED83994B4AC4F9AE02.roa
Signing time:             Sun 03 Mar 2024 05:37:46 +0000
ROA not before:           Sun 03 Mar 2024 05:37:46 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     138572
IP address blocks:        103.80.170.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl
                          rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
        Validity
            Not Before: Mar  3 05:37:46 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65e40caa-2a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d0:e0:66:d4:38:4d:32:c0:b0:1a:fe:ed:3c:
                    74:41:f7:52:f4:f6:75:6f:9a:34:66:72:75:12:f3:
                    bf:ad:76:77:a2:db:db:7a:73:90:6a:7b:02:f9:07:
                    9e:b4:63:c8:d7:59:4f:ee:db:17:0a:2a:46:16:e0:
                    63:37:4f:59:4f:29:52:b8:55:12:dd:64:88:ae:d8:
                    51:6f:6b:8e:45:e0:23:50:fd:65:96:0a:41:e2:de:
                    80:99:3d:bc:b5:12:07:d4:11:e9:1e:fb:ba:84:1a:
                    0c:fa:0d:bb:d0:45:fe:72:e1:33:d7:5b:25:df:9e:
                    11:b3:fb:c8:28:f5:2e:27:fe:fb:46:51:3e:35:ab:
                    f0:f1:a5:60:68:21:26:96:a2:26:21:0f:7c:63:f1:
                    12:fd:c6:86:c9:02:00:94:6a:7d:86:a1:58:84:54:
                    f5:00:58:30:4f:54:09:af:74:ff:d6:15:29:d9:08:
                    82:c9:91:7d:22:f9:4d:fa:f1:28:df:35:18:8b:94:
                    aa:95:db:fc:d9:a4:44:10:60:b5:41:1e:7c:dd:65:
                    bf:72:2a:09:6e:53:ce:73:f9:9d:fb:96:bb:30:c4:
                    a9:98:02:22:f9:d4:b6:57:ef:be:bf:d1:5a:46:1b:
                    1c:7e:7b:b6:9e:ef:cc:52:fd:c1:de:50:24:a0:f3:
                    51:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D6:EC:D0:B5:91:72:A6:EB:D4:06:D8:0D:A9:1F:C8:9D:B3:3B:BF
            X509v3 Authority Key Identifier:
                keyid:62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/E5817A58B8BE11ED83994B4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:1b:c1:8d:82:fd:31:03:68:a6:54:45:7c:9a:5c:31:4b:2d:
         ea:0e:14:82:67:c1:43:77:76:bd:0e:a5:fd:c8:9e:64:42:67:
         f5:0b:c6:af:95:d6:9c:58:e1:9c:9b:ed:83:10:ee:01:9f:1d:
         33:cc:02:59:ad:8d:76:a6:64:b2:90:aa:68:c2:d2:92:75:f3:
         57:33:a3:35:10:26:bf:05:e6:1f:a9:ac:98:4d:42:6c:3d:7e:
         a5:47:7a:7c:dd:ca:25:01:e1:bc:91:d4:69:be:20:40:05:85:
         34:99:b8:23:a8:9c:38:c2:83:e7:71:59:82:77:f9:55:0d:f9:
         b6:24:12:35:55:71:f4:2b:cf:01:57:2d:5a:04:5b:90:7d:93:
         ef:54:59:f6:8b:7a:6a:49:90:2f:79:c4:ad:1a:62:ef:e6:4e:
         76:92:d4:00:13:19:eb:32:be:89:94:9d:75:41:7f:4f:c4:a7:
         ab:c4:f9:d4:9b:49:86:3e:54:80:96:b7:f8:51:65:19:32:94:
         cc:0e:14:6d:70:61:29:45:2b:dc:25:05:3b:ea:bd:c9:5b:fc:
         64:a9:af:a8:c8:20:bb:fb:30:e1:62:cc:76:a2:8a:4b:95:ba:
         50:ee:fc:5c:cb:1f:bc:8d:32:29:9b:ce:6e:86:b4:2d:a7:d2:
         ef:9c:d6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:46 2024 by rpki-client on console-fra.rpki-client.org