Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/5ABF5FB0026911EBB480261FC4F9AE02.roa
File:                     5ABF5FB0026911EBB480261FC4F9AE02.roa (raw, json)
Hash identifier:          f+tqP307alHmtL4Nv8/Sj5RxK8BZomyv0PqPMhlVuTE=
Subject key identifier:   66:C0:91:E9:91:F5:90:59:2A:2D:8F:57:2E:6F:57:14:BF:E6:FC:CB
Certificate issuer:       /CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B
Certificate serial:       0701
Authority key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/5ABF5FB0026911EBB480261FC4F9AE02.roa
Signing time:             Tue 02 Jul 2024 22:29:46 +0000
ROA not before:           Tue 02 Jul 2024 22:29:46 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     140698
IP address blocks:        103.151.250.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl
                          rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1793 (0x701)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B
        Validity
            Not Before: Jul  2 22:29:46 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66847f59-8095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:84:ea:b4:bd:f4:53:bb:eb:12:f5:6e:f4:ce:
                    b0:4c:0a:78:6d:6c:67:09:c6:e8:bb:f4:2a:ec:0f:
                    e3:9b:f5:af:cc:97:66:19:aa:cc:b3:2b:ac:a3:12:
                    5a:5f:21:b6:ed:07:57:21:be:41:71:be:1d:cf:d7:
                    79:59:d4:90:49:71:5c:04:cd:4e:c3:cb:b4:5a:d8:
                    32:5c:26:20:59:61:76:90:d0:63:fa:ab:33:0f:4d:
                    6c:03:b4:c7:73:ea:07:2c:25:ed:a6:76:d5:9d:d5:
                    c4:c4:7c:6c:71:c2:19:41:df:bc:8d:30:ee:d5:99:
                    df:bc:05:be:9d:7e:c7:9d:aa:73:7c:39:22:20:46:
                    ac:80:8b:2c:c8:ce:5a:94:a6:2d:b4:a6:32:ff:67:
                    f3:04:f9:e4:5f:88:62:21:85:44:42:a1:04:fa:6d:
                    5e:84:14:51:4c:e5:f5:2e:53:24:ab:69:a9:7f:d1:
                    17:56:66:29:db:7d:30:c9:f9:e6:d4:c3:a7:fd:47:
                    2d:71:cc:7f:14:0b:a4:21:f7:44:7d:f8:96:a4:8b:
                    56:7d:2d:c0:20:32:0a:bb:b9:6e:ad:10:e3:2d:8b:
                    45:1f:f0:ee:65:bd:b2:14:29:7d:6e:de:be:aa:2c:
                    d1:1b:a1:9e:63:1e:7b:55:f3:9f:73:f6:a4:94:82:
                    c6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C0:91:E9:91:F5:90:59:2A:2D:8F:57:2E:6F:57:14:BF:E6:FC:CB
            X509v3 Authority Key Identifier:
                keyid:9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/5ABF5FB0026911EBB480261FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:32:75:f4:ad:81:62:28:d7:db:02:d4:84:20:cc:15:97:57:
         94:7b:49:f4:74:64:e6:a1:b2:14:82:2d:6a:5f:b3:fc:ac:df:
         df:08:a3:23:b5:46:ad:aa:e2:f2:1c:e3:bb:61:df:24:b4:be:
         95:1d:06:80:b4:b7:cd:2a:fd:9b:ce:f5:9a:63:d0:c2:45:7f:
         bd:58:ac:4e:41:66:ba:bb:b3:00:bd:ed:01:22:b8:13:96:03:
         56:6a:3e:1d:83:eb:c9:f6:cc:81:58:1c:dd:84:9a:20:47:78:
         43:9d:62:04:64:90:fe:82:3a:29:e9:3d:09:2e:bf:bc:5d:1c:
         e9:8e:b1:f2:aa:d7:f2:b1:1f:23:e6:9a:95:80:f6:e6:12:17:
         9e:e0:3b:da:1e:4b:76:77:d8:df:be:79:39:a6:43:ff:c4:13:
         ce:f7:7f:4c:64:cf:c5:1c:95:61:3b:35:48:ff:ae:49:20:89:
         05:50:33:63:40:eb:80:9a:02:82:b0:b8:c2:c0:92:e0:67:cc:
         c9:1b:0f:3b:3c:c6:96:b4:be:22:3b:af:1f:ee:d2:d1:bd:e8:
         fc:d6:6f:2e:64:a9:12:69:2e:3d:66:4e:ff:ca:e9:03:27:00:
         1a:8d:54:ed:38:79:43:95:9f:ea:af:3a:d2:52:43:f5:47:43:
         e1:78:48:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:08 2024 by rpki-client on console-fra.rpki-client.org