Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/58C1F4C06E2211EE98839C33C4F9AE02.roa
File:                     58C1F4C06E2211EE98839C33C4F9AE02.roa (raw, json)
Hash identifier:          tAPnoChFxayj3sOleAf7GWowIwnddYBCkzyBT4c54zo=
Subject key identifier:   BA:CB:9D:99:7D:10:83:A1:50:DD:30:A5:C0:85:0A:B8:91:93:12:CE
Certificate issuer:       /CN=A9158877/serialNumber=A3B16481B5D6C179FC0B73AE1E0E53DE967641DC
Certificate serial:       0482
Authority key identifier: A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/58C1F4C06E2211EE98839C33C4F9AE02.roa
Signing time:             Thu 19 Oct 2023 01:53:49 +0000
ROA not before:           Thu 19 Oct 2023 01:53:49 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     1221
IP address blocks:        103.167.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl
                          rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 02:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1154 (0x482)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158877/serialNumber=A3B16481B5D6C179FC0B73AE1E0E53DE967641DC
        Validity
            Not Before: Oct 19 01:53:49 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=65308c2d-5d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a5:ae:5e:44:6f:bf:b7:73:33:47:3f:f5:9e:
                    2f:46:b9:3d:63:f8:83:32:cb:f2:39:ed:f6:45:14:
                    fe:a5:f9:1e:34:ad:ce:47:41:55:12:27:20:be:88:
                    b9:13:f7:1a:f5:98:f4:2b:da:7e:bb:88:12:8c:8e:
                    c3:52:5a:9d:d4:38:62:be:7a:8a:33:e3:9f:82:24:
                    88:a8:96:87:4f:50:cb:37:63:eb:e1:d8:50:3f:fb:
                    d2:c9:57:06:d1:05:b3:81:7c:20:24:bb:5d:33:08:
                    bb:02:12:34:6a:0f:20:89:e0:6c:41:58:d1:6c:5b:
                    6b:b4:53:85:a9:93:eb:eb:30:19:f4:e8:79:d3:7c:
                    6e:14:ba:b9:08:ec:3d:54:ff:95:bf:90:11:4c:ed:
                    a6:2c:45:fe:58:66:ed:d7:e6:43:79:67:82:17:87:
                    08:7e:ea:58:48:03:3a:2e:ed:55:d2:c6:13:08:03:
                    28:6d:25:05:41:43:43:fc:97:dd:8e:e0:fb:75:c0:
                    47:18:49:4c:2f:56:75:02:0b:cd:00:0a:c1:68:b7:
                    9a:0d:20:7f:fe:17:f9:cd:85:d9:ff:b3:42:07:07:
                    15:e0:fa:97:b5:27:33:13:24:3c:e5:3e:8f:e9:4a:
                    81:ce:ea:97:75:10:a7:80:86:12:31:d4:5c:f6:4e:
                    77:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CB:9D:99:7D:10:83:A1:50:DD:30:A5:C0:85:0A:B8:91:93:12:CE
            X509v3 Authority Key Identifier:
                keyid:A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/58C1F4C06E2211EE98839C33C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:1f:4f:28:8e:45:9e:c0:e9:63:ce:4e:39:a9:25:c5:d2:6e:
         98:94:fa:05:3e:9e:f9:21:6a:7b:a1:51:85:92:5d:bb:a1:3b:
         23:0c:47:c4:4d:01:2b:66:53:30:58:4e:f1:fd:25:cb:fe:80:
         2f:87:43:6c:9f:50:6e:e3:63:9c:c3:84:38:87:6e:b0:40:ab:
         d1:34:a2:bb:5b:e1:b7:e2:87:01:4a:4b:9e:b8:d9:9f:5b:48:
         3c:6f:76:18:02:d7:71:19:cb:68:ce:44:60:0b:32:26:60:b6:
         3e:46:4e:ee:31:b8:5e:1f:b8:39:cf:f9:c2:e7:a1:69:5e:41:
         e2:b9:cd:50:f5:ef:1d:0f:7b:6c:91:e1:e7:3f:94:a9:b4:55:
         4d:09:9f:4b:27:d3:64:8b:d2:0a:8a:92:10:91:6c:d8:4d:59:
         0f:80:ae:90:bd:ef:a7:16:39:b0:21:fd:92:7c:0e:25:81:40:
         27:9e:28:a0:8b:82:36:a2:02:d8:43:a5:a5:af:6f:11:7f:29:
         e5:5d:5c:fd:a9:f4:3b:ea:52:c0:94:e0:95:26:e5:b6:4e:6c:
         b4:0e:14:4b:a2:eb:f6:ef:35:ff:41:99:6f:cc:ea:25:ba:f3:
         92:f3:d0:81:df:3e:1f:6a:e2:67:76:87:85:3b:25:d5:24:b0:
         39:b8:25:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:55:16 2024 by rpki-client on console-fra.rpki-client.org