Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/E91D4C42E19011EC8E1ECA75C4F9AE02.roa
File:                     E91D4C42E19011EC8E1ECA75C4F9AE02.roa (raw, json)
Hash identifier:          rXbrZfof91yb/Hm6bgo20zlM+XGL7dx/BaljKZMiBHc=
Subject key identifier:   E4:64:A8:F5:A0:02:66:4C:E7:6B:8D:3D:5D:FC:2D:EC:73:9E:64:49
Certificate issuer:       /CN=A9181259/serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93
Certificate serial:       0A55
Authority key identifier: B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/E91D4C42E19011EC8E1ECA75C4F9AE02.roa
Signing time:             Thu 30 May 2024 21:26:34 +0000
ROA not before:           Thu 30 May 2024 21:26:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     59353
IP address blocks:        103.230.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl
                          rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:19:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2645 (0xa55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181259/serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93
        Validity
            Not Before: May 30 21:26:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658ef0a-f367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8d:90:51:f3:07:af:ae:09:7e:59:16:2f:36:
                    03:7d:f6:23:a9:09:3f:81:3a:01:72:c7:81:60:4b:
                    b0:80:b4:86:61:52:01:11:99:70:4f:f1:d7:c8:8d:
                    7f:3e:27:4d:e5:84:8c:df:bb:43:22:d7:8a:f1:b2:
                    39:ca:07:c7:88:59:02:8e:af:cf:cc:f5:d3:09:3f:
                    cf:b1:fd:1e:bc:2d:3a:17:ac:23:3f:c9:1b:46:33:
                    44:ba:0c:14:5a:c1:52:d9:7b:05:79:6c:73:02:16:
                    05:fb:f8:b4:a7:0a:1a:ef:42:77:ef:0a:20:ba:41:
                    92:f6:4b:78:6f:ed:d6:03:b8:64:b6:3e:8f:f7:f2:
                    af:82:2a:3c:03:3a:65:7f:68:40:16:a0:ab:74:2b:
                    04:53:3e:1b:43:4c:a2:5f:80:86:73:6e:5c:5d:19:
                    71:2a:82:f7:49:11:04:64:44:13:ea:a1:f9:79:38:
                    15:9b:bb:e1:ef:50:34:0e:90:49:32:2b:1d:1f:ce:
                    3d:79:52:19:04:60:22:33:8b:c7:24:ab:07:48:62:
                    05:33:97:00:fd:40:08:a5:d6:32:2c:53:5a:db:6a:
                    d6:36:30:ce:ae:f2:9b:5c:79:d1:6f:2a:75:2b:2a:
                    4b:a2:ac:05:eb:b5:66:71:ca:2b:e4:19:d3:91:0e:
                    29:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:64:A8:F5:A0:02:66:4C:E7:6B:8D:3D:5D:FC:2D:EC:73:9E:64:49
            X509v3 Authority Key Identifier:
                keyid:B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/E91D4C42E19011EC8E1ECA75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:8e:dd:f3:fe:34:5e:1b:32:ad:2e:88:a6:b7:cd:41:05:70:
         12:74:ea:da:37:25:f8:3d:03:d4:df:ac:a4:28:e0:6c:cc:a7:
         3a:d6:f3:7b:2c:6a:26:00:0d:da:3d:43:73:56:a0:7b:f6:70:
         dd:85:05:d8:04:1f:d1:5d:9c:52:eb:02:7d:85:33:22:3d:c1:
         a2:0d:23:cd:d1:ac:fd:80:fd:08:c6:4a:0e:c6:c6:9a:09:fe:
         6b:a4:d6:34:eb:d5:b0:0c:a4:ef:ea:b2:d5:92:de:ce:8b:ad:
         29:7f:9c:e0:a3:d4:b9:07:a9:22:95:82:2e:7c:6b:b7:bb:db:
         05:17:5b:36:44:dc:59:54:f5:26:18:ae:e1:27:96:21:2a:9e:
         da:31:bf:0a:64:0a:e2:63:e8:3f:ce:97:f8:a7:92:c4:0b:74:
         31:47:0a:56:e7:ef:6b:e9:82:41:da:5c:26:ef:a6:4a:47:c8:
         46:7e:3a:e9:68:55:95:4e:e5:92:bc:ab:1d:08:dd:06:b8:80:
         20:89:0e:d3:a6:53:fd:94:e6:a2:3d:6a:e2:30:66:24:cb:cc:
         50:e7:91:71:6b:3c:8d:d0:01:f8:dc:45:40:00:18:9f:ec:9c:
         10:3b:4d:3d:ff:f5:a4:5c:55:81:35:12:87:c4:64:bc:c9:60:
         f0:12:4a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:33 2024 by rpki-client on console-ams.rpki-client.org