Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/387532CEE46D11EE8DBC2937C4F9AE02.roa
File:                     387532CEE46D11EE8DBC2937C4F9AE02.roa (raw, json)
Hash identifier:          ruwggHNoAUFm9Chx4UGeH2/Ms9/ktBjyMv9b4cEeu5E=
Subject key identifier:   A9:29:0B:36:7B:E7:82:44:27:E5:D9:E8:3A:C4:B2:FE:05:EF:B6:39
Certificate issuer:       /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Certificate serial:       0538
Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/387532CEE46D11EE8DBC2937C4F9AE02.roa
Signing time:             Sat 13 Jul 2024 01:14:57 +0000
ROA not before:           Sat 13 Jul 2024 01:14:57 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     142127
IP address blocks:        103.151.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
                          rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1336 (0x538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
        Validity
            Not Before: Jul 13 01:14:57 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6691d511-3c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:3c:0f:04:c3:e6:35:88:7b:b1:cf:4f:1b:
                    7a:96:63:99:87:19:23:78:14:44:88:76:d1:be:30:
                    ba:66:00:fe:b2:1c:10:42:04:f5:7a:e2:ae:6e:c6:
                    99:4f:1d:25:0b:a0:3d:d7:c4:8f:c8:09:0e:88:c5:
                    10:17:33:b9:47:f9:5c:50:a2:df:2f:06:61:ab:c1:
                    20:c2:d7:b7:96:0b:d1:47:70:af:c9:54:13:11:30:
                    63:02:e9:c2:09:96:0e:21:66:d5:f3:69:87:ad:f9:
                    05:16:79:6d:30:ed:66:59:85:b3:7f:8e:a1:96:53:
                    cb:af:b8:1f:fd:1e:41:49:da:fe:67:f4:71:b0:e6:
                    86:62:b8:aa:0b:26:5f:b1:6e:0b:d9:b0:4e:7c:7c:
                    36:ed:ec:5c:2a:30:1b:9f:46:29:6d:f1:f4:8b:bb:
                    20:69:99:03:c9:a9:0e:76:94:af:24:08:c5:d1:8d:
                    49:5a:98:02:6b:53:2b:6f:39:d6:21:07:71:34:2d:
                    4c:47:5d:ae:3a:80:b9:d2:5f:89:f5:e7:1d:08:82:
                    6a:66:d4:79:61:d6:eb:c5:c1:ac:10:7c:40:c0:f8:
                    dc:7a:6b:f8:16:62:18:36:d7:c4:00:0a:28:c4:9b:
                    a3:e2:aa:f1:23:8a:7e:58:34:25:c8:06:4b:8a:a9:
                    50:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:29:0B:36:7B:E7:82:44:27:E5:D9:E8:3A:C4:B2:FE:05:EF:B6:39
            X509v3 Authority Key Identifier:
                keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/387532CEE46D11EE8DBC2937C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:4b:20:f6:e5:7f:ec:8c:ae:71:8d:04:02:e5:58:c6:9d:3c:
         06:c5:80:01:93:d5:ee:fb:02:2d:b7:aa:ba:2f:e1:43:f8:1a:
         ef:86:d0:cb:7f:fe:3c:92:f8:12:8b:65:33:ea:f5:2c:9c:6e:
         ba:3a:ab:c7:e6:fe:b3:be:a0:3a:3b:9c:48:b1:22:fc:3a:0e:
         44:c4:15:cc:96:b6:22:e1:51:28:fa:de:62:fe:78:7e:a8:7c:
         75:ac:49:4f:54:49:6a:37:10:27:15:0c:75:4d:f7:d8:20:5e:
         19:3a:4a:d8:45:a9:6d:e7:89:ee:79:6a:3c:e7:fb:26:ba:a3:
         a4:4f:7a:83:f5:f2:26:2a:37:4a:c8:75:2f:9f:0b:13:82:3b:
         2d:e3:21:92:13:ae:7a:95:3d:41:c6:9d:6a:ef:5f:a2:26:42:
         9c:5a:b7:da:e6:e9:f4:89:f7:58:04:53:81:48:a6:c9:44:94:
         6b:6c:a0:21:34:0e:74:8b:57:83:d8:f6:a6:56:10:7b:a4:6a:
         3d:e1:92:1d:47:a4:02:66:4d:51:94:1c:78:ac:ae:f9:15:cc:
         c0:a4:8a:56:80:bc:2c:96:61:c7:ee:f6:d0:c6:ec:58:15:e6:
         ff:ef:c8:ed:2e:a4:5e:d6:0b:d9:82:bf:c3:7f:c2:3f:4a:4b:
         fd:72:1b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:30 2024 by rpki-client on console-fra.rpki-client.org