Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2FFD1298AC5A11EDA8C03215C4F9AE02.roa
File:                     2FFD1298AC5A11EDA8C03215C4F9AE02.roa (raw, json)
Hash identifier:          zdM5AfitEYXmvcgAQ04ZFJNwCqPb/lRWlcehVslAcEk=
Subject key identifier:   C8:26:CB:56:10:A7:CC:70:A9:DA:B7:3F:FE:19:BD:41:ED:16:DB:A4
Certificate issuer:       /CN=A91912DD/serialNumber=DAE7508D11E47228DA1FE0032597BBD29F75890C
Certificate serial:       15B6
Authority key identifier: DA:E7:50:8D:11:E4:72:28:DA:1F:E0:03:25:97:BB:D2:9F:75:89:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2FFD1298AC5A11EDA8C03215C4F9AE02.roa
Signing time:             Sat 10 Feb 2024 17:14:53 +0000
ROA not before:           Sat 10 Feb 2024 17:14:53 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     41281
IP address blocks:        103.81.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.crl
                          rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 17:26:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5558 (0x15b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91912DD/serialNumber=DAE7508D11E47228DA1FE0032597BBD29F75890C
        Validity
            Not Before: Feb 10 17:14:53 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65c7af0d-5f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:37:03:04:eb:81:23:ac:11:9c:da:f6:22:7e:
                    6b:ba:b8:c7:d0:d8:22:e5:31:05:5e:f5:25:b9:8f:
                    6c:99:8f:80:68:13:9f:1e:2d:6b:a1:13:b1:c0:38:
                    b2:b8:e3:bd:b6:52:aa:85:61:1a:23:f8:23:01:dc:
                    21:fe:82:e0:df:28:c3:01:a7:4f:48:ea:d7:c7:43:
                    ff:69:8c:5f:cd:82:67:15:89:50:3a:96:18:d1:de:
                    ce:88:a6:be:75:00:b5:12:7c:25:88:41:e2:7d:4f:
                    52:af:44:9f:cd:bf:8c:b6:86:5c:3f:5e:b3:07:68:
                    66:88:2a:7e:04:79:16:25:d3:70:4e:23:1f:c1:b4:
                    68:d3:65:0a:8e:ed:76:68:80:db:00:a6:81:b1:d4:
                    9e:29:a2:bb:ce:e5:ba:ce:d1:cb:8b:21:1d:6b:ab:
                    31:5f:79:b8:f1:d3:6f:23:52:31:24:1f:0d:5e:d0:
                    0d:19:6d:a0:79:59:cd:90:de:9f:21:81:bc:09:ba:
                    73:cc:95:ce:a0:d2:0d:86:a9:f5:37:9b:11:fc:7a:
                    c2:ff:3c:bb:48:40:64:52:c1:85:61:b7:13:8e:bb:
                    92:6d:e1:8d:a3:c9:40:ed:a9:c3:2a:ec:c2:5a:19:
                    13:62:fb:61:76:97:4b:b7:cd:64:0c:28:27:b5:67:
                    82:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:26:CB:56:10:A7:CC:70:A9:DA:B7:3F:FE:19:BD:41:ED:16:DB:A4
            X509v3 Authority Key Identifier:
                keyid:DA:E7:50:8D:11:E4:72:28:DA:1F:E0:03:25:97:BB:D2:9F:75:89:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2FFD1298AC5A11EDA8C03215C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:df:5d:69:f5:04:5e:a5:39:c4:32:54:95:a9:38:dd:da:da:
         4b:27:ae:2f:20:d7:33:57:a4:22:73:6d:7e:21:c3:00:b0:61:
         fa:6e:b4:33:f2:0b:b6:56:1e:38:1e:b8:df:4b:66:1d:4d:47:
         35:3d:9b:5f:4f:85:a9:15:d5:5d:3c:a4:2c:fa:00:05:f9:0a:
         8b:e5:8b:a9:4e:63:c7:d1:0b:31:a4:45:99:28:22:2c:ea:80:
         d9:9e:7e:25:63:b0:66:11:c2:e3:11:0b:cf:0e:af:45:84:0d:
         6c:19:08:32:9d:d7:08:96:83:d3:16:a6:68:cf:aa:9a:d3:28:
         0f:74:ee:b0:bb:5b:26:27:e2:35:32:50:53:0d:e4:ff:87:ef:
         79:85:c7:34:bc:08:ff:81:45:be:3f:de:2c:a0:1d:58:46:c0:
         69:05:39:99:d8:a9:d9:f4:9b:9b:f3:e1:b0:02:ab:6d:01:4d:
         66:c9:25:ed:96:99:b2:55:23:7b:de:62:3d:b9:c2:13:19:4d:
         fa:92:24:94:26:ca:a8:64:25:12:9d:12:19:c4:0a:87:19:fd:
         33:2a:19:9c:a2:ee:b5:c4:c6:81:20:fe:81:de:8b:37:87:d9:
         39:fd:18:68:84:a9:9b:1d:b5:fa:b6:21:82:37:b1:f1:57:2f:
         b8:7a:d3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:34:08 2024 by rpki-client on console-ams.rpki-client.org