Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/0DFAD3529E1611E98059B049C4F9AE02.roa
File:                     0DFAD3529E1611E98059B049C4F9AE02.roa (raw, json)
Hash identifier:          v5QbolKjhNBzyr+duNW3NDbzWARV1KK0/NfSC41oYJs=
Subject key identifier:   01:96:A1:CB:FF:DD:46:B2:9A:31:E1:DB:C0:35:26:4A:DE:92:98:6F
Certificate issuer:       /CN=A919FEA1/serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194
Certificate serial:       0D35
Authority key identifier: EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/0DFAD3529E1611E98059B049C4F9AE02.roa
Signing time:             Wed 22 Nov 2023 18:26:22 +0000
ROA not before:           Wed 22 Nov 2023 18:26:22 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     59263
IP address blocks:        103.255.170.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl
                          rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3381 (0xd35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FEA1/serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194
        Validity
            Not Before: Nov 22 18:26:22 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=655e47ce-1906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:21:3d:2a:e0:29:e2:7f:33:9c:d0:95:79:a8:
                    11:a6:7e:50:b7:99:06:55:2f:1e:0e:3b:2a:3e:fa:
                    15:70:86:95:d3:9c:90:ba:e3:bf:a2:a1:ba:85:8a:
                    fc:a5:99:96:e0:a0:72:1c:fc:6b:de:38:f1:f8:5a:
                    23:30:ac:a3:cf:37:41:69:ce:d0:c9:a7:6a:0e:29:
                    74:ea:da:da:58:ad:c6:5e:86:fe:a9:7f:80:15:f1:
                    c0:fe:cf:46:69:5e:e6:8d:93:cf:84:ba:1d:f2:4a:
                    93:3b:23:22:b1:4b:7c:b1:b3:ad:34:4d:29:c1:3c:
                    2c:25:46:84:87:10:04:d6:7d:a1:db:92:35:74:92:
                    bd:65:93:d3:aa:0c:55:c9:65:e7:3c:a6:6e:74:c6:
                    b8:40:6b:10:9a:5f:11:c2:6a:b3:ac:ec:7f:e5:25:
                    c5:30:fb:cd:a2:5c:0b:a4:e0:9b:6e:a4:82:6c:d5:
                    b9:f9:f6:e1:a7:a3:d7:1d:25:22:28:4b:54:b4:41:
                    70:58:cf:01:e0:bc:d6:bf:58:28:1f:cb:60:a3:68:
                    ad:8b:64:ac:91:45:03:ef:d3:1a:4e:7e:cd:f4:a5:
                    8b:7b:dc:85:9a:eb:e5:dc:9d:82:0d:91:bf:01:c3:
                    5b:09:dc:e2:51:69:ab:4c:5a:62:77:61:79:6f:e9:
                    d1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:96:A1:CB:FF:DD:46:B2:9A:31:E1:DB:C0:35:26:4A:DE:92:98:6F
            X509v3 Authority Key Identifier:
                keyid:EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/0DFAD3529E1611E98059B049C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:27:5f:d4:ac:13:d9:22:51:0d:fc:6d:cd:f2:56:14:f6:c3:
         47:90:7b:ac:ca:31:7c:e2:55:91:bc:c5:5f:a7:6e:d0:f7:1e:
         b6:1d:07:6d:20:a4:d1:d8:f6:97:e4:f5:16:bf:6e:fb:2e:5d:
         ff:44:8b:71:ec:2c:3f:ec:0e:3b:8e:5a:bf:6f:ef:7b:fc:44:
         05:31:a8:2e:dd:fc:a5:b9:44:73:27:85:05:dc:24:7c:5d:ce:
         d8:85:c7:95:56:fd:9d:33:88:e5:c4:b2:56:a9:6d:dd:48:39:
         a5:60:16:dc:c2:44:de:de:38:fb:d3:67:ce:98:18:22:f8:1a:
         25:f4:c9:71:7e:a6:ab:a0:02:13:1b:f6:71:c0:f9:41:90:3c:
         61:78:25:dd:0d:e3:14:cf:10:ff:9c:d5:36:42:16:ff:e1:9a:
         18:9f:f7:f2:77:a0:99:68:35:62:e2:14:14:da:9d:d3:15:e8:
         4f:55:cc:9c:b7:d4:7f:89:72:eb:ec:af:33:51:ed:ce:8e:69:
         e9:ea:bc:b5:57:48:01:25:19:aa:a9:2b:11:64:dd:26:13:6f:
         fd:d1:2d:d1:15:21:c8:71:7d:c1:18:13:aa:08:c1:8c:f4:bd:
         14:2c:01:fa:d2:b9:23:05:e5:3a:b2:5f:ba:fd:b9:f6:76:db:
         5d:48:99:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org