Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/A3205106142511EB8FED0427C4F9AE02.roa
File:                     A3205106142511EB8FED0427C4F9AE02.roa (raw, json)
Hash identifier:          VDZMZq0ravcenOYyOeGNgLAMJ2KdcwQBXJSf2fEc5SM=
Subject key identifier:   6F:EF:E0:E8:13:DA:AB:DB:EB:8E:1B:92:0C:23:AD:C6:85:10:98:A5
Certificate issuer:       /CN=A91A284E/serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB
Certificate serial:       06E7
Authority key identifier: A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/A3205106142511EB8FED0427C4F9AE02.roa
Signing time:             Tue 06 Aug 2024 22:30:44 +0000
ROA not before:           Tue 06 Aug 2024 22:30:44 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     131286
IP address blocks:        103.68.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl
                          rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1767 (0x6e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A284E/serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB
        Validity
            Not Before: Aug  6 22:30:44 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66b2a414-72f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:10:c8:a3:d9:7c:86:39:ad:6c:79:92:27:8d:
                    fa:e4:75:20:82:03:be:0f:4f:6c:75:af:39:3e:28:
                    35:34:a0:e0:0a:f8:be:39:42:65:91:86:0d:6c:01:
                    42:99:44:49:05:5f:8b:bf:0a:ec:f7:75:31:14:58:
                    d7:95:29:49:c9:f3:21:b6:17:21:68:f5:ca:f8:78:
                    6b:52:db:22:a3:8c:93:42:d8:9c:dd:f8:85:1e:a7:
                    bc:ce:19:c3:ac:c8:e2:90:00:b2:21:30:95:fd:3f:
                    83:f5:f7:eb:71:06:b2:e9:ef:c6:ae:34:c7:eb:59:
                    90:7b:78:03:0e:6c:1d:51:95:3a:6b:66:43:f5:0d:
                    2a:ba:de:1c:cb:5f:95:de:fe:f0:9c:68:36:eb:d7:
                    d8:75:5a:f8:43:1b:f6:fc:49:01:41:a6:4b:08:72:
                    02:50:04:7e:ff:39:13:3f:cd:19:9f:db:06:04:df:
                    8e:8a:2a:d7:b1:27:a3:1c:51:41:4a:fe:b1:5a:fa:
                    6b:aa:40:2d:cc:6d:74:bb:c7:cb:be:2a:aa:51:d8:
                    b9:4a:4c:69:ac:64:4e:9f:a3:cf:44:38:9f:e7:14:
                    a6:b9:9f:00:c5:f6:fe:b0:ae:f6:fa:95:43:96:51:
                    b7:6e:28:79:92:17:9d:f8:da:44:97:82:5a:16:4a:
                    65:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EF:E0:E8:13:DA:AB:DB:EB:8E:1B:92:0C:23:AD:C6:85:10:98:A5
            X509v3 Authority Key Identifier:
                keyid:A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/A3205106142511EB8FED0427C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:39:1b:fb:c9:8d:da:62:f6:e8:48:58:b3:38:7d:39:fe:aa:
         7d:5b:7c:85:ef:df:86:e1:1a:e5:f7:89:31:66:c7:12:28:f4:
         f5:4d:bb:88:ea:a9:b0:d4:d4:a8:64:fd:e4:34:2e:4b:6e:f3:
         7e:ad:49:f6:6d:66:9b:9e:84:bc:c3:25:3d:50:45:4e:d9:47:
         08:68:e8:b8:9a:a2:f5:44:74:2c:f5:83:d8:78:2d:e5:eb:eb:
         ec:52:e6:bf:8a:97:20:43:17:7a:7f:b8:ae:63:0a:b5:dd:70:
         c4:3c:bb:05:f4:28:11:b0:b2:b7:a5:d2:5a:9b:4d:35:82:57:
         39:b9:f6:d2:a3:5b:50:32:e4:32:61:a0:00:be:0d:02:80:b6:
         64:16:bb:d3:20:e1:82:ab:c1:8e:c5:0a:d3:e2:04:f5:75:fd:
         99:cd:7c:78:78:23:d7:d3:81:1a:87:c9:b3:02:99:d4:a5:4f:
         cd:fe:65:b0:43:ad:dc:16:50:b7:c0:32:bb:c7:15:e5:62:3f:
         22:87:5d:33:e5:32:af:9d:60:07:85:7a:79:ac:e9:16:ce:26:
         3e:bb:5e:0a:ac:65:0e:a9:6f:a3:2d:3c:87:62:a6:18:7c:61:
         6a:94:2b:d0:c6:7b:ab:14:d6:d7:3a:53:84:91:01:80:29:9e:
         17:59:d5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:11 2024 by rpki-client on console-fra.rpki-client.org