Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/B1B6929CCFD611ED8BEF6866C4F9AE02.roa
File:                     B1B6929CCFD611ED8BEF6866C4F9AE02.roa (raw, json)
Hash identifier:          2v16xzs8T0RhpUKMCv8QtQXlTp6BGM3VOnNWu+rNWZk=
Subject key identifier:   74:9D:A7:34:29:56:01:67:4C:99:FB:F7:25:61:72:9E:2B:C4:3E:EB
Certificate issuer:       /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
Certificate serial:       02D9
Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/B1B6929CCFD611ED8BEF6866C4F9AE02.roa
Signing time:             Wed 21 Feb 2024 02:45:45 +0000
ROA not before:           Wed 21 Feb 2024 02:45:45 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     62417
IP address blocks:        103.180.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl
                          rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 729 (0x2d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
        Validity
            Not Before: Feb 21 02:45:45 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65d563d9-4aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:42:02:8c:81:90:3b:8c:df:87:c1:af:ca:2f:
                    0b:9e:11:0c:be:65:c5:51:fa:ed:25:91:a0:1e:8a:
                    7a:f4:34:02:dd:30:64:ec:2a:a5:55:ce:45:fa:e9:
                    75:b2:0a:f1:73:df:74:c8:ef:5f:e2:7c:72:58:e7:
                    ae:27:5e:1e:61:b6:7c:d0:8f:97:ea:2e:a0:3b:3c:
                    3c:88:3d:b5:7c:de:08:78:d2:bf:42:a8:3a:29:95:
                    87:83:39:f5:09:f5:f9:bd:05:06:53:55:c9:4e:12:
                    2e:ef:96:c0:c5:3a:27:94:96:6e:f6:78:05:56:eb:
                    e2:a9:0a:ca:56:56:f2:a1:39:10:f7:ec:34:25:0f:
                    2f:bd:95:be:3c:50:26:4a:b0:db:55:07:3d:0c:7a:
                    7a:01:95:bd:9a:5e:5c:75:20:3b:a9:16:b0:98:ea:
                    dc:5a:c2:e2:6e:5e:aa:5a:ec:9d:e3:76:23:d2:3f:
                    ee:5c:34:06:82:31:68:6a:6c:7d:91:77:63:4a:e7:
                    91:5e:11:df:e8:b2:f3:17:f1:ce:2b:2c:e6:f5:ee:
                    c9:c4:5e:22:4d:95:a3:26:89:ff:f4:a7:b7:bc:d4:
                    97:e3:18:dc:4a:32:1d:2e:a1:f9:ec:08:44:a2:54:
                    d5:1f:6d:9a:48:5b:79:30:f9:75:87:64:9d:3e:ff:
                    89:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9D:A7:34:29:56:01:67:4C:99:FB:F7:25:61:72:9E:2B:C4:3E:EB
            X509v3 Authority Key Identifier:
                keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/B1B6929CCFD611ED8BEF6866C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:a5:d4:82:dd:57:ca:5a:ff:c6:03:bf:13:04:93:e7:c9:ac:
         f1:17:fc:c5:0c:b7:29:15:fd:5f:75:6d:73:b6:a9:e1:d9:97:
         64:d6:2d:c9:d8:d9:67:5b:37:46:04:b0:da:9a:32:4b:6a:f5:
         f3:13:a2:a3:3d:f7:f5:c7:29:89:dd:62:10:4f:50:8c:b9:d7:
         da:fa:9a:ed:23:64:7d:f9:88:3f:39:fc:28:db:f5:25:3a:d9:
         c8:57:85:41:a1:a3:e2:90:31:84:be:1d:50:a4:0b:e7:9d:05:
         61:e5:08:50:95:03:f5:16:44:e2:6b:5e:f6:c8:2a:4b:9a:bf:
         54:fd:ce:7d:3e:bb:91:93:86:10:4f:43:2c:2b:f7:bc:3c:59:
         e9:3d:6c:30:f8:bb:43:1c:d3:f4:bf:40:d4:a7:c5:b1:40:c0:
         ab:cb:23:16:d2:2f:2f:17:6a:a4:33:37:c9:f2:8a:a2:bd:73:
         d8:2a:12:c3:a2:0d:10:81:25:b0:0e:59:fc:00:da:5d:8e:1a:
         8f:f8:e0:2b:be:63:c9:4d:35:17:42:10:73:86:7a:f1:ce:9a:
         82:af:a1:c2:42:d0:86:b7:28:72:d9:db:d4:7c:1a:5f:32:56:
         99:0f:48:46:84:df:f6:80:9d:91:4c:eb:5d:67:e3:97:19:af:
         34:8d:34:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:43 2024 by rpki-client on console-fra.rpki-client.org