Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/FACB1DC6595911ECBE6ACC6BC4F9AE02.roa
File:                     FACB1DC6595911ECBE6ACC6BC4F9AE02.roa (raw, json)
Hash identifier:          3J8UKsSXxzfM+FPcnkprxkh+voSXj2l401+jnG4rh1Q=
Subject key identifier:   A0:52:BB:AD:66:DE:43:A6:8F:77:D8:39:AB:4B:28:40:96:53:FD:D4
Certificate issuer:       /CN=A91B488A/serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A
Certificate serial:       0656
Authority key identifier: 62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/FACB1DC6595911ECBE6ACC6BC4F9AE02.roa
Signing time:             Thu 28 Dec 2023 23:01:29 +0000
ROA not before:           Thu 28 Dec 2023 23:01:29 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     132058
IP address blocks:        103.158.152.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl
                          rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1622 (0x656)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B488A/serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A
        Validity
            Not Before: Dec 28 23:01:29 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658dfe48-7077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b9:1a:25:b3:ea:75:48:93:19:a4:3c:c7:82:
                    42:c9:ed:12:d4:81:ab:e0:32:2f:ce:72:a0:e9:04:
                    be:ff:90:7e:2f:ba:3b:2e:70:d3:ad:d8:df:53:f7:
                    be:9c:db:b7:00:6c:24:5c:bf:4f:10:65:58:42:27:
                    73:ed:8f:c1:49:30:93:45:6f:bd:99:d1:6d:e0:55:
                    6f:df:55:43:76:b3:94:96:63:8b:27:88:47:5c:ee:
                    ac:4e:1f:ed:95:23:79:2f:6e:30:58:7d:c1:f6:5f:
                    fe:ac:03:8c:b6:0b:36:c7:44:f3:22:a1:55:d7:e1:
                    e0:45:88:4b:8f:9e:f9:0b:b8:89:4c:7b:04:c9:56:
                    a0:85:e9:91:a6:6b:47:e1:c9:fa:e1:67:c7:05:5c:
                    20:cb:94:fd:cd:b6:3c:48:6e:49:62:37:08:f8:a8:
                    2e:1e:a7:78:c0:de:1b:57:ca:82:6c:cd:b7:ad:22:
                    e1:51:cf:e4:ad:21:54:a2:12:a1:94:c6:19:50:73:
                    e8:86:31:e2:c6:81:14:9b:7a:ee:a4:02:7d:02:c2:
                    0d:56:ca:91:0a:f0:9a:6c:af:c9:97:f0:30:aa:5f:
                    3d:f2:7c:94:48:b2:db:ae:1d:df:57:15:a1:bb:8c:
                    45:08:ae:ec:e0:83:33:d9:51:9c:03:a5:b5:61:9b:
                    0d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:52:BB:AD:66:DE:43:A6:8F:77:D8:39:AB:4B:28:40:96:53:FD:D4
            X509v3 Authority Key Identifier:
                keyid:62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/FACB1DC6595911ECBE6ACC6BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:03:f1:57:bb:b7:34:5a:0b:a0:84:c3:fd:12:10:f6:7b:df:
         e6:0c:65:2f:6b:cf:69:94:f0:8f:45:d2:0e:21:fe:01:4f:a3:
         00:94:95:da:0a:0c:73:aa:e9:cb:38:ff:0b:c1:5b:2e:82:24:
         32:96:ad:dd:3b:f2:b1:3f:d0:e8:86:4a:20:af:7d:e6:87:6c:
         4e:2f:6d:e3:74:df:17:97:de:87:83:9b:c5:f5:ef:ea:d8:7e:
         45:64:96:59:3d:ee:2e:1d:32:68:57:c9:b2:be:f5:9f:a2:e6:
         16:c0:47:79:ae:5f:cf:35:7e:42:52:07:79:61:d9:86:23:9d:
         45:64:5e:63:8c:92:93:50:5a:db:fb:28:d1:55:e8:3e:b0:a1:
         8f:3a:a0:af:d9:81:e6:1d:29:3f:a6:9e:59:e0:92:60:a1:8b:
         fb:d3:45:88:82:ff:9f:ac:c4:11:f9:d1:57:2b:12:84:d3:d3:
         9a:20:ab:47:dc:a9:aa:2c:23:75:f3:e0:49:b9:08:49:d9:6e:
         cd:ce:51:b4:5b:64:46:a9:97:1f:7f:4f:90:d9:61:5a:01:2e:
         31:d1:7a:80:9f:f1:c9:b2:33:83:e7:dc:4c:e2:6e:c8:62:c9:
         e5:61:50:3f:8c:df:70:f4:c6:b3:7d:75:5f:09:9f:7d:ed:3b:
         e1:55:08:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:11 2024 by rpki-client on console-fra.rpki-client.org