Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/ACA62AC8C2C611ED86556036C4F9AE02.roa
File:                     ACA62AC8C2C611ED86556036C4F9AE02.roa (raw, json)
Hash identifier:          KZLcplLOQAFbdJKivMeF46B7fVuRC80pLBoDBl7f3ig=
Subject key identifier:   E7:FC:5A:12:1D:A8:C6:51:80:C7:78:E8:DE:F8:AF:AB:D6:C6:71:48
Certificate issuer:       /CN=A91BDB80/serialNumber=14AD15CB3F2B4BF249B0ACF4A1FFDBF4A501325C
Certificate serial:       9F
Authority key identifier: 14:AD:15:CB:3F:2B:4B:F2:49:B0:AC:F4:A1:FF:DB:F4:A5:01:32:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FK0Vyz8rS_JJsKz0of_b9KUBMlw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/ACA62AC8C2C611ED86556036C4F9AE02.roa
Signing time:             Sat 13 Jan 2024 05:15:59 +0000
ROA not before:           Sat 13 Jan 2024 05:15:59 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     136036
IP address blocks:        103.80.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.crl
                          rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FK0Vyz8rS_JJsKz0of_b9KUBMlw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB80/serialNumber=14AD15CB3F2B4BF249B0ACF4A1FFDBF4A501325C
        Validity
            Not Before: Jan 13 05:15:59 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65a21c8f-cba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:26:f1:6a:d4:73:b7:9e:1c:96:5a:46:bd:
                    5f:81:4d:c1:9a:6d:b9:11:4d:e3:10:0b:9a:f1:af:
                    f3:94:51:3c:35:d7:cd:c6:f4:c8:21:97:06:9f:74:
                    7e:f0:38:88:e7:47:0e:d0:d8:85:e3:16:f7:8a:6d:
                    eb:4d:c1:bd:42:fa:24:be:51:96:b5:02:55:06:08:
                    c6:75:a9:81:07:fa:ee:57:2c:aa:ba:66:0b:42:0a:
                    8e:a1:16:2f:66:b2:c7:09:3f:6e:42:07:58:ec:90:
                    1f:59:cd:d6:c6:5f:5c:3e:14:a7:e0:66:20:8d:ad:
                    2c:bf:08:f1:49:3b:c7:1d:7c:de:f6:83:b7:c8:e1:
                    fc:f6:96:e7:cc:8e:77:5e:57:26:6e:57:e7:96:84:
                    30:c7:c6:5c:23:9b:e6:ea:cf:7f:bc:16:60:d4:ff:
                    bd:f5:65:d3:bc:21:ac:cd:90:4b:0e:18:81:c4:49:
                    d4:2b:18:90:0d:e2:a4:86:2e:48:1d:ea:7f:25:47:
                    d0:a2:d9:d5:85:64:bc:ed:2b:61:3d:24:9b:8d:cd:
                    df:3e:35:c6:a6:c1:58:11:11:80:62:87:eb:f1:df:
                    bd:78:4e:fc:63:c4:87:30:d7:b8:e7:2d:f2:c4:ca:
                    5e:15:50:ae:bf:8b:a5:dd:b9:99:47:f0:b4:d3:1d:
                    cf:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FC:5A:12:1D:A8:C6:51:80:C7:78:E8:DE:F8:AF:AB:D6:C6:71:48
            X509v3 Authority Key Identifier:
                keyid:14:AD:15:CB:3F:2B:4B:F2:49:B0:AC:F4:A1:FF:DB:F4:A5:01:32:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FK0Vyz8rS_JJsKz0of_b9KUBMlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/ACA62AC8C2C611ED86556036C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:77:4a:2f:36:d9:d3:71:a3:5e:dc:6b:c5:e3:f1:b0:8a:8f:
         c2:c1:ae:f5:1a:1c:26:3d:75:0e:01:0a:e3:33:ca:8b:61:a2:
         ed:4c:3d:e4:22:ba:fc:09:57:15:0e:3e:c9:20:9b:0c:40:fb:
         af:a7:db:8f:e8:34:ee:2e:6c:51:c3:9f:81:b1:f1:c1:fc:b3:
         8d:38:4d:d6:28:9c:dc:b9:1a:25:b6:ee:70:db:3f:1a:34:aa:
         38:b9:62:47:64:c4:c4:d0:c3:7e:22:68:4f:df:5f:1e:64:bf:
         92:aa:91:79:b7:51:b6:d9:2f:b4:5c:94:a3:a4:72:1f:c8:9e:
         6c:4a:46:23:c6:3b:0f:2b:4f:ae:99:81:95:02:2e:89:b2:79:
         f1:c5:29:dc:ff:55:e9:91:1e:04:21:c9:39:6e:fe:cf:a2:f5:
         1b:29:b0:0f:25:48:f1:25:a0:e5:2e:c6:66:5a:af:9f:36:af:
         3f:e1:5c:61:f8:ed:08:c4:34:54:cc:0f:6e:c1:c4:b4:f6:7d:
         ac:0d:3c:47:8b:b2:8a:38:fe:4c:55:10:d3:42:f2:c6:02:12:
         b2:e0:6f:4d:3b:b9:35:75:ac:be:d9:0a:e9:11:34:5d:2e:0a:
         69:08:00:fa:2e:97:13:1b:1d:90:0d:fb:74:c7:df:9b:71:83:
         b6:e8:3d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:49 2024 by rpki-client on console-ams.rpki-client.org