Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/FABBCE34CFA011EDA4AC5B18C4F9AE02.roa
File:                     FABBCE34CFA011EDA4AC5B18C4F9AE02.roa (raw, json)
Hash identifier:          LVTBtaPNjMgC7OliD95G8jdwAMGQ+S324iBQowgqnfA=
Subject key identifier:   E5:22:2E:FB:59:8D:C1:C0:4F:5C:51:A2:8A:97:45:A0:FB:33:AC:71
Certificate issuer:       /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76
Certificate serial:       01A6
Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/FABBCE34CFA011EDA4AC5B18C4F9AE02.roa
Signing time:             Sat 02 Sep 2023 21:28:47 +0000
ROA not before:           Sat 02 Sep 2023 21:28:47 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     26506
IP address blocks:        103.154.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl
                          rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Jun 2024 22:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76
        Validity
            Not Before: Sep  2 21:28:47 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64f3a90f-57fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9d:f1:6e:d5:c5:a5:59:f3:eb:93:0b:29:b3:
                    b8:c5:c6:e3:a1:15:1c:9a:85:1f:ec:c1:7d:b3:75:
                    5f:33:bf:1c:b9:ea:6a:73:80:29:96:95:70:d0:ac:
                    f9:cd:4b:88:d5:8d:fc:9a:cf:93:5a:69:15:f2:1f:
                    b8:d4:39:0a:ce:b7:0d:24:83:02:91:39:eb:8a:28:
                    a4:df:02:a4:60:69:e3:89:aa:61:57:7c:5c:bd:e1:
                    70:98:32:ae:27:72:7b:ac:a9:3b:84:27:1c:20:47:
                    b7:8d:af:a8:ba:54:87:4b:88:8f:de:98:2c:ea:59:
                    d5:bb:62:a5:14:9b:07:63:c2:9a:e9:55:6e:c3:fc:
                    c3:7c:5d:cc:95:f1:80:0b:23:9f:2b:34:95:5e:18:
                    90:9f:42:a1:b1:22:8a:3a:ed:23:45:ae:cc:76:ae:
                    93:3c:71:5f:01:5c:96:44:74:f5:37:1c:8b:c9:e9:
                    70:dd:3d:ff:08:cb:37:09:fc:a5:b4:64:24:1f:c6:
                    99:68:2c:0d:be:12:2f:fb:62:67:40:f8:af:39:b7:
                    39:18:21:69:b0:2a:b7:8c:fe:90:e0:24:58:f3:08:
                    25:4e:25:be:33:e8:1e:1c:31:e5:4a:f5:6e:a3:fc:
                    64:9d:80:8c:63:68:22:df:44:9d:37:9b:5c:6b:a6:
                    38:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:22:2E:FB:59:8D:C1:C0:4F:5C:51:A2:8A:97:45:A0:FB:33:AC:71
            X509v3 Authority Key Identifier:
                keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/FABBCE34CFA011EDA4AC5B18C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:80:cd:07:d0:04:14:53:1c:46:89:c2:85:77:96:05:ce:88:
         1b:29:8c:fc:88:20:fd:d9:72:9b:6b:b6:59:fe:e6:fb:8d:25:
         c2:c1:80:4e:8d:f0:18:b8:a8:eb:37:c6:c7:7e:c4:b8:b0:5c:
         3a:eb:48:e4:e1:20:e3:43:1e:42:46:1e:de:b5:bc:f2:3c:c6:
         bf:ba:0a:c8:c1:09:f2:6d:ef:9a:dc:a5:3c:df:42:cb:81:1f:
         94:d9:0e:41:8c:a0:b5:da:44:5b:6a:bc:37:85:eb:c9:d6:95:
         fa:aa:1d:e1:e8:01:65:df:03:f4:d8:30:ff:08:92:ea:39:53:
         63:25:44:09:27:e2:f0:19:4a:cb:70:ae:c7:aa:c6:a7:03:e2:
         29:71:ac:9b:e8:26:3e:31:c6:92:f9:16:99:0e:0c:93:c2:6d:
         5e:12:bf:01:f3:31:ba:b3:8d:b6:fb:fd:28:de:30:e7:d2:c5:
         e4:e5:69:6a:0c:e0:30:97:ee:e9:09:d3:0f:a1:11:d6:57:1c:
         d2:4f:cb:0a:59:cf:6d:ab:0b:97:0b:62:cb:e2:ac:8a:e5:5c:
         96:4e:ee:55:76:51:43:55:c4:31:40:c9:08:47:1f:10:8a:04:
         99:8c:b9:6a:74:99:1d:b7:a7:32:a5:c2:12:28:44:1f:6d:84:
         7f:c6:f0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:42 2024 by rpki-client on console-fra.rpki-client.org