Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/2798B9A6BABA11EB8A51C234C4F9AE02.roa
File:                     2798B9A6BABA11EB8A51C234C4F9AE02.roa (raw, json)
Hash identifier:          gC86FOlLNlw8sX6fIF1yFtH6XDI7lFfd4FXNH2SWx4M=
Subject key identifier:   54:9E:2B:CB:28:6A:DC:7D:29:E8:20:31:49:85:78:49:38:91:79:E1
Certificate issuer:       /CN=A91D40BF/serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
Certificate serial:       0679
Authority key identifier: BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/2798B9A6BABA11EB8A51C234C4F9AE02.roa
Signing time:             Thu 14 Mar 2024 23:12:44 +0000
ROA not before:           Thu 14 Mar 2024 23:12:44 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     38166
IP address blocks:        103.75.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl
                          rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Oct 2024 21:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1657 (0x679)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D40BF/serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
        Validity
            Not Before: Mar 14 23:12:44 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65f3846c-c1be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:85:14:0c:a9:a4:68:b7:d8:35:f5:11:11:a4:
                    c1:33:ea:96:9c:d7:c0:0c:8c:51:d9:59:98:19:72:
                    02:0e:e4:47:f9:c5:44:18:ec:8a:f6:e9:41:8f:64:
                    c9:93:c4:08:9b:0c:61:c4:0f:37:3c:26:68:45:c1:
                    c8:aa:d7:d8:ed:5a:07:5a:f5:da:d1:3c:e4:04:bb:
                    64:f1:c4:92:54:62:60:a9:6c:d7:eb:76:6c:a5:9a:
                    b7:38:e6:21:b3:16:4e:0e:e5:22:4f:89:b1:8f:aa:
                    ee:82:d3:e1:93:df:bf:1b:51:fa:b7:f1:33:01:f5:
                    e0:df:22:80:8f:2e:ca:a5:e9:83:4d:8c:80:60:d6:
                    7e:8e:60:70:55:4a:f8:3a:c7:97:cc:53:88:c5:cb:
                    31:85:a1:ff:67:0b:a9:96:4e:66:cd:13:3c:3c:d8:
                    43:7f:b2:9c:20:00:99:77:81:b3:f9:1b:44:9f:9c:
                    55:cc:37:13:b7:63:95:cb:ac:99:c4:05:0f:b3:75:
                    11:7e:5d:45:ca:b2:c0:f8:83:0e:77:fe:14:80:f6:
                    eb:6e:31:cd:4f:c8:eb:f1:cf:52:d0:50:13:58:63:
                    f3:c0:e7:94:be:75:4e:08:24:7f:77:f0:c3:05:52:
                    1b:d0:01:d9:00:8c:62:e5:70:e5:66:e8:e0:67:3d:
                    e9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9E:2B:CB:28:6A:DC:7D:29:E8:20:31:49:85:78:49:38:91:79:E1
            X509v3 Authority Key Identifier:
                keyid:BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/2798B9A6BABA11EB8A51C234C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:6d:27:5b:31:b2:36:ee:29:2c:48:d9:c2:00:5c:3a:97:97:
         7f:0b:20:6e:d4:4f:49:90:f5:8f:c7:26:3e:04:bc:f0:f7:f8:
         f7:4c:f5:88:50:fc:69:b6:d4:3e:9d:a3:ff:38:a2:1f:5a:03:
         5a:ad:c7:c5:0a:be:9d:a7:65:ce:9e:d7:87:ef:da:3e:1a:89:
         07:f9:14:d9:59:a3:85:6b:72:ed:3c:6c:0e:64:43:81:81:d1:
         6b:d7:12:21:5f:c3:cf:20:0d:35:92:29:c4:f1:b7:5e:9f:3a:
         59:4c:8c:a9:ed:73:43:27:8a:13:b2:e1:74:c9:d4:ed:a3:97:
         27:14:ec:37:75:11:0f:b7:e7:df:31:a3:db:2c:74:29:84:12:
         55:02:a4:07:9e:6f:ba:a4:5b:ec:de:f4:b2:47:70:c9:30:d0:
         09:b5:6e:73:e8:4b:c5:94:e3:35:af:89:2d:9b:bd:d4:e7:36:
         84:a6:b6:5c:c4:3c:cc:70:42:ec:52:75:05:31:5d:cd:a1:08:
         33:11:38:58:83:43:bc:d1:38:0f:84:af:ed:79:df:75:21:fc:
         31:e1:73:35:1f:06:a3:bf:bc:2a:70:e8:77:80:81:48:3d:31:
         74:34:20:01:27:02:3b:8c:43:0d:7a:ad:fb:46:6c:5e:5b:6f:
         9e:a6:e4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 23:13:33 2024 by rpki-client on console-fra.rpki-client.org