Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/F26B14C4EE8B11ED95BCBB13C4F9AE02.roa
File:                     F26B14C4EE8B11ED95BCBB13C4F9AE02.roa (raw, json)
Hash identifier:          XedbY/PZhCWJ5tz0Q2lxrhZqMoRjpB9GmAPtufUsPlI=
Subject key identifier:   A4:53:25:EF:7A:6D:9E:C6:B6:F0:E0:77:B5:03:DB:BA:0A:CE:B0:E2
Certificate issuer:       /CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
Certificate serial:       E7
Authority key identifier: F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/F26B14C4EE8B11ED95BCBB13C4F9AE02.roa
Signing time:             Tue 11 Jun 2024 06:43:24 +0000
ROA not before:           Tue 11 Jun 2024 06:43:24 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     150731
IP address blocks:        103.130.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl
                          rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:47:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
        Validity
            Not Before: Jun 11 06:43:24 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6667f20c-4f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:70:dc:88:22:4c:09:3d:66:ee:79:46:db:
                    b2:28:c9:8e:0f:ea:f3:1a:7f:11:cb:a9:59:a7:32:
                    c9:54:25:93:30:f1:93:93:ba:8c:34:f9:9d:f3:39:
                    a7:73:96:b9:6c:44:01:12:ae:8d:64:7e:e6:3c:1d:
                    05:b9:55:47:dc:88:f4:f8:6e:82:31:7d:67:b5:83:
                    6e:fb:c3:52:f3:ff:79:91:cf:0e:07:a5:1e:a7:83:
                    c9:6f:38:06:c1:8a:b7:09:e6:ee:d2:35:47:67:10:
                    c7:a3:bd:56:1c:06:09:b9:81:78:9e:63:dc:f5:ea:
                    ea:4d:3d:b0:f9:32:85:8e:b5:ac:81:35:c5:df:c1:
                    27:19:c3:2b:25:3e:cb:43:d7:97:2a:97:21:7e:7b:
                    ee:20:47:5d:62:41:02:ae:08:46:9f:4b:9a:d6:08:
                    da:80:c8:d6:c4:4a:31:d8:9f:99:09:1f:e6:3e:09:
                    05:e2:19:60:07:07:4d:9b:c9:75:01:6b:1d:dd:96:
                    05:e4:27:15:dc:d2:d5:40:52:d2:a7:47:17:3c:37:
                    50:86:3a:01:51:9d:71:4d:43:ef:9b:8f:96:2f:5a:
                    2a:ce:eb:67:b9:8d:b7:e8:36:30:3d:e6:eb:e3:79:
                    0b:b2:ce:16:0d:be:7f:50:0d:17:15:01:49:a6:67:
                    c1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:53:25:EF:7A:6D:9E:C6:B6:F0:E0:77:B5:03:DB:BA:0A:CE:B0:E2
            X509v3 Authority Key Identifier:
                keyid:F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/F26B14C4EE8B11ED95BCBB13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:8b:7d:49:43:25:d0:7b:bc:1c:5c:08:42:f9:20:7a:fd:84:
         ea:ba:19:9e:a7:dd:2e:f0:cb:b2:70:18:f9:95:db:ee:f1:a2:
         34:ff:27:f8:1f:38:01:39:c5:cd:b5:20:83:9d:b3:df:25:40:
         a3:3f:43:08:62:2e:0d:57:38:1a:db:aa:38:76:f5:c7:0a:28:
         1a:a0:c7:17:b1:5e:1f:bd:e0:de:a4:c6:c9:7b:85:d5:c9:6d:
         e7:56:62:c8:23:a2:02:3e:82:4e:fa:3d:70:f0:50:5d:44:2c:
         c1:8e:51:5b:da:80:11:97:dc:d6:c9:f4:a5:31:11:10:fa:58:
         70:4a:bf:03:9f:3a:da:c1:35:76:cf:ad:f3:e7:c0:68:12:9c:
         16:31:42:bf:19:ea:09:5c:b2:84:e2:2e:e3:f5:11:71:8a:b3:
         24:4b:5a:ea:1e:62:59:0d:4e:a2:e0:b6:50:f1:2c:08:ea:6b:
         dd:a2:8b:07:aa:fb:11:64:89:9a:95:6d:76:96:8e:ac:71:96:
         3e:9b:04:ac:d3:8b:a9:00:81:e4:f1:00:8f:7a:86:f2:ad:ed:
         88:2a:a1:0a:1b:dd:de:a4:a1:48:4c:96:29:29:32:33:9e:c4:
         a5:d6:b1:9e:c5:ba:cf:bb:cb:73:ae:e9:2e:46:ad:dd:08:46:
         ca:85:27:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:54 2024 by rpki-client on console-ams.rpki-client.org