Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/2B658C44F9D911ECBC381559C4F9AE02.roa
File:                     2B658C44F9D911ECBC381559C4F9AE02.roa (raw, json)
Hash identifier:          qqSsVUySdeF/mPXA1H2/Nb+W0uFPMOk9qHP5kfHhs6E=
Subject key identifier:   92:FE:6A:07:CE:0E:19:CA:C9:3C:1F:38:05:D7:49:B0:62:4F:68:DE
Certificate issuer:       /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Certificate serial:       01E6
Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/2B658C44F9D911ECBC381559C4F9AE02.roa
Signing time:             Wed 01 May 2024 04:37:12 +0000
ROA not before:           Wed 01 May 2024 04:37:12 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     149788
IP address blocks:        103.186.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl
                          rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
        Validity
            Not Before: May  1 04:37:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6631c6f8-c81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:34:9a:e4:42:28:34:73:46:33:44:7a:18:30:
                    be:3d:a4:46:22:dc:4b:ef:cf:5e:64:31:70:46:40:
                    b0:23:13:eb:29:72:39:18:cc:45:4a:57:f8:3f:59:
                    7c:b5:b8:a6:35:09:cf:ea:61:e5:fe:a8:52:8d:e9:
                    fd:ec:cc:b0:7e:4b:ef:94:ed:2d:52:6c:20:fb:7e:
                    58:f2:1d:91:80:a7:71:a3:a3:b8:85:91:92:34:e4:
                    0a:6d:89:a5:dc:f9:63:ee:08:f9:f6:d7:9c:20:24:
                    fe:1f:a6:db:68:fe:cf:1f:2b:90:f0:34:8e:0c:3c:
                    22:f4:d3:5e:88:ec:35:08:40:4d:a3:00:08:23:18:
                    ce:e6:bc:38:dd:58:67:3a:64:22:42:59:2d:49:6a:
                    73:0f:a4:48:db:fe:c2:9a:8d:c2:3b:ea:43:47:c2:
                    c4:a2:25:c2:fb:25:e0:2b:6a:19:c2:3e:ac:cb:01:
                    98:99:f1:d7:86:0b:9f:a9:95:19:90:89:38:e2:20:
                    4a:28:6f:84:54:a2:dd:e9:7d:a1:a9:19:1e:fa:75:
                    69:e8:88:0f:fe:9b:5f:43:2c:2f:4c:f5:77:62:24:
                    03:e8:22:ac:57:72:fa:02:28:eb:07:fa:18:1c:3f:
                    99:dc:71:d2:10:74:e4:7a:3b:89:fb:44:3c:cf:7d:
                    a5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FE:6A:07:CE:0E:19:CA:C9:3C:1F:38:05:D7:49:B0:62:4F:68:DE
            X509v3 Authority Key Identifier:
                keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/2B658C44F9D911ECBC381559C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:08:18:45:19:8d:90:6e:66:a0:ee:fb:65:46:33:cc:7d:bd:
         22:48:d6:5d:4d:95:8e:7a:6d:fb:76:61:0b:55:37:b5:3d:89:
         48:c1:ec:77:73:87:89:7c:76:8d:83:28:32:60:b1:d6:68:e1:
         26:43:83:d3:ba:fe:9d:74:32:b3:34:1f:22:ac:eb:06:7e:53:
         a9:1c:b5:86:40:64:a4:c2:5f:d6:76:ac:36:92:9a:15:ac:19:
         ad:ca:0c:dd:c2:2d:92:57:10:7f:03:ae:e0:f4:ea:8a:78:52:
         e2:05:01:74:c8:03:3e:bf:d3:33:1b:19:7c:4b:02:8d:3d:f1:
         55:fb:40:c9:5b:b1:21:09:19:54:7a:07:89:ad:ab:1f:4f:e6:
         d2:a8:53:72:d2:74:54:bb:9a:db:60:7c:c4:79:2d:14:12:60:
         cf:1c:1b:a8:a3:be:b4:62:ea:47:04:90:5d:d1:b6:bf:e7:5d:
         9b:14:65:f7:d6:60:c9:f9:24:46:2f:bc:6c:17:5f:94:13:25:
         dd:39:41:40:1a:1f:f7:cd:0d:ba:75:a8:85:30:18:3c:6b:59:
         1e:b8:bf:89:27:9f:ec:79:c7:d4:1c:46:93:ec:bd:18:fa:b6:
         fe:73:20:c6:d5:9e:0f:8d:ae:e4:f3:68:f7:32:c2:a0:e0:cd:
         9e:86:95:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:49 2024 by rpki-client on console-fra.rpki-client.org