Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/76FA00E87EE811EC8D796C6EC4F9AE02.roa
File:                     76FA00E87EE811EC8D796C6EC4F9AE02.roa (raw, json)
Hash identifier:          Uq0y6YVjnczZgmf/DpzS9jV0pq/xNI52A3uzE+KCUEg=
Subject key identifier:   49:A5:7B:73:75:DE:C5:F8:5F:AB:29:A3:C2:96:CA:8A:38:0C:38:90
Certificate issuer:       /CN=A91F680E/serialNumber=175F732E46DBABE9AA7181DF83C726EF6F6F5BC2
Certificate serial:       02F5
Authority key identifier: 17:5F:73:2E:46:DB:AB:E9:AA:71:81:DF:83:C7:26:EF:6F:6F:5B:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/76FA00E87EE811EC8D796C6EC4F9AE02.roa
Signing time:             Tue 13 Feb 2024 02:54:37 +0000
ROA not before:           Tue 13 Feb 2024 02:54:37 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     51447
IP address blocks:        103.178.236.0/24 maxlen: 24
                          103.178.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.crl
                          rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:08:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757 (0x2f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F680E/serialNumber=175F732E46DBABE9AA7181DF83C726EF6F6F5BC2
        Validity
            Not Before: Feb 13 02:54:37 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65cad9ec-90a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:80:47:ee:19:2d:0c:a7:82:ba:13:ed:9c:9f:
                    6d:28:ad:bf:2b:31:ae:13:78:c3:ce:01:1c:4c:af:
                    0e:97:03:aa:76:af:14:3c:16:c6:a5:63:e6:d1:d4:
                    d9:ff:85:e2:b4:89:5d:df:9a:23:0b:fb:a3:1f:54:
                    3b:ab:04:60:b4:4b:57:93:63:a6:59:1f:a3:4b:71:
                    2f:bf:e3:c8:60:52:6c:68:ae:2c:ba:a5:48:ba:4e:
                    2f:ca:4f:0a:8e:01:27:a8:19:68:20:9c:8d:14:85:
                    bd:86:14:16:6c:90:0d:a5:c7:89:ed:42:c4:59:69:
                    63:42:51:00:1b:20:a7:df:31:86:9e:dd:85:e2:0e:
                    f7:4c:5b:2d:dc:30:f9:e1:d3:df:73:a0:81:ff:a5:
                    e0:fa:d5:81:dc:da:e2:0d:98:6c:2f:e2:46:86:f3:
                    4b:5b:62:35:f1:3d:c7:07:ef:74:17:3a:fe:8e:ce:
                    71:fd:e2:3d:f0:a1:98:47:8e:b4:25:4e:ae:38:82:
                    47:d9:92:f1:23:4c:68:9f:20:1b:1f:a9:19:9e:b8:
                    69:f3:b0:db:64:9b:ed:77:7d:d6:c7:55:b2:b6:5c:
                    bf:f5:69:f3:20:28:53:24:02:d9:05:96:5c:2e:3c:
                    ae:f5:1d:36:88:59:ec:e0:89:f2:ab:f6:45:78:ad:
                    a8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A5:7B:73:75:DE:C5:F8:5F:AB:29:A3:C2:96:CA:8A:38:0C:38:90
            X509v3 Authority Key Identifier:
                keyid:17:5F:73:2E:46:DB:AB:E9:AA:71:81:DF:83:C7:26:EF:6F:6F:5B:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/76FA00E87EE811EC8D796C6EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:98:fc:0a:1a:1b:8b:d8:d3:97:d3:86:45:09:53:fa:c8:75:
         d1:4a:6d:9b:01:9f:47:bd:b5:1b:dd:86:2e:e4:52:48:e5:db:
         8b:5c:c8:46:c3:02:1d:b3:f3:5f:04:64:d7:89:72:64:73:e2:
         d2:7a:d0:3e:f4:da:15:2b:7f:ca:1c:d7:db:bc:70:22:19:73:
         0e:0c:a2:66:62:83:10:7f:1b:40:a5:cb:38:35:c2:59:35:bc:
         de:13:f0:f5:58:f5:ba:79:73:4f:49:53:92:68:2e:62:cd:9d:
         d4:a9:8c:40:a2:f6:f5:92:4c:9a:60:1b:f1:ce:9a:0a:a4:16:
         40:08:d3:44:01:49:bf:10:02:d3:d2:7c:2a:c3:15:3d:e9:ea:
         97:3d:f7:34:6b:00:46:23:af:44:65:f9:86:56:a0:79:8f:a0:
         f8:35:95:3c:81:14:f0:e1:4a:0a:02:5e:04:d6:ef:26:6f:ff:
         00:0f:26:0d:5e:44:ac:c8:69:ed:02:35:7b:fb:89:b4:9c:66:
         80:86:fa:a6:1e:7b:ad:96:ee:42:da:b1:ba:8d:4b:46:64:d5:
         d8:cd:8d:2b:3c:cc:d8:bc:5e:91:8d:63:0d:0a:20:31:7c:fa:
         99:ed:70:6e:1d:94:26:09:39:4f:53:dc:72:44:fd:44:3d:ed:
         ae:e2:d9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:59:08 2024 by rpki-client on console-fra.rpki-client.org