Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/16FA72386A4E11E992F4832FC4F9AE02.roa
File:                     16FA72386A4E11E992F4832FC4F9AE02.roa (raw, json)
Hash identifier:          OgNGu/mRKm6xVdHYanAV24opwQSD/lMEZY85nUgEHHI=
Subject key identifier:   EB:0E:7B:DE:34:5C:3D:7F:D5:20:CF:7E:3E:9A:3C:E1:2C:54:14:89
Certificate issuer:       /CN=A91172C6/serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53
Certificate serial:       0EE1
Authority key identifier: 59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/16FA72386A4E11E992F4832FC4F9AE02.roa
Signing time:             Fri 04 Oct 2024 17:55:58 +0000
ROA not before:           Fri 04 Oct 2024 17:55:58 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     134503
IP address blocks:        103.35.80.0/22 maxlen: 22
                          2402:c180::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl
                          rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3809 (0xee1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91172C6/serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53
        Validity
            Not Before: Oct  4 17:55:58 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=67002c2e-f059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7d:63:14:1e:2d:a9:fb:35:a4:2d:35:6f:f1:
                    55:1b:70:31:d2:8e:65:5e:24:31:6d:ed:26:47:a9:
                    59:69:d1:49:8f:36:19:fd:55:6c:cd:fd:31:05:db:
                    44:f4:fc:3a:57:1c:8b:ee:26:07:d5:ca:04:6f:19:
                    71:0a:a9:8d:44:a4:1c:02:8b:6c:35:68:9f:d5:0d:
                    9e:75:29:4b:40:ab:e2:6b:23:76:ab:c8:8a:39:ea:
                    84:20:8b:02:c4:73:d0:b5:0b:ec:19:61:1f:53:f4:
                    51:e4:6c:d8:4b:55:0e:17:f6:9a:1a:19:55:bd:b7:
                    66:8c:a4:d8:44:5f:aa:1d:54:ef:c4:e3:65:49:18:
                    82:79:fa:91:80:35:e8:cc:b0:35:af:9c:8e:3a:48:
                    0e:12:ee:1a:80:54:57:14:8f:c3:48:20:b6:1a:4d:
                    72:42:3f:ad:12:3e:82:c8:ff:ce:06:68:28:1f:14:
                    8f:da:55:b6:cb:31:1d:80:29:cf:5d:87:9b:02:ed:
                    ae:98:1e:b4:9e:15:ad:04:40:b2:85:b7:16:d4:0d:
                    47:9e:64:e6:57:a2:03:73:c7:37:b9:7e:eb:52:c5:
                    53:ae:f7:ab:1a:b2:40:93:56:df:ff:2f:af:3a:c7:
                    c3:3e:8d:8a:2b:aa:60:47:48:73:e3:cb:df:48:73:
                    ca:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0E:7B:DE:34:5C:3D:7F:D5:20:CF:7E:3E:9A:3C:E1:2C:54:14:89
            X509v3 Authority Key Identifier:
                keyid:59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/16FA72386A4E11E992F4832FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.35.80.0/22
                IPv6:
                  2402:c180::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:4a:c3:c5:89:a1:52:3c:72:3f:2a:89:ae:f3:bb:6e:e3:7e:
         85:ff:17:4a:b3:10:4a:7e:f5:38:ef:9f:a1:0c:5b:ab:b9:9a:
         f6:91:48:68:2b:ab:3b:4f:78:18:e1:26:71:f8:f3:67:fa:8a:
         24:2c:37:14:f2:62:4f:66:de:c5:70:ad:e6:8c:65:15:1b:8b:
         fc:4e:2f:fa:cf:d5:05:bd:56:2a:43:c2:af:a0:8e:a8:aa:23:
         a6:73:9d:98:6a:c5:96:21:6e:b4:5f:fa:31:34:0a:ee:71:62:
         52:38:04:64:55:fd:11:c1:47:ba:7c:9c:35:e9:30:88:d1:a0:
         12:b8:41:b6:5c:ae:fd:58:f0:76:bf:c0:0b:32:a6:63:46:f7:
         43:a4:d5:06:96:13:c0:04:7f:21:67:43:bf:5b:c7:9b:d8:3c:
         93:51:63:8f:1f:8b:6d:71:04:c5:a6:6d:e7:c6:6a:42:3b:16:
         ac:51:47:af:29:50:79:f4:fb:ab:2e:80:fd:c5:09:22:70:2d:
         25:50:c4:5f:e7:a5:75:a6:e8:0b:31:d9:b7:f9:2d:25:7e:f3:
         bb:aa:37:83:bb:fe:05:69:45:6d:2e:f4:be:73:85:f1:e2:40:
         28:42:74:f7:c7:20:f1:a8:89:4a:11:e4:f1:7d:c2:54:77:0f:
         00:b8:4c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:55 2024 by rpki-client on console-fra.rpki-client.org