Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/229EA4AC57D811EEAB6EE280C4F9AE02.roa
File:                     229EA4AC57D811EEAB6EE280C4F9AE02.roa (raw, json)
Hash identifier:          oUU1xW8bDxUWQVNSobkgR2udor+n65o3/Lyz6/cnbog=
Subject key identifier:   F3:45:F1:38:D9:35:5D:06:57:A5:88:63:C9:05:6B:09:B0:EA:9C:5B
Certificate issuer:       /CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B
Certificate serial:       42
Authority key identifier: 23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/229EA4AC57D811EEAB6EE280C4F9AE02.roa
Signing time:             Mon 01 Jan 2024 06:47:49 +0000
ROA not before:           Mon 01 Jan 2024 06:47:49 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     209854
IP address blocks:        103.176.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl
                          rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 07:12:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B
        Validity
            Not Before: Jan  1 06:47:49 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65926015-592d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b4:3e:ca:62:07:3b:ec:0a:8a:1b:e2:4d:ce:
                    ad:49:31:5e:d4:71:9b:fd:77:da:68:82:b3:7d:d2:
                    d0:e0:24:7c:27:6a:73:7c:cc:d2:63:a9:54:69:ad:
                    e5:ef:95:a4:46:2a:99:f8:d9:ce:30:68:bb:db:2a:
                    a4:05:29:17:3e:6a:dc:6e:ab:a9:d7:5d:97:a7:15:
                    53:51:2b:72:17:3c:b0:90:51:e0:30:db:76:69:cf:
                    d9:4c:aa:36:0c:05:25:f8:d7:84:0f:06:14:8a:0e:
                    37:ff:c5:6c:d6:f2:3f:ca:40:95:2e:96:e1:31:c0:
                    a6:ec:9d:36:48:1d:ad:2d:7c:a1:6c:63:3d:1a:a4:
                    8d:fc:f0:d5:e6:cb:dd:3c:67:6c:f2:84:e4:dd:5a:
                    b1:35:c6:e3:d2:89:f6:7d:2e:7f:c5:43:4f:1f:14:
                    78:7a:a3:a4:27:62:f3:c0:70:fa:ba:b9:7b:92:4c:
                    06:1f:4a:a3:ec:c9:90:de:b0:4d:13:df:ef:c0:85:
                    2c:19:56:30:d4:cd:b4:71:e5:8d:e3:43:e7:e8:cf:
                    34:e2:3c:4b:d2:96:7f:ec:27:a6:4f:67:ff:da:11:
                    60:ea:d5:a9:7e:fb:68:69:7b:18:df:ca:77:e6:87:
                    62:cf:70:5c:54:54:fe:5f:24:9c:91:65:9b:cf:fd:
                    d3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:45:F1:38:D9:35:5D:06:57:A5:88:63:C9:05:6B:09:B0:EA:9C:5B
            X509v3 Authority Key Identifier:
                keyid:23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/229EA4AC57D811EEAB6EE280C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:51:98:d0:f8:b3:92:19:7d:9a:05:df:a7:c4:32:59:c5:32:
         36:0c:34:b2:c3:0d:24:e2:7c:6a:cd:ac:4e:6b:a8:33:a9:2b:
         29:2e:c8:04:87:c5:b4:aa:25:6c:13:61:4a:df:7a:40:e1:4d:
         f7:ce:78:31:5c:04:34:ab:be:ba:96:4e:ae:08:5d:34:bb:1c:
         1b:53:c9:7f:2b:73:6e:48:ae:11:25:11:cd:83:2e:82:f6:e5:
         35:a7:bf:bb:0f:92:5d:ba:5b:8b:6d:75:51:76:18:be:71:ce:
         60:85:3e:de:2a:2b:d2:bd:4a:f4:ba:d4:f8:36:4d:ed:0f:c3:
         7a:44:93:38:a1:ca:77:32:58:de:8f:82:0d:4c:a5:95:45:ea:
         eb:95:35:05:a5:3c:39:e4:fb:35:8c:7a:8c:61:38:f2:96:fa:
         9c:fb:c0:bd:ff:da:44:28:ab:ba:df:24:80:6b:7a:b2:3c:f7:
         d9:58:95:22:fe:82:d7:fc:36:2d:5b:fc:93:f5:2c:15:d0:46:
         d3:b7:05:55:76:78:4c:27:e6:54:8d:cb:fd:02:68:06:97:66:
         d7:e9:0c:c2:2b:21:32:09:9e:17:58:81:27:b5:90:39:21:7a:
         18:1c:bc:37:bb:fa:6f:98:09:f0:7f:b8:83:0f:fc:41:f2:d7:
         4e:82:48:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 09:42:11 2024 by rpki-client on console-fra.rpki-client.org