Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/8F7DDD8889B811EE9E7ABE26C4F9AE02.roa
File:                     8F7DDD8889B811EE9E7ABE26C4F9AE02.roa (raw, json)
Hash identifier:          /eAIAgbkZCIP0fMr2TN/5lT1l6GiWI+JgsgVyciFAmQ=
Subject key identifier:   C3:40:E9:9A:CA:12:26:6C:11:9C:A1:D3:4F:8A:E8:A8:C9:F6:A2:3C
Certificate issuer:       /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C
Certificate serial:       0C67
Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/8F7DDD8889B811EE9E7ABE26C4F9AE02.roa
Signing time:             Thu 23 Nov 2023 04:27:07 +0000
ROA not before:           Thu 23 Nov 2023 04:27:07 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     21859
IP address blocks:        103.38.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl
                          rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 18:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3175 (0xc67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C
        Validity
            Not Before: Nov 23 04:27:07 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=655ed49b-1ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7d:0d:37:0c:69:4e:44:1a:4a:02:df:7b:b5:
                    ef:28:91:7f:41:13:26:23:e5:59:cb:36:6d:d7:e4:
                    66:77:7e:8d:ff:c1:28:03:ac:f6:3c:ca:6e:1a:84:
                    ea:80:e9:78:42:c6:1f:21:0a:9b:f5:9c:f4:47:4c:
                    d0:b6:5c:fc:fb:43:09:46:d8:c5:85:0c:48:13:18:
                    ee:fc:cc:29:fb:72:94:44:41:90:90:c7:4e:9b:a3:
                    a7:6f:d0:07:96:df:c5:28:86:f7:6f:b1:bb:e8:84:
                    54:be:9b:ee:37:ea:bd:a6:57:1f:fc:1a:0f:e0:72:
                    cb:11:b8:ab:8c:24:08:bc:bc:8e:26:38:86:b5:66:
                    ba:39:5f:c0:8e:62:d0:3d:b9:24:bf:81:d8:c0:4d:
                    98:ce:14:cc:cc:b4:5f:fd:8c:11:17:fe:39:a0:b9:
                    f2:b7:90:54:e3:52:82:91:2a:ba:63:2f:bd:c7:78:
                    09:3b:41:df:31:58:94:ab:0c:bf:f3:ae:ae:47:87:
                    60:66:c9:db:da:9d:e0:35:b0:c2:1b:d6:af:27:78:
                    3a:0e:72:cc:2b:9b:ea:07:35:e4:fe:e8:4c:ba:06:
                    9d:3d:1d:df:9e:37:8b:03:50:a0:46:94:e3:1b:9a:
                    48:cc:b6:29:d9:75:35:08:43:3c:e3:61:f3:ff:96:
                    cf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:40:E9:9A:CA:12:26:6C:11:9C:A1:D3:4F:8A:E8:A8:C9:F6:A2:3C
            X509v3 Authority Key Identifier:
                keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/8F7DDD8889B811EE9E7ABE26C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:3f:09:40:b0:28:3f:88:d8:ac:d6:4c:d9:9c:53:df:ce:c1:
         cb:02:b7:18:7a:bf:63:7d:0a:2c:80:d5:47:51:2f:f4:72:d5:
         dd:66:1b:19:72:bb:09:91:c6:af:c4:8b:49:75:36:b3:be:37:
         d9:86:01:71:73:52:61:09:70:38:e6:96:4a:00:4e:c4:77:83:
         69:40:03:d0:fb:ac:65:4a:f7:ae:aa:14:4d:16:8b:33:8f:a5:
         c2:d0:2e:52:da:d3:0f:e6:91:c8:8d:6f:b5:8a:59:4f:5d:e9:
         eb:1e:1d:cc:79:18:50:7f:2d:b0:63:85:23:42:0e:9a:a7:14:
         d7:c3:fe:b1:ba:a8:67:5c:2e:9f:c6:21:fc:54:af:5e:15:b1:
         f4:08:f1:02:4f:d1:5a:3e:7a:f9:f8:6f:bd:e5:f6:b1:ff:a8:
         9b:d6:78:e9:ca:c6:ea:49:30:62:5f:02:27:22:c8:9d:ae:fd:
         92:cb:c3:56:3a:9c:8d:89:b1:62:1e:c0:54:4f:0c:77:94:73:
         30:d3:06:84:f3:47:4f:d0:31:18:84:6d:24:48:ee:f6:c5:b4:
         d2:56:cf:e9:d8:71:aa:9e:6b:8c:ed:16:df:89:74:8f:16:3c:
         0f:3b:16:bc:94:4b:8e:57:dd:a8:07:8e:d4:47:57:98:a2:24:
         1f:91:17:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:04:37 2024 by rpki-client on console-ams.rpki-client.org