Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/F80BF07C107B11ED9B3C5410C4F9AE02.roa
File:                     F80BF07C107B11ED9B3C5410C4F9AE02.roa (raw, json)
Hash identifier:          btdqLhAPDRMz6WI33tnEvNcscLygEeQNr9pA6TuXIcQ=
Subject key identifier:   5D:81:8D:CA:43:A6:6B:30:D7:43:9F:F8:18:E2:ED:61:30:0A:35:5F
Certificate issuer:       /CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7
Certificate serial:       0191
Authority key identifier: 47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/F80BF07C107B11ED9B3C5410C4F9AE02.roa
Signing time:             Tue 05 Mar 2024 04:25:57 +0000
ROA not before:           Tue 05 Mar 2024 04:25:57 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     133929
IP address blocks:        103.165.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl
                          rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7
        Validity
            Not Before: Mar  5 04:25:57 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65e69ed5-d5ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9e:2e:96:42:5b:60:03:25:a6:11:c4:36:87:
                    b8:af:93:89:22:b0:71:af:73:d1:8b:b1:b4:20:c4:
                    e7:77:67:9a:5f:75:12:cb:b9:d2:90:e3:b0:92:ff:
                    86:ce:fb:11:ac:99:1b:a1:f8:10:9b:1f:4f:2d:89:
                    a4:38:29:9f:2b:ed:c6:f5:c5:4b:f5:e0:83:5a:fe:
                    fb:3e:f8:c2:d5:d2:4a:e7:b6:14:6d:0e:94:d9:92:
                    e1:4a:2b:52:69:e4:d4:fb:ea:9e:35:54:4b:04:98:
                    6a:da:5b:c3:91:d4:fa:5e:b5:8d:e9:5c:70:bf:6f:
                    fe:ad:11:43:92:00:40:f1:eb:68:49:e2:8e:3c:03:
                    ff:23:28:f6:d7:ac:1c:be:36:e3:e9:80:a4:d3:42:
                    af:3d:76:ca:4e:7e:9e:34:eb:06:6f:f1:68:3d:6b:
                    33:54:2c:39:10:f2:2b:ed:d2:17:e7:5f:6a:a8:45:
                    8c:1c:0f:ca:02:1e:63:69:9d:e5:4c:57:ca:a7:33:
                    df:75:a9:86:e3:7c:83:bd:a4:65:f7:d6:4e:4b:1e:
                    c2:ee:a9:12:bb:3f:91:35:5a:17:5d:15:d1:0f:31:
                    d6:85:da:b3:8f:e5:e1:bb:5f:fa:a9:0d:50:36:e4:
                    47:34:26:67:26:54:e1:50:a2:df:86:74:fc:cc:85:
                    5a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:81:8D:CA:43:A6:6B:30:D7:43:9F:F8:18:E2:ED:61:30:0A:35:5F
            X509v3 Authority Key Identifier:
                keyid:47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/F80BF07C107B11ED9B3C5410C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:02:44:04:11:db:c3:b8:67:d0:b8:94:c4:86:3d:71:63:0a:
         41:2c:4e:d4:3b:21:32:fb:3c:1f:7b:6e:45:c4:65:62:09:59:
         ec:9e:08:9c:f6:51:c4:2e:b8:79:66:cc:4d:bc:28:15:10:52:
         c2:2d:76:43:56:b9:63:50:f3:be:54:13:dd:9c:4d:a2:e2:37:
         e0:91:e1:5c:c4:8b:f6:eb:a1:1b:1e:ad:4b:22:93:55:27:be:
         d3:ee:ab:9e:d7:70:97:5f:ee:96:2a:81:30:7f:92:6b:0f:cf:
         20:0d:dd:26:61:25:b8:8c:c3:50:57:6e:b0:49:d7:66:09:5f:
         7c:2b:55:61:bd:a3:02:cf:f0:e7:d6:cf:bd:52:ff:4b:31:0b:
         a6:62:34:c9:3f:41:25:ea:a3:05:7a:dc:99:91:79:11:30:02:
         82:9f:9b:fd:56:6c:48:99:38:69:72:34:22:02:69:17:7d:fa:
         64:72:b0:aa:23:2b:dd:fd:59:65:d6:ba:32:80:11:9e:77:10:
         1f:28:d8:d1:a0:5a:42:78:9c:4d:d2:03:44:39:e7:ae:5e:1a:
         1d:e3:02:0e:73:07:6d:e5:59:ab:7c:85:05:80:2a:60:5c:ef:
         39:df:dd:1b:e4:c1:fb:9c:fc:8e:f6:7d:ca:7a:2e:e8:28:3a:
         15:67:d3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org