Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa
File:                     65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (raw, json)
Hash identifier:          cNnbg9xxC6U5sNak7P0XJVCbmPrEMBO9iWPAKMk7ubw=
Subject key identifier:   51:2A:E0:F4:FD:47:BF:37:75:C3:ED:98:CF:88:2D:9F:D3:32:D4:98
Certificate issuer:       /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
Certificate serial:       0177
Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa
Signing time:             Thu 24 Oct 2024 07:41:36 +0000
ROA not before:           Thu 24 Oct 2024 07:41:36 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     152918
IP address blocks:        103.46.184.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl
                          rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
        Validity
            Not Before: Oct 24 07:41:36 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6719fa30-4b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a2:c4:7f:72:02:83:4e:7b:f2:77:da:19:45:
                    12:71:4d:82:4b:60:ff:03:dd:e4:9a:13:b6:9c:f2:
                    38:2f:2b:63:c2:24:f8:4f:39:a6:e7:86:29:f7:96:
                    23:b9:26:fb:2e:fb:77:36:b1:09:12:73:92:bf:18:
                    e8:28:af:91:37:57:1f:df:e7:3d:3d:9f:1b:7c:9b:
                    63:88:6e:d3:00:85:ce:19:fc:2b:a6:ce:b1:c6:de:
                    65:ef:26:28:4d:49:27:66:1c:fb:48:a8:6a:98:79:
                    cf:86:c6:5e:43:f6:11:17:3c:3a:95:df:d1:17:80:
                    46:b2:e7:2e:38:bf:b0:e3:7f:d2:b9:7c:cd:96:b5:
                    1a:d1:91:73:64:96:47:a0:d8:f5:14:fe:cb:89:c4:
                    58:5e:88:1c:fd:ed:8a:d5:28:10:a5:48:df:39:d3:
                    fd:c9:ae:36:ae:72:d5:37:c3:c4:2c:ff:7d:51:50:
                    40:8f:83:96:fb:26:40:b2:fb:c7:3d:46:56:d1:4b:
                    72:dc:f6:e7:49:51:cf:18:78:26:71:dc:f1:4b:4d:
                    c2:3b:d6:8f:c3:75:71:b7:e9:18:aa:d2:4b:c6:a5:
                    eb:52:f3:03:3d:13:e4:56:91:9c:92:df:11:67:05:
                    f4:27:5e:13:98:52:f4:7f:e5:b9:45:7b:50:13:0f:
                    41:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2A:E0:F4:FD:47:BF:37:75:C3:ED:98:CF:88:2D:9F:D3:32:D4:98
            X509v3 Authority Key Identifier:
                keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:a7:ab:5f:d7:9a:e4:c7:08:22:fd:94:f0:d1:a4:4e:4b:63:
         c8:9c:52:8c:0b:5e:fd:9e:97:fa:90:0a:b0:69:13:53:aa:fc:
         64:c3:6b:72:2d:da:34:9b:73:e0:44:bc:ea:b8:4f:98:55:5f:
         6c:b4:48:d2:77:47:2d:53:88:b8:b1:fc:99:94:33:d1:56:e7:
         fe:bf:4b:5f:8a:b2:65:0e:f0:7d:80:27:78:e4:b3:27:34:f0:
         65:d5:b1:6e:26:90:71:61:49:c7:fc:b1:a9:54:f8:b2:2e:03:
         d0:ad:ed:92:ba:6f:59:bf:d0:bb:64:4f:bb:ae:ad:da:0e:b2:
         88:ec:e7:2f:e8:a7:22:e2:1c:70:bc:52:8f:f2:fe:11:91:51:
         86:fd:e7:a9:4c:f3:bc:b1:a2:cc:78:07:d9:8f:cf:b7:09:ee:
         ec:61:ad:22:11:b1:92:52:15:8a:6a:27:0f:83:8e:36:dc:54:
         6e:d2:11:15:38:9f:9e:80:dd:6f:25:ff:39:67:f6:0b:55:e3:
         2c:c5:c7:ea:55:5c:e2:05:5e:ac:66:3a:57:b5:62:b7:d3:d3:
         34:76:d6:6e:14:06:f9:8a:6b:3b:a1:36:68:bd:f4:07:a0:c6:
         9c:05:fc:e2:80:ba:7d:83:d5:90:00:dd:55:84:16:87:74:45:
         a3:87:2c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:38 2024 by rpki-client on console-ams.rpki-client.org