Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/27A32D7A16BA11EDB0E9E464C4F9AE02.roa
File:                     27A32D7A16BA11EDB0E9E464C4F9AE02.roa (raw, json)
Hash identifier:          9+/uK3UhO6sPq3a6D0tmdFb5UgMPGW/QyQl9kJEknrI=
Subject key identifier:   B5:B8:BF:67:B2:C2:6C:73:9D:A1:A9:A5:65:76:5C:3E:2C:AD:0E:B3
Certificate issuer:       /CN=A91810B4/serialNumber=153B63A93773B2589882186655DEF30446DD860D
Certificate serial:       0151
Authority key identifier: 15:3B:63:A9:37:73:B2:58:98:82:18:66:55:DE:F3:04:46:DD:86:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/27A32D7A16BA11EDB0E9E464C4F9AE02.roa
Signing time:             Mon 11 Dec 2023 04:15:10 +0000
ROA not before:           Mon 11 Dec 2023 04:15:10 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     136232
IP address blocks:        103.79.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.crl
                          rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 May 2024 04:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91810B4/serialNumber=153B63A93773B2589882186655DEF30446DD860D
        Validity
            Not Before: Dec 11 04:15:10 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65768cce-7d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:26:24:d6:1e:8e:97:e5:da:78:37:1d:be:b3:
                    0b:59:a8:f3:4c:12:7a:b2:f3:fc:24:4d:04:d4:de:
                    d2:5c:56:c3:15:18:ee:f4:c3:14:c4:48:65:b5:ff:
                    53:92:a2:23:4b:cf:04:d5:aa:e0:0f:a1:0f:d2:bb:
                    6b:51:ea:56:4e:83:f2:71:d9:13:72:f6:fc:60:a6:
                    b1:a0:7c:16:4b:df:d7:9c:35:e1:bc:1a:f6:fe:cf:
                    f0:70:50:3f:ca:1d:cb:bd:a6:36:d6:46:0d:3b:b5:
                    d4:82:4b:1c:64:29:53:f2:52:eb:dc:4c:1b:2b:4f:
                    6f:a4:74:0a:c9:06:c2:eb:c3:f8:08:d7:06:aa:74:
                    14:ac:42:06:0d:b5:a5:e7:c3:4d:86:f1:1b:76:cb:
                    60:10:0f:36:df:9d:aa:37:9c:32:56:78:3f:a1:42:
                    7b:68:a4:c7:10:55:6a:55:93:c0:d9:91:97:99:f9:
                    33:b1:38:cb:0b:23:07:36:fd:75:89:bb:af:5b:a8:
                    d2:f7:c1:39:ad:0e:76:68:a1:48:73:fb:f8:f5:38:
                    d1:db:de:38:c1:56:c9:e8:e7:37:87:04:68:02:30:
                    e6:c4:20:8e:90:df:6c:bb:93:cc:2c:df:df:d6:05:
                    fc:8c:47:f1:3c:55:a1:70:f8:c7:9c:2e:73:f5:6e:
                    3d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B8:BF:67:B2:C2:6C:73:9D:A1:A9:A5:65:76:5C:3E:2C:AD:0E:B3
            X509v3 Authority Key Identifier:
                keyid:15:3B:63:A9:37:73:B2:58:98:82:18:66:55:DE:F3:04:46:DD:86:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/27A32D7A16BA11EDB0E9E464C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:a1:0d:92:14:36:9d:d2:dd:e0:b4:16:e2:bf:98:9a:cc:80:
         54:44:81:98:d9:84:09:f0:13:22:c6:4d:32:e0:42:21:9c:50:
         8b:39:cc:b2:44:7b:5f:16:d1:ba:d3:19:22:26:bd:5e:01:1c:
         8f:1d:fb:11:43:ea:aa:98:c4:c4:b6:af:3d:e1:52:f2:29:bf:
         46:9a:14:74:5a:e5:22:69:1a:c8:bf:e4:6d:c9:9b:ad:3e:7d:
         b3:30:81:ae:54:cc:91:38:93:9a:de:fc:db:59:47:7a:30:b5:
         51:29:81:48:00:63:2d:64:6c:78:3e:92:34:af:23:54:60:4c:
         2e:fc:43:b7:8c:a2:4e:f6:5d:e1:a5:5c:cd:53:07:0c:9c:69:
         69:48:ab:c3:ef:5d:44:ce:40:5a:34:37:c3:5a:3a:96:b2:9a:
         55:1f:09:59:db:5a:67:c5:dc:b4:6e:34:22:7d:a0:27:8c:3c:
         d0:09:37:a6:54:6b:73:7e:80:b4:d0:25:5b:a2:9d:3e:0e:14:
         aa:a9:53:25:a9:ed:f7:3e:7d:18:36:5d:21:d8:85:9c:85:b3:
         1b:f5:40:a9:fe:da:dd:e7:58:89:e6:a9:3e:78:ee:09:1c:38:
         be:e0:79:9e:88:92:39:4e:cf:07:95:86:6a:c0:d8:29:d1:d0:
         8b:33:9a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 05:24:56 2024 by rpki-client on console-fra.rpki-client.org