Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/3EACF95EEBB511ECA410BF6DC4F9AE02.roa
File:                     3EACF95EEBB511ECA410BF6DC4F9AE02.roa (raw, json)
Hash identifier:          L9+PGVNUDWdoaT135f9PdXeHibPYhLnDDhv1pA06ICk=
Subject key identifier:   E7:44:AF:05:DB:73:4E:90:4B:E2:F6:95:4F:97:AF:86:44:B7:9A:D5
Certificate issuer:       /CN=A91854B7/serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0
Certificate serial:       0547
Authority key identifier: F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/3EACF95EEBB511ECA410BF6DC4F9AE02.roa
Signing time:             Wed 15 Nov 2023 00:11:32 +0000
ROA not before:           Wed 15 Nov 2023 00:11:32 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     4826
IP address blocks:        103.198.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl
                          rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1351 (0x547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91854B7/serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0
        Validity
            Not Before: Nov 15 00:11:32 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65540cb4-7573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cf:10:d4:08:55:fb:c1:d4:99:3d:ba:6d:9c:
                    3d:6a:34:60:f9:e0:4c:9f:1c:34:0c:7f:b6:69:28:
                    08:d2:4e:88:43:5e:eb:4f:1e:6d:e8:a2:c0:94:4d:
                    ca:8e:64:90:6a:f6:62:56:68:69:e8:05:5a:da:ce:
                    78:c2:5f:7a:12:43:d9:95:9d:d5:ac:bf:ea:71:a0:
                    98:50:d9:a7:5b:54:e7:53:d8:f0:56:4c:80:4d:14:
                    a0:e8:fb:9f:d3:8e:b3:40:18:f3:b0:9a:0e:24:ae:
                    cc:69:9c:f2:de:d0:b2:7d:53:8c:bf:80:95:27:95:
                    6a:99:2b:39:5e:c1:cf:6a:10:c8:11:58:37:06:d0:
                    4f:c8:e6:12:a4:f1:2a:38:c2:c1:a2:42:72:83:f7:
                    e4:cf:ab:09:e9:d4:77:a7:0c:88:b9:58:c8:5c:8b:
                    2c:b5:84:cb:88:ad:09:a9:91:40:16:2b:6b:b7:e4:
                    ed:82:57:bb:9d:dc:75:b2:3f:40:63:fb:5f:c8:c0:
                    29:5d:8b:ff:3a:15:91:93:12:15:21:3d:8e:7a:c3:
                    b9:81:05:39:06:7e:d5:ab:c4:d8:3f:16:36:38:8e:
                    04:be:a1:76:2a:8f:93:11:9d:8e:05:d4:77:67:98:
                    23:9b:15:8c:0a:e4:fd:b0:fe:71:38:65:81:94:3a:
                    ba:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:44:AF:05:DB:73:4E:90:4B:E2:F6:95:4F:97:AF:86:44:B7:9A:D5
            X509v3 Authority Key Identifier:
                keyid:F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/3EACF95EEBB511ECA410BF6DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:8e:3f:43:e0:0e:20:7f:0c:1d:e6:cc:41:98:81:59:0b:3a:
         96:8e:c7:89:d4:bb:de:12:6a:92:3d:b8:04:b2:22:b2:0b:30:
         2e:9f:df:3b:d6:cd:26:f4:06:00:54:85:b5:2e:c7:20:5e:3b:
         7f:eb:26:98:c8:b8:dc:86:91:09:bd:f0:5e:fd:c0:8e:ec:e8:
         4c:38:07:b8:7d:8c:1e:e4:1f:ae:db:78:7f:f4:34:12:00:37:
         c8:b7:14:7f:c4:b3:93:11:b0:23:2c:54:4f:84:5b:24:0f:e7:
         41:7e:74:04:21:49:79:91:69:86:18:d2:65:21:9d:bf:43:1c:
         28:55:d4:a7:3f:0f:3f:cf:ae:74:f0:80:db:fd:e1:47:18:4c:
         c4:13:a4:b2:d4:74:ce:37:1a:18:6d:e3:51:3b:28:48:f7:4a:
         4d:de:f6:ed:fc:af:86:ac:de:c9:0e:b2:10:24:d8:4d:56:48:
         0e:65:f3:4a:2d:6d:d3:e2:41:23:c0:c2:db:98:7d:2e:7c:28:
         e7:8e:7d:b1:d6:c9:05:38:65:23:a8:a6:0c:f6:31:e7:e1:99:
         d1:f1:08:a8:15:04:17:a3:66:51:51:b9:17:d5:77:dc:49:98:
         f2:b7:27:d1:9c:aa:3a:8d:95:6a:f4:55:29:32:91:53:8d:fe:
         35:9f:e7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:06:59 2024 by rpki-client on console-fra.rpki-client.org