Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/C54D0330AA4211EE9EF2DA5CC4F9AE02.roa
File:                     C54D0330AA4211EE9EF2DA5CC4F9AE02.roa (raw, json)
Hash identifier:          pPNr2vP938YFjWaE0p7iyrMUE/RcTz0DWkVXQ5BT9KU=
Subject key identifier:   80:08:40:5F:72:10:31:0B:DA:6B:EE:64:90:4F:02:8B:CC:E3:68:8E
Certificate issuer:       /CN=A9197501/serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127
Certificate serial:       016A
Authority key identifier: 9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/C54D0330AA4211EE9EF2DA5CC4F9AE02.roa
Signing time:             Wed 03 Jan 2024 14:17:05 +0000
ROA not before:           Wed 03 Jan 2024 14:17:05 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     132159
IP address blocks:        103.80.78.0/24 maxlen: 24
                          2001:df1:14c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl
                          rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 04:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197501/serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127
        Validity
            Not Before: Jan  3 14:17:05 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=65956c61-0225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:e4:ab:75:fb:18:79:33:be:3c:e0:de:3d:
                    d3:f8:b3:8a:0e:8a:4e:b7:3a:48:16:00:2d:88:79:
                    53:7e:12:63:57:00:07:83:1b:45:1e:75:e4:44:e5:
                    a9:40:0c:cb:bb:c4:20:d6:85:e3:7e:98:46:d7:49:
                    8f:36:45:9b:b8:fb:0e:70:1c:4f:55:7f:db:67:0c:
                    a3:19:e8:c2:00:dd:35:52:88:e1:86:d5:21:70:21:
                    dd:ab:68:bf:fb:92:fe:21:e1:65:3c:f9:b1:79:d0:
                    b1:94:a3:92:e0:91:08:2e:5c:c4:71:bf:c8:7e:fd:
                    50:59:f8:3a:51:6e:1e:64:a5:f7:51:bd:05:14:80:
                    f5:a5:c3:49:4c:8a:60:fe:a9:05:e5:fc:a1:0a:d7:
                    21:e8:7f:95:37:2e:cb:aa:d4:21:14:67:54:1a:d5:
                    a7:3e:35:57:04:cc:e8:d8:a3:d3:6e:85:db:60:96:
                    f9:11:d3:e5:23:f7:13:76:21:b0:70:0f:43:ee:08:
                    6e:f4:93:c1:33:f9:2c:7f:3f:bf:a1:73:3a:aa:9d:
                    2c:1b:ae:d1:e2:62:ad:e3:6e:38:8d:ae:39:77:f6:
                    f6:85:10:09:1e:04:09:d0:38:7c:6d:75:8b:a0:69:
                    c5:b9:18:0d:44:69:ad:bd:95:f7:1f:95:61:40:f6:
                    58:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:08:40:5F:72:10:31:0B:DA:6B:EE:64:90:4F:02:8B:CC:E3:68:8E
            X509v3 Authority Key Identifier:
                keyid:9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/C54D0330AA4211EE9EF2DA5CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.78.0/24
                IPv6:
                  2001:df1:14c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:c5:e1:ec:2d:77:62:69:33:68:3b:07:6f:8f:f5:6e:1f:3c:
         3b:fa:e8:4a:e9:e9:05:ce:66:c4:67:b4:7d:e8:bb:51:20:9c:
         bf:c3:fd:2d:a6:08:c1:4d:25:e9:a2:75:06:b5:45:f7:22:d1:
         17:b0:a6:bb:f7:7d:59:8e:1f:eb:d0:f8:7b:ce:8a:0a:f9:f2:
         d7:ca:9d:d9:99:4f:cf:d1:e1:d3:07:5f:ea:d8:b4:be:b5:2b:
         47:84:15:6e:e7:57:e8:be:bc:f9:72:b2:96:cf:89:df:da:21:
         16:bb:bb:03:ce:34:46:fb:60:86:53:b2:87:12:13:04:67:c7:
         5b:d8:ef:23:53:c2:79:3c:40:af:85:85:bb:d2:64:e7:dd:fa:
         59:c2:d8:90:c9:83:3f:d6:09:b2:da:7b:84:1e:95:ce:90:2b:
         7c:73:e9:18:0b:1d:a4:e0:2f:f4:38:2a:61:3f:ac:28:89:51:
         84:a5:26:7d:77:a8:c0:b0:e1:da:d8:61:d2:9c:20:57:33:0c:
         08:6a:eb:3b:da:17:9b:66:ff:08:10:b9:c7:2e:89:68:c3:f2:
         ff:89:55:d5:dc:18:b8:ce:06:fb:ba:f8:dc:52:24:0e:3a:fd:
         7f:6e:4c:7b:12:94:10:19:7b:d3:7a:a0:7c:0a:97:8e:3f:f1:
         f4:21:12:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:18:08 2024 by rpki-client on console-fra.rpki-client.org