Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/47610B18F5A811EEA84E8049C4F9AE02.roa
File:                     47610B18F5A811EEA84E8049C4F9AE02.roa (raw, json)
Hash identifier:          eSiI/oC1ty9113uzmLbZZm5hsJhJGqVqy8fDd/ohEuI=
Subject key identifier:   30:56:5E:F7:2A:2B:E1:14:03:BA:D4:FB:5F:72:54:F9:21:21:40:B0
Certificate issuer:       /CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197
Certificate serial:       44
Authority key identifier: FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/47610B18F5A811EEA84E8049C4F9AE02.roa
Signing time:             Fri 09 Aug 2024 06:37:43 +0000
ROA not before:           Fri 09 Aug 2024 06:37:43 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     58700
IP address blocks:        103.159.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl
                          rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197
        Validity
            Not Before: Aug  9 06:37:43 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66b5b936-ec40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d6:45:15:80:a0:cd:10:a3:0a:ec:a9:7f:64:
                    1a:1e:5b:7e:ae:d4:29:bd:27:6f:ec:00:37:28:7e:
                    41:35:52:a4:01:6c:ec:01:f3:03:8a:f7:7e:ea:de:
                    cb:d4:29:db:86:37:77:93:9a:06:38:60:e8:89:c6:
                    94:78:52:cf:95:e7:0b:66:2b:d1:57:da:ab:8e:f5:
                    32:ef:d5:d5:0f:dc:be:3d:d1:bb:c6:a0:b7:38:40:
                    e2:87:96:d7:c5:95:df:07:c9:a4:a9:4c:68:45:7e:
                    14:a1:d7:91:a7:07:f3:43:78:0e:d5:85:6e:42:f1:
                    10:d5:5a:23:61:84:f6:9c:ba:71:77:2e:a9:64:4e:
                    32:61:34:e0:f4:16:42:04:71:a7:21:a6:9f:f4:b2:
                    4f:45:81:3e:12:a7:27:6f:1a:44:be:7a:b3:3a:10:
                    d7:d2:ea:42:5b:42:19:90:82:6e:e4:cc:d2:2e:cd:
                    a6:40:0b:3d:6d:ee:5d:d2:e2:79:f8:ed:6e:bd:9d:
                    6d:0c:d0:2e:e8:b6:46:92:a6:19:d3:b5:37:3f:24:
                    9e:93:fe:cb:84:e4:87:f5:4f:8c:33:55:72:45:c6:
                    fb:81:6b:d4:d4:60:1a:d7:11:4a:12:7e:29:f0:30:
                    b4:81:99:dc:4a:2f:fb:7c:7d:bc:b9:42:ad:bd:f9:
                    a6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:56:5E:F7:2A:2B:E1:14:03:BA:D4:FB:5F:72:54:F9:21:21:40:B0
            X509v3 Authority Key Identifier:
                keyid:FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/47610B18F5A811EEA84E8049C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:52:14:c6:75:51:03:df:e4:36:86:1b:01:b5:dd:1a:d4:44:
         d6:ea:5d:dd:a4:ab:b3:da:50:d9:04:75:a1:c3:69:41:5c:16:
         37:6e:97:a9:ba:03:00:f5:15:e1:f8:d0:fb:fa:bd:ea:bd:95:
         cc:b9:0b:bc:ee:b7:94:0a:aa:0c:84:2a:04:89:b7:26:c3:e3:
         fc:07:91:4f:56:2e:fc:04:c0:3b:b6:8c:77:68:e3:60:cf:12:
         4d:e7:74:64:0c:8a:27:2a:d1:ce:d9:1d:ed:f4:a3:47:45:e5:
         c5:7f:7b:02:45:15:f4:c0:ad:92:fb:f2:7f:34:0d:06:34:b1:
         57:23:c4:38:be:b7:1b:93:f6:06:7a:c6:b2:25:12:ec:3d:8c:
         92:40:c7:6d:e8:3e:70:90:fb:c3:8a:4f:56:05:88:a3:c6:6b:
         7d:48:fe:51:cc:ae:07:e8:a2:20:c5:ff:e8:ab:2a:5e:59:28:
         4c:58:98:62:21:3a:b5:79:13:56:9c:7f:a8:a4:bb:46:56:c6:
         d9:66:df:71:52:97:e0:0d:7e:58:f3:d2:35:c5:b0:fd:bd:46:
         61:9e:3e:0f:9e:53:c6:a1:92:86:66:73:f3:a6:ee:c8:d8:dd:
         d7:b2:71:ba:ed:de:b6:cb:ec:d9:8c:6d:77:a3:25:e6:fa:a3:
         5f:16:16:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:47 2024 by rpki-client on console-fra.rpki-client.org