Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/1EB401948C6511EF881C050EC4F9AE02.roa
File:                     1EB401948C6511EF881C050EC4F9AE02.roa (raw, json)
Hash identifier:          7C+LAYCC66gUOAU+HwT+tfX4EWextGNzWYx6BmysCZA=
Subject key identifier:   01:72:6A:EF:17:FC:A1:C1:0E:76:39:47:3A:E0:4C:D1:66:E2:ED:5E
Certificate issuer:       /CN=A91A4179/serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17
Certificate serial:       0580
Authority key identifier: 16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/1EB401948C6511EF881C050EC4F9AE02.roa
Signing time:             Thu 17 Oct 2024 08:52:21 +0000
ROA not before:           Thu 17 Oct 2024 08:52:21 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     136933
IP address blocks:        103.153.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl
                          rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1408 (0x580)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4179/serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17
        Validity
            Not Before: Oct 17 08:52:21 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6710d044-4a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:16:db:bc:1a:83:e5:f3:c9:1a:ed:af:70:99:
                    d7:78:dd:8d:9e:e3:ad:4f:cd:13:9f:9f:d1:d9:95:
                    e3:94:3a:a5:8c:61:e3:34:53:e1:ac:98:dc:1a:52:
                    fe:96:26:53:ae:fd:79:3e:b2:7b:06:01:3c:66:09:
                    27:11:ca:ad:27:7c:75:11:99:77:6f:e2:fd:18:ca:
                    b4:27:f2:8c:a4:2e:00:89:81:6d:44:df:cc:97:db:
                    b8:b8:06:ee:eb:51:f0:5b:08:6d:44:16:5b:8d:53:
                    05:0f:56:ce:34:d3:3a:ef:47:07:87:07:b4:4c:02:
                    53:13:29:b6:2d:b4:0f:12:f5:0e:7e:e0:28:63:c4:
                    e6:a5:4c:b8:e1:ed:e6:74:13:18:78:bf:c3:97:20:
                    bf:89:0a:ab:60:a2:7e:18:ec:85:94:75:f6:73:69:
                    b8:31:78:54:e2:35:28:33:01:84:40:79:7e:5a:91:
                    76:aa:08:f5:71:8a:e3:0f:a3:75:e8:29:69:2b:05:
                    b8:d5:06:5b:19:04:4b:2d:ee:a9:ae:77:23:cf:d5:
                    36:52:f8:e9:17:d8:58:12:83:07:56:ba:ca:d4:13:
                    96:61:fa:3a:1b:70:78:41:a4:97:37:7a:ff:89:2c:
                    f0:fa:fc:13:99:8d:3d:6e:f5:41:66:c4:d8:c9:a8:
                    ad:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:72:6A:EF:17:FC:A1:C1:0E:76:39:47:3A:E0:4C:D1:66:E2:ED:5E
            X509v3 Authority Key Identifier:
                keyid:16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/1EB401948C6511EF881C050EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:de:60:74:98:a3:d0:e8:ca:7e:9b:18:c4:81:64:9b:8d:6c:
         48:8d:d1:2d:bc:2b:53:49:08:a6:fb:53:ce:fd:f9:58:97:ff:
         ee:7b:95:7e:bf:29:d8:b6:ce:d9:7f:3c:a8:7b:1f:04:2b:4b:
         9c:bb:38:2d:9c:f2:57:2a:c8:7b:03:22:c5:0e:3c:44:77:83:
         5f:fd:b7:81:22:6b:53:cc:ab:45:6d:1f:76:4e:50:49:e6:95:
         db:af:b7:fb:74:4c:02:38:15:27:bb:90:c7:d5:f8:64:50:85:
         54:c8:01:4c:c0:76:30:60:4c:ad:b8:e7:9f:a3:f9:47:9a:13:
         d6:ae:03:d0:be:1d:d5:73:d6:c4:b9:64:18:28:1d:2a:31:02:
         34:8e:26:ad:40:08:7e:ba:24:53:f7:8d:d3:8b:df:20:cf:b5:
         79:e1:91:35:e5:31:4d:a4:b3:c8:bd:e9:a2:3b:44:7c:4d:c8:
         e4:52:91:c6:99:ea:4c:d7:37:03:c4:75:1c:b2:f6:a7:9e:97:
         13:85:50:f5:00:b6:1a:94:9c:a6:32:de:5e:54:cf:e7:86:c3:
         03:34:0b:dc:59:9e:03:1b:a5:c3:29:d7:33:b5:48:7d:92:02:
         2f:08:a2:4f:b8:76:bd:a7:0b:f7:fe:06:4a:a3:23:0a:5c:48:
         c7:36:67:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:21:23 2024 by rpki-client on console-fra.rpki-client.org