Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/80FB76EC0B6011EFBA54642AC4F9AE02.roa
File:                     80FB76EC0B6011EFBA54642AC4F9AE02.roa (raw, json)
Hash identifier:          idRxTmVX+WevRQ5mlD6jDgEs7mvtdTJ5L0zlnYE0udQ=
Subject key identifier:   28:FF:63:E3:0A:F6:F2:99:9C:FC:70:83:4C:5F:31:D5:92:EC:C0:C3
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       45BC
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/80FB76EC0B6011EFBA54642AC4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:33:46 +0000
ROA not before:           Thu 05 Sep 2024 03:33:46 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     149080
IP address blocks:        103.183.110.0/24 maxlen: 24
                          103.183.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17852 (0x45bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:33:46 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d9269a-c56e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:41:88:c0:fa:16:61:3e:57:8f:28:80:99:6a:
                    3c:fa:28:5d:5e:80:50:72:19:e0:e1:a8:8b:52:5e:
                    98:b5:8e:7e:b3:54:f1:ae:b1:60:b3:79:84:49:5a:
                    66:09:33:37:80:76:53:17:4f:48:0b:2c:81:3c:c5:
                    b7:ba:83:63:90:b4:ea:df:f9:c4:f4:7b:55:08:24:
                    a3:79:3e:b0:b0:1d:7c:c5:2a:a0:07:61:13:85:14:
                    0c:44:aa:09:6a:08:44:d3:5a:b0:5f:01:c7:6a:5d:
                    f0:fd:f4:2a:65:f0:a8:9a:6e:0c:f0:0b:90:af:7b:
                    cc:09:9c:c6:5a:18:2f:8d:35:44:c9:dc:a2:d3:9b:
                    da:c4:fa:29:ed:4d:a5:8e:31:6a:18:0a:8b:91:2b:
                    c6:62:4f:b3:c1:57:98:9e:fb:de:40:3a:04:b2:c1:
                    20:24:54:23:5a:e7:71:11:ef:22:4b:50:5b:77:0c:
                    03:45:c2:19:5d:7c:f4:d3:4d:41:e3:9e:57:df:6e:
                    5e:39:34:c4:5a:2d:1b:15:0d:01:a3:e9:a0:b3:69:
                    90:89:66:31:67:df:0d:35:b0:ee:fd:50:18:c8:c3:
                    dc:d6:5a:6d:71:98:55:9d:41:d9:cf:bd:aa:d3:69:
                    d8:84:8b:2e:33:66:90:51:28:88:cc:c4:1b:25:1b:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FF:63:E3:0A:F6:F2:99:9C:FC:70:83:4C:5F:31:D5:92:EC:C0:C3
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/80FB76EC0B6011EFBA54642AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.110.0/24
                  103.183.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:8c:95:70:73:32:37:d7:33:99:58:41:ca:87:fd:60:a9:5b:
         03:97:be:a6:4a:74:0f:35:0e:2e:ef:9f:f4:7b:a5:56:6d:9a:
         fb:95:05:3a:c3:1b:e4:7a:09:f4:94:6c:be:30:7e:a7:32:b0:
         74:60:20:2b:9e:d3:ed:c8:41:45:fb:fb:b6:e1:d4:4f:bf:3a:
         1b:58:95:24:62:96:19:f5:a0:23:05:0c:72:2f:37:07:37:e8:
         8a:a3:ba:b1:04:9b:39:5f:fd:c4:05:44:b9:aa:28:bd:be:24:
         9d:81:65:dd:b7:58:9a:54:6b:85:19:9e:2f:96:da:92:51:fd:
         bb:51:16:b4:57:55:f2:ad:eb:66:81:5f:29:25:f7:b6:57:43:
         2f:d9:8c:f3:bd:86:d4:71:5e:af:a0:04:62:34:fd:f0:15:aa:
         a8:c4:66:ff:4e:ec:5a:6f:59:25:5d:d5:da:30:f5:83:5f:5b:
         ca:20:67:c0:df:13:56:61:85:71:bb:0f:9f:e5:80:10:e6:cc:
         1c:a5:a0:41:c6:90:2b:35:46:02:6d:a3:5f:6c:e1:60:4c:7b:
         57:9b:0c:4c:81:fe:e0:bb:06:07:60:62:e3:e3:b2:78:85:58:
         23:07:08:52:a2:6c:8e:8e:54:9a:a5:b2:f4:46:23:fb:66:ce:
         b2:e3:ac:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:32 2024 by rpki-client on console-ams.rpki-client.org