Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C3D6D0EEA0FD11EC924D4461C4F9AE02.roa
File:                     C3D6D0EEA0FD11EC924D4461C4F9AE02.roa (raw, json)
Hash identifier:          IByKPBiXomM+Ivaurd3VHm7GodgzG9GNEjLFwNSF5O8=
Subject key identifier:   2B:E9:C7:E1:24:81:73:BF:A0:77:E1:A5:82:88:92:15:F8:70:E4:68
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       454B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C3D6D0EEA0FD11EC924D4461C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:32:08 +0000
ROA not before:           Thu 05 Sep 2024 03:32:08 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     131408
IP address blocks:        103.232.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17739 (0x454b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:32:08 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d92638-4559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c3:23:83:a0:97:a6:c2:94:98:b4:ea:b4:96:
                    44:ec:6e:01:bb:8c:42:c5:84:e6:65:d8:0a:0a:79:
                    3d:14:13:d9:58:89:f3:50:ff:39:1f:85:d9:5f:fe:
                    2f:13:13:a6:63:00:df:cb:7d:dc:f3:3c:be:3c:23:
                    9d:0b:2c:13:d9:ba:34:c9:ec:b7:10:79:15:9f:2e:
                    9c:92:ab:72:29:51:4c:99:31:33:45:26:c7:70:39:
                    07:e2:5e:89:a2:3c:fb:88:b9:a2:69:20:5b:ef:db:
                    73:3a:4b:cc:88:ed:08:46:3c:df:6c:24:7f:27:c4:
                    1c:2d:68:0b:2c:f6:46:4a:49:8c:2e:c4:ed:5c:d2:
                    96:e1:ee:f1:eb:a9:b5:a4:00:05:f6:1a:a4:ed:7f:
                    e1:b4:7e:5b:ed:c9:77:c2:1d:0e:02:b2:70:fa:33:
                    d5:1a:bf:45:01:19:12:87:4c:37:44:8f:77:8f:b6:
                    0b:4d:19:be:0f:82:82:f6:ee:a0:ec:cc:d7:c4:bd:
                    49:70:28:07:6d:80:37:69:08:0d:d8:b0:d8:2c:72:
                    c8:07:fd:b3:9f:ce:46:11:87:99:aa:11:d7:60:6e:
                    2b:79:af:c8:3e:6d:4b:23:22:37:11:0c:c6:09:fc:
                    42:52:b7:8c:0e:ea:07:9e:47:b9:7f:c7:29:fb:1f:
                    48:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E9:C7:E1:24:81:73:BF:A0:77:E1:A5:82:88:92:15:F8:70:E4:68
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C3D6D0EEA0FD11EC924D4461C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:86:37:86:d4:3d:42:dd:56:49:ce:cf:3c:15:61:9d:e7:37:
         df:ef:12:be:03:af:9b:06:f9:b0:f0:a2:4d:41:9d:c1:2b:a4:
         40:94:c0:9a:a7:29:80:94:85:f4:90:a9:7b:2c:e9:be:51:62:
         64:3e:b9:19:37:39:b5:15:88:5f:b7:6c:02:84:1e:cf:9f:0c:
         19:4c:39:f2:39:5c:7b:ad:56:d9:7b:c0:d5:7c:74:cd:82:8d:
         e8:a2:ec:b2:3e:53:f8:82:06:a5:bd:97:96:fe:54:d0:20:be:
         78:72:a5:a5:2f:fd:6e:8e:a4:65:0a:d5:7a:a8:d6:76:64:59:
         3e:82:94:a7:3d:f1:0e:a3:41:61:fd:94:60:ad:c4:e6:e0:16:
         c2:63:86:5f:81:de:47:2d:17:66:f6:92:43:cf:5a:a9:a6:ae:
         79:55:e2:d4:00:ee:c0:bd:b6:f0:bd:39:aa:14:3f:33:13:7b:
         35:e0:d5:db:53:6d:84:43:c8:ce:a0:9f:18:47:a8:fa:27:2f:
         d4:54:e8:0e:71:0b:3e:c1:63:55:97:fa:c2:9a:bf:f2:da:e4:
         65:ba:6f:95:b3:a9:01:69:f0:b7:a1:76:97:13:3b:62:0e:df:
         e1:58:55:e4:f1:5f:9d:67:0c:c5:df:0c:f7:d9:07:d4:2b:ab:
         48:20:4c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:05:16 2024 by rpki-client on console-fra.rpki-client.org