Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/FF4EB6B2395811ECA422C462C4F9AE02.roa
File:                     FF4EB6B2395811ECA422C462C4F9AE02.roa (raw, json)
Hash identifier:          4tA4qoDdoOVKwdkSvB7F8+cRC0ox1Y1iSU6OwyReKas=
Subject key identifier:   28:19:6A:B3:00:41:B3:C9:BC:DE:1F:DA:7C:AC:2E:F5:6E:B7:0F:19
Certificate issuer:       /CN=A91A7C77/serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460
Certificate serial:       02
Authority key identifier: 61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/FF4EB6B2395811ECA422C462C4F9AE02.roa
Signing time:             Sat 30 Oct 2021 08:11:35 +0000
ROA not before:           Sat 30 Oct 2021 08:11:35 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     141004
IP address blocks:        103.171.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:29:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7C77/serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460
        Validity
            Not Before: Oct 30 08:11:35 2021 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=617cfe36-d571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:57:a0:40:ec:27:ae:66:7d:ec:4c:a5:73:b9:
                    bb:30:9f:14:5c:23:e6:1e:7f:cb:b0:21:42:57:ed:
                    7c:6e:95:3a:0a:ea:d9:09:d9:b7:6c:24:b9:98:f9:
                    a7:5e:9e:12:6e:a9:99:0d:68:02:f5:5c:5b:6f:75:
                    88:30:5a:b9:aa:90:94:39:78:99:e2:44:56:cf:a4:
                    d2:ec:d6:e9:8b:ba:1c:ce:4f:aa:6d:94:e3:1f:34:
                    cd:ea:b6:1f:e5:1e:fe:14:d8:39:d6:fd:77:ca:35:
                    21:97:04:5e:4f:26:f0:5c:f2:89:86:09:de:44:bd:
                    fd:45:c3:5c:bc:eb:e8:3d:97:a0:b4:d4:0e:8d:36:
                    ac:87:0a:8e:35:2e:cc:1a:c2:ae:8e:e4:27:46:ba:
                    df:c3:bb:19:10:d3:44:72:c5:6d:1a:9d:08:51:e0:
                    58:38:1b:9e:ce:48:0c:e3:5d:d0:9e:74:85:7b:85:
                    6e:f7:e4:bb:03:1c:12:71:66:de:20:78:1d:15:32:
                    2a:e9:7e:c6:fb:ad:a8:b8:95:db:9c:7f:97:92:86:
                    b7:45:45:4f:f6:40:c8:0e:47:d0:a2:d1:30:08:31:
                    03:7e:31:2a:fa:ab:4b:8a:a2:d6:56:99:f0:2b:be:
                    f5:83:c0:53:91:f4:8a:be:2b:20:e6:2e:14:f7:5d:
                    85:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:19:6A:B3:00:41:B3:C9:BC:DE:1F:DA:7C:AC:2E:F5:6E:B7:0F:19
            X509v3 Authority Key Identifier:
                keyid:61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/FF4EB6B2395811ECA422C462C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:b7:6b:e5:4b:ae:f6:76:92:78:88:6b:dd:17:cb:58:d0:2c:
         50:d7:94:88:17:78:63:fe:d6:aa:62:18:d3:73:8d:be:d7:65:
         78:89:b3:23:88:88:e2:6a:63:6c:9b:56:db:b7:5e:25:87:a0:
         2a:34:07:0e:ca:76:56:57:a1:07:d8:20:cd:2b:14:79:53:32:
         6f:d3:4d:72:39:d7:91:5d:fd:1a:c8:94:2b:6f:bd:f8:17:58:
         f8:d0:62:c3:ac:19:5b:15:ca:bd:f1:dd:f9:c2:44:0f:e1:de:
         52:f4:dc:75:dc:80:c7:29:2c:a1:a7:48:b0:a8:a5:71:f5:eb:
         c0:4b:c1:47:4b:4b:32:b8:27:bd:63:1e:64:61:4f:4d:11:2c:
         be:0c:86:e8:6a:45:d7:3c:f9:45:e3:51:ad:2a:06:b6:a4:25:
         88:bd:27:82:d2:70:08:85:19:e9:d2:11:8c:36:3a:fb:a3:54:
         00:e4:1e:23:a2:ec:38:a3:3a:26:e4:bd:e5:c1:6d:91:9d:f0:
         0c:b3:b7:d9:3d:0e:ad:df:b1:2e:64:bc:c3:1d:e7:5d:17:ca:
         57:7e:b4:00:43:79:ad:f8:38:31:d8:e2:20:57:49:3f:34:75:
         dd:d3:82:4f:9e:11:21:2c:08:c6:80:0f:8f:e9:7f:8e:8d:ed:
         e8:cf:39:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:17:00 2024 by rpki-client on console-fra.rpki-client.org