Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/B092FF78479111ECA77ED34DC4F9AE02.roa
File:                     B092FF78479111ECA77ED34DC4F9AE02.roa (raw, json)
Hash identifier:          jUpCb0mQHOG0ltDgFx04SQoa0TGy5bxUOCMm+bVxS+I=
Subject key identifier:   DE:CC:A9:A6:91:18:71:FD:F0:9C:63:66:05:28:6B:11:14:6D:6A:A0
Certificate issuer:       /CN=A91A7CA3/serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E
Certificate serial:       0360
Authority key identifier: 13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/B092FF78479111ECA77ED34DC4F9AE02.roa
Signing time:             Sun 03 Dec 2023 02:13:48 +0000
ROA not before:           Sun 03 Dec 2023 02:13:48 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     148794
IP address blocks:        103.174.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864 (0x360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7CA3/serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E
        Validity
            Not Before: Dec  3 02:13:48 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=656be45c-616f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4e:38:4c:c3:64:eb:36:11:50:28:27:6d:57:
                    a8:97:ac:a6:2d:10:86:f1:4a:d0:2a:67:ea:0b:0f:
                    70:f4:66:68:11:6b:49:f4:c8:30:82:60:cb:a4:00:
                    19:1c:7f:44:96:61:9f:54:1c:fc:c3:f2:0f:d2:2c:
                    ed:b7:bf:e8:22:6d:da:0f:85:d3:3c:a8:e7:0b:d6:
                    47:2a:fd:b3:35:40:ed:5a:2c:11:b8:36:66:da:94:
                    16:ff:7d:ac:52:1e:8f:43:63:5d:45:96:e5:9f:c2:
                    28:77:78:86:67:13:39:1b:95:1d:c2:b0:6b:31:b9:
                    32:7e:35:df:c2:9e:00:37:51:63:3f:12:a0:da:15:
                    a5:d7:3e:ed:0d:67:a3:7a:e7:9e:32:86:8a:2b:08:
                    89:cc:9e:7b:33:5c:3e:6a:03:89:3d:b6:9c:a8:ac:
                    38:8b:69:f3:e3:a7:91:6b:5c:5c:be:d1:b7:6f:f9:
                    63:98:f4:1a:2d:9f:52:67:65:bb:a3:d3:af:8f:1e:
                    fe:10:87:c7:49:0f:6c:79:28:7f:ad:c9:43:b2:8b:
                    4e:70:bd:d8:c0:ec:8e:04:a7:0e:8f:91:89:ed:03:
                    f2:06:e4:c4:63:4d:94:23:83:5a:03:e7:7c:d0:32:
                    1d:0f:e8:22:de:7a:db:53:81:89:07:0a:ce:1c:8c:
                    a9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CC:A9:A6:91:18:71:FD:F0:9C:63:66:05:28:6B:11:14:6D:6A:A0
            X509v3 Authority Key Identifier:
                keyid:13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/B092FF78479111ECA77ED34DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:ce:43:b1:39:8b:61:2a:20:09:25:82:9d:da:19:2a:92:ef:
         56:09:64:92:44:cd:b5:29:ad:3d:b9:01:96:3f:7b:07:c5:cc:
         c2:1b:43:e4:6a:19:00:2d:4a:5e:97:84:a8:9d:36:bf:ba:31:
         f1:f9:cb:97:ff:c1:cb:94:20:b7:32:26:e5:b1:2c:3c:73:e6:
         35:6f:48:20:93:10:8c:7c:f0:c6:87:99:e0:da:c2:20:ab:bd:
         a9:ac:b8:24:c7:16:c9:5a:e8:96:96:3e:dc:e9:34:a5:07:bb:
         ca:b7:8c:39:a0:0d:2c:da:5c:0f:8b:07:3c:47:9c:85:5a:5f:
         6a:09:28:3f:73:94:10:9f:f0:09:5b:c2:6c:a2:2b:3c:9c:fc:
         a9:ba:fe:18:32:a7:b9:ec:52:eb:4d:71:7c:12:be:73:aa:29:
         b8:43:53:6b:7e:6a:b6:86:97:d3:84:3e:fb:5d:ed:98:73:24:
         d7:5e:39:45:35:06:44:26:1b:07:90:34:81:b6:f8:35:a6:cf:
         f4:17:c6:91:63:9d:69:99:f5:01:13:c9:d6:61:5b:8a:b9:a4:
         cd:a3:50:65:75:15:a3:6c:85:28:d8:5b:1a:ed:1d:a9:20:d1:
         5d:a8:a1:02:b3:02:55:98:00:69:0c:75:d6:35:b8:12:78:8a:
         2d:83:f7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:36 2024 by rpki-client on console-fra.rpki-client.org