Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/776893761C9F11EAB9B84F25C4F9AE02.roa
File:                     776893761C9F11EAB9B84F25C4F9AE02.roa (raw, json)
Hash identifier:          uydGEfUeJ9GoCJahUH8Dg4uVB/Z/ZVqnT2h9hBM2XBk=
Subject key identifier:   B4:55:09:3D:ED:92:44:B2:64:03:8F:82:26:46:E6:20:36:4D:B3:07
Certificate issuer:       /CN=A91A8259/serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34
Certificate serial:       0AE5
Authority key identifier: 15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/776893761C9F11EAB9B84F25C4F9AE02.roa
Signing time:             Tue 20 Feb 2024 19:48:30 +0000
ROA not before:           Tue 20 Feb 2024 19:48:30 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     138605
IP address blocks:        103.134.72.0/24 maxlen: 24
                          103.155.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2789 (0xae5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8259/serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34
        Validity
            Not Before: Feb 20 19:48:30 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65d5020c-720f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:50:26:36:e6:d5:a5:11:53:aa:8b:af:77:ef:
                    68:28:5c:13:cd:40:06:ab:7f:c6:3b:33:8b:ff:bc:
                    e5:f3:69:b6:7f:8f:8d:bb:2b:8a:0a:78:35:2b:2f:
                    d8:90:fd:fd:48:41:51:84:44:e4:ef:52:cc:2a:b5:
                    13:13:05:16:ef:ea:d1:c6:12:0b:4f:bd:93:80:c4:
                    4d:bb:fd:fc:0c:1e:86:be:1b:2d:2a:30:57:08:76:
                    1b:2e:62:c8:b1:94:ee:11:94:e0:fa:b7:61:e3:63:
                    32:3e:6f:1e:50:39:6a:f4:08:4d:ab:aa:d4:ee:85:
                    d2:4b:65:61:6d:b7:e6:82:c9:c2:6e:f5:95:2d:56:
                    ad:3a:9d:4b:c7:af:37:85:ee:f5:6c:cc:d3:06:43:
                    be:3d:1a:84:d5:a6:ea:73:79:e2:b2:de:6f:1a:3a:
                    b1:24:ee:9c:4c:62:d6:e6:4c:90:cd:63:b1:31:1e:
                    7a:2e:c0:cc:94:70:48:0e:26:7f:a2:af:f7:51:08:
                    23:13:87:a1:12:fd:08:94:2d:0b:42:08:86:5d:3b:
                    0f:7d:57:96:17:84:bc:14:aa:3e:e4:cd:94:42:7c:
                    25:e9:e7:31:70:aa:b8:ad:82:44:e5:ba:3f:35:71:
                    4a:50:a5:6b:1e:17:89:05:2b:5c:bd:d0:6a:84:77:
                    32:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:55:09:3D:ED:92:44:B2:64:03:8F:82:26:46:E6:20:36:4D:B3:07
            X509v3 Authority Key Identifier:
                keyid:15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/776893761C9F11EAB9B84F25C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.72.0/24
                  103.155.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:7d:e7:8e:60:23:99:bd:7a:39:6d:ce:02:d7:62:ff:7e:2c:
         07:af:6c:8b:df:ff:dc:24:bc:ce:c1:11:64:b6:31:70:ce:b4:
         2b:df:57:d0:05:2c:6c:ef:85:8d:d5:05:22:0b:3f:84:83:02:
         c5:cf:a7:b9:7f:30:aa:02:94:b8:19:f1:29:8e:81:1a:ff:8e:
         dc:57:ef:7f:36:ad:b3:f8:d3:be:fc:b2:90:98:ad:72:de:ad:
         90:25:ad:82:bf:ec:6e:35:c2:b8:83:58:7d:c1:13:b5:13:3a:
         15:77:ff:c4:06:12:29:5f:e7:0c:68:ce:2e:29:fd:fe:a3:66:
         72:f3:5e:69:b1:4b:e1:36:48:19:9b:90:30:e2:cc:16:6c:1b:
         9a:be:58:00:17:a7:8a:26:b7:c1:77:6e:53:a0:41:c4:67:b0:
         25:2f:56:3b:9a:55:50:d0:2d:5a:e4:c3:f2:4f:0f:43:67:49:
         80:0e:e5:cd:96:40:f4:f7:e1:aa:0c:c5:fa:57:0e:bc:67:d7:
         b8:8a:35:a1:d8:99:05:f6:63:d4:27:e3:56:c0:91:bb:4b:7f:
         23:c8:d3:4f:3b:5c:b4:b0:fb:cc:da:9f:53:aa:7d:fd:bd:d4:
         29:5e:c5:61:84:35:a2:c8:70:29:17:d6:cc:75:39:d5:23:ed:
         2e:a8:37:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org