Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/2DED8B66D02011ECB021972BC4F9AE02.roa
File:                     2DED8B66D02011ECB021972BC4F9AE02.roa (raw, json)
Hash identifier:          X1fS93fErO++gD03CgWQlQr9RcZXTdWLfGnx0iqRdE4=
Subject key identifier:   27:F5:CF:D1:AD:C7:D8:21:3F:BC:C3:9C:FA:22:63:51:AB:7F:6F:B8
Certificate issuer:       /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Certificate serial:       0267
Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/2DED8B66D02011ECB021972BC4F9AE02.roa
Signing time:             Mon 03 Jun 2024 04:32:34 +0000
ROA not before:           Mon 03 Jun 2024 04:32:34 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     58606
IP address blocks:        203.175.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
                          rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615 (0x267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
        Validity
            Not Before: Jun  3 04:32:34 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665d4762-e90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9d:97:04:13:9c:af:25:e4:8a:cd:06:2c:a2:
                    45:39:d9:c9:45:39:7f:a1:0e:2a:a1:7e:f8:1c:be:
                    8c:36:6f:65:ee:4d:61:a0:b7:a6:13:85:b1:b4:43:
                    81:9b:c9:87:08:82:00:c4:50:19:8d:ed:29:16:64:
                    de:7f:79:7e:f6:56:e8:e6:0c:ed:12:bd:83:03:67:
                    43:99:84:80:88:19:1b:0f:0d:3f:d9:73:9d:9d:99:
                    c1:e0:1d:40:a5:3e:f7:18:9e:7c:eb:99:fe:60:b1:
                    e5:8d:c7:67:cd:e1:a6:15:fa:c0:3e:84:88:6e:42:
                    f8:d6:f0:8b:6b:ed:8c:7a:32:44:95:dc:8f:f3:0e:
                    e5:d4:14:7b:0a:e6:4f:79:7f:0a:29:03:eb:9d:f5:
                    9d:7a:f4:14:df:7e:f1:db:af:06:7d:1f:38:83:1e:
                    b1:56:1e:20:8d:0e:e3:7b:9b:12:57:ae:35:9d:9e:
                    d8:45:97:7a:c6:bd:26:ec:00:ce:cb:d9:38:72:26:
                    40:90:df:8d:ac:b1:c1:20:a9:05:3c:cc:0c:00:8c:
                    9c:b2:d1:67:d7:ba:75:9e:21:ef:c8:e0:03:4d:68:
                    36:ef:90:28:48:3d:a7:7c:f6:a4:cf:d6:c8:f2:55:
                    d8:90:01:1b:b7:f2:23:ed:8a:66:ce:0e:89:cf:43:
                    a6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F5:CF:D1:AD:C7:D8:21:3F:BC:C3:9C:FA:22:63:51:AB:7F:6F:B8
            X509v3 Authority Key Identifier:
                keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/2DED8B66D02011ECB021972BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.175.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:93:52:2a:e2:7c:1a:bb:ea:67:48:a4:a2:9a:45:42:5d:69:
         d8:59:f7:d4:a4:b7:8d:33:2f:d1:2e:b5:da:2a:4f:ae:b7:60:
         a7:6e:72:e2:c7:8b:19:c3:8d:d5:de:a8:87:57:6f:89:ab:77:
         2a:b1:16:b9:8f:bc:41:1d:a1:2e:42:e8:94:0d:89:39:00:2b:
         1b:10:17:10:79:5b:e3:70:60:c0:b5:53:f1:ff:c3:ca:5d:e3:
         da:12:1f:28:ba:57:73:86:87:aa:94:e0:4f:6f:50:7f:25:07:
         c6:e1:42:e2:f2:d5:ab:7b:36:bc:fd:58:1b:25:87:44:84:3f:
         a4:a9:38:5c:eb:42:ed:9d:d6:9f:79:80:5a:07:c5:32:6b:ef:
         d8:1f:9e:c0:c4:ab:af:5e:a7:1b:7d:c4:c9:aa:44:e3:f5:1b:
         7a:b3:7f:55:b9:24:55:51:b4:a6:45:4b:b4:36:3a:d0:52:fc:
         05:3d:72:37:10:31:b8:f4:d3:b4:a6:8f:f0:70:29:4a:0d:6d:
         db:1d:b4:51:03:23:8e:d7:fd:67:14:0b:ac:c3:5a:9f:9f:ab:
         3c:62:d5:e8:49:e6:18:99:d1:7c:74:b2:17:93:61:4a:ca:3d:
         91:f1:3d:18:5d:4d:f6:62:c2:04:5a:42:30:23:f0:62:73:d9:
         64:01:43:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:43 2024 by rpki-client on console-fra.rpki-client.org