Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/8FCF722626C911EE9F1A0917C4F9AE02.roa
File:                     8FCF722626C911EE9F1A0917C4F9AE02.roa (raw, json)
Hash identifier:          2m40/5Eiz2mxDQOIJfLfv2woUCJZElqpIT6FDqyNYis=
Subject key identifier:   B1:C7:B8:97:80:34:6B:B5:F1:88:4C:0A:0F:F9:51:83:95:19:51:3A
Certificate issuer:       /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Certificate serial:       01BD
Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/8FCF722626C911EE9F1A0917C4F9AE02.roa
Signing time:             Thu 20 Jul 2023 06:49:24 +0000
ROA not before:           Thu 20 Jul 2023 06:49:24 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     134507
IP address blocks:        203.175.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
                          rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 04:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
        Validity
            Not Before: Jul 20 06:49:24 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64b8d8f4-81c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7b:0e:ce:43:83:e1:81:d3:d0:bc:a6:32:f6:
                    c4:fe:be:b0:57:0a:58:58:b7:d3:ff:d3:b3:03:e1:
                    10:d2:3b:dc:b5:91:e2:dd:2b:57:4d:a9:1a:4c:27:
                    f5:7a:c7:d3:5d:be:37:c1:c9:35:f2:99:eb:5b:a9:
                    ff:e2:65:76:19:9e:1b:f0:04:12:2e:db:fa:a5:2c:
                    27:33:96:89:f7:f8:7e:8f:9b:00:a8:8c:fe:75:f4:
                    92:3f:7e:7c:bd:31:23:ff:1a:47:82:69:87:5b:33:
                    1e:ec:fd:c3:00:72:95:ce:ba:25:4c:5f:86:93:4b:
                    fa:37:a1:62:d4:9b:5e:6f:f3:12:25:7e:e6:c6:c7:
                    42:fd:59:e6:44:52:93:6f:61:bb:79:5e:56:0e:78:
                    48:1a:bc:71:b5:dc:b9:e4:cc:4f:ee:5c:4d:2e:66:
                    98:3a:4e:ce:d8:1d:1c:5a:6a:ba:6e:d1:d5:cd:eb:
                    5b:55:27:26:6a:63:47:9f:80:46:33:73:8f:50:b7:
                    a7:c6:06:e6:ef:58:0a:3a:a5:24:d5:8b:61:31:30:
                    22:9c:91:57:ec:d8:b5:31:9a:6b:81:83:69:ff:39:
                    bf:47:78:38:13:7b:f5:0d:d2:aa:2d:e4:05:1c:72:
                    a8:50:a8:a0:8b:e0:6b:eb:28:41:97:c7:ca:b3:68:
                    fe:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C7:B8:97:80:34:6B:B5:F1:88:4C:0A:0F:F9:51:83:95:19:51:3A
            X509v3 Authority Key Identifier:
                keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/8FCF722626C911EE9F1A0917C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.175.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:13:80:25:8e:7a:eb:9f:14:20:ba:46:ce:29:cc:63:ac:52:
         cc:ce:86:2d:83:78:a4:e4:ed:f9:75:8f:4c:92:50:f2:dd:93:
         d7:aa:16:0c:5f:11:e0:35:21:b4:fb:fa:c0:01:a1:4c:10:59:
         b3:a2:4c:47:e5:64:05:8b:de:f1:0f:97:a2:3a:7d:05:f6:eb:
         2b:4c:00:46:c3:73:17:c3:b7:f6:68:56:1d:5f:14:bb:69:37:
         e2:34:ba:65:38:5c:e1:cf:e4:7c:81:ad:cc:f2:e5:fa:18:6e:
         67:cf:01:44:f1:36:85:c1:c4:f5:72:6a:3f:43:36:29:e1:d5:
         ae:cc:5f:8d:54:e1:25:ad:06:29:7f:c9:6f:95:5a:7f:a3:58:
         e0:11:9e:f8:b3:1c:1d:0d:08:d3:69:26:7b:2e:ca:07:6e:3b:
         31:8b:51:92:2a:c1:cc:cf:95:9f:2d:bf:1f:12:e9:87:00:ff:
         69:17:d1:25:51:0f:f3:97:17:4d:1c:99:4a:79:3a:c2:7e:ee:
         8f:f9:c1:fe:77:db:19:21:8f:02:56:ba:8e:56:52:51:54:0b:
         75:8f:68:da:5d:35:a7:d7:6c:79:fb:ed:53:97:19:1d:12:19:
         80:5a:40:b5:0c:11:e6:4d:dc:73:26:a0:9c:b9:76:82:a4:8f:
         61:a1:61:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 06:12:22 2024 by rpki-client on console-ams.rpki-client.org