Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/E100C846D0D211EC92E5014CC4F9AE02.roa
File:                     E100C846D0D211EC92E5014CC4F9AE02.roa (raw, json)
Hash identifier:          1/Pe3M/1G4UPq/rk/to0ivJs3udNjtiSMOYgKnEzG+4=
Subject key identifier:   31:6B:09:39:A2:F8:A5:90:D9:2D:FE:8C:A9:35:A5:6A:A6:05:77:4F
Certificate issuer:       /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Certificate serial:       0266
Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/E100C846D0D211EC92E5014CC4F9AE02.roa
Signing time:             Mon 03 Jun 2024 04:32:33 +0000
ROA not before:           Mon 03 Jun 2024 04:32:33 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     45627
IP address blocks:        203.175.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
                          rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
        Validity
            Not Before: Jun  3 04:32:33 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665d4761-b8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:64:cb:ee:51:c8:87:d3:43:c7:54:26:6a:
                    f7:f5:1a:5c:e0:4b:d8:27:70:af:73:33:42:95:9c:
                    73:56:17:29:ea:3d:40:fe:56:82:bb:e9:41:15:7e:
                    af:13:e8:58:8e:cd:78:17:d2:6d:64:1c:0c:0e:f3:
                    a0:c5:3b:4c:6b:1c:13:d2:1b:03:87:75:2f:4e:eb:
                    7c:9e:d0:7d:ed:37:db:87:80:57:79:7e:04:e3:2d:
                    b4:af:28:be:36:0b:9a:f4:37:95:49:2b:17:04:b6:
                    53:a1:90:8a:e7:7c:53:36:47:04:ca:a6:6a:b0:5f:
                    48:43:38:70:7e:45:e7:c5:2c:48:8d:62:3c:08:07:
                    a4:ed:e6:ff:31:5a:43:7b:ac:3a:66:66:51:e2:20:
                    78:13:d7:66:00:1d:d8:c9:62:84:9b:b4:ef:37:dd:
                    5d:c4:b7:b7:df:9e:5d:74:d2:2a:76:e0:10:46:39:
                    1b:0e:ac:01:3e:ab:19:88:5d:b1:28:80:2c:0f:5f:
                    a9:84:e7:d6:0b:2a:cd:83:c0:21:97:b0:4a:d3:9d:
                    e0:bd:11:1e:97:da:e6:04:6c:7a:95:52:45:9c:d0:
                    e7:83:cf:59:3c:86:9a:99:5a:86:aa:98:0b:e2:f1:
                    86:7a:6b:b0:39:22:f8:33:72:09:26:42:dc:05:03:
                    b6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6B:09:39:A2:F8:A5:90:D9:2D:FE:8C:A9:35:A5:6A:A6:05:77:4F
            X509v3 Authority Key Identifier:
                keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/E100C846D0D211EC92E5014CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.175.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:0f:f9:36:25:4d:79:cc:e7:48:aa:c9:21:1d:7a:12:7a:e9:
         24:ce:90:d0:d7:b9:c1:2e:ca:a1:50:33:9b:b2:2f:7c:ff:a9:
         7a:49:01:d4:e2:d2:48:37:6e:28:ae:6e:f1:3d:6c:7d:8e:9e:
         e1:23:27:e0:87:30:bd:14:60:e9:ac:91:33:54:1e:c8:7b:79:
         4b:93:78:00:d2:49:40:dc:f2:da:b0:2e:35:f2:3b:a4:db:a1:
         44:90:00:4c:22:da:56:c9:f0:9f:72:4e:bd:75:f7:fb:98:36:
         4c:37:33:a4:30:51:e8:d5:a1:7c:63:69:1d:65:2e:a8:4a:26:
         dd:d2:49:f9:d3:14:8f:7d:66:0b:59:cd:5d:9d:e7:3f:9f:13:
         7d:35:b3:78:f4:82:c9:4f:e1:84:0b:55:f5:51:55:fd:ea:5e:
         eb:a7:0b:b9:3d:c3:35:f5:5f:b0:34:06:68:a9:59:41:16:f5:
         68:6f:d9:21:e6:2c:5f:9d:9b:26:ee:34:67:aa:6c:40:14:97:
         ce:fb:e0:5c:82:34:3b:79:b3:9e:86:09:68:e8:60:6c:62:a7:
         7c:d5:66:f6:86:f1:11:ab:91:ce:db:22:8d:81:b6:47:e2:ae:
         21:7e:ac:bf:78:76:a2:cd:7b:64:75:53:8a:28:87:9f:87:99:
         92:0f:d9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:47 2024 by rpki-client on console-ams.rpki-client.org