Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/3818D9A09A9011EFB14F1729C4F9AE02.roa
File:                     3818D9A09A9011EFB14F1729C4F9AE02.roa (raw, json)
Hash identifier:          2HuzCk6S18IuIuNY88Jnmogc9ez8HXD2AaJ8nr4dsM0=
Subject key identifier:   F1:F5:80:0F:16:C5:58:8A:F1:FA:82:6B:05:44:49:97:8D:C3:73:94
Certificate issuer:       /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
Certificate serial:       0946
Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/3818D9A09A9011EFB14F1729C4F9AE02.roa
Signing time:             Mon 04 Nov 2024 09:36:08 +0000
ROA not before:           Mon 04 Nov 2024 09:36:08 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     9825
IP address blocks:        103.74.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl
                          rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2374 (0x946)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
        Validity
            Not Before: Nov  4 09:36:08 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67289588-08a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b1:00:aa:7c:85:27:61:8a:7b:3b:2c:66:c3:
                    94:bf:b6:a5:ee:58:d4:74:2c:34:6f:16:e6:db:07:
                    d1:b9:ce:93:c1:a3:f9:57:08:ba:7e:7e:4b:c0:9d:
                    48:34:88:bf:4d:58:f9:99:00:ce:97:e9:59:bc:29:
                    5e:02:be:2b:2f:06:8c:90:c3:97:70:13:c0:b2:84:
                    d1:78:8d:85:9a:01:9d:21:df:ef:91:f5:57:93:c6:
                    1c:f4:77:17:b8:bc:04:f6:75:18:ea:20:19:04:20:
                    5f:ed:60:93:d9:ae:06:51:24:6d:8d:af:d8:75:c2:
                    0d:92:cf:46:7c:0e:ac:a0:cc:dc:f3:ca:c4:75:ba:
                    cd:dd:0c:b4:a0:3e:2c:41:82:3f:0f:4d:f2:62:1f:
                    c4:30:29:dd:d7:8b:b7:e9:57:67:da:18:9e:75:f2:
                    02:75:1d:00:77:ca:cf:39:a7:66:a0:42:82:e1:d8:
                    33:a3:6b:52:58:7b:16:9a:25:83:39:f8:2d:45:2a:
                    8a:53:92:a8:8a:e6:9b:db:c1:7a:96:d8:b2:7d:af:
                    83:10:b3:d3:c5:d1:c8:17:df:9e:fe:61:84:93:95:
                    4a:dd:6e:ba:49:59:c0:0b:85:02:34:a4:2d:23:f7:
                    48:08:1a:c4:49:9f:77:2b:68:b5:3e:42:4a:97:21:
                    bb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F5:80:0F:16:C5:58:8A:F1:FA:82:6B:05:44:49:97:8D:C3:73:94
            X509v3 Authority Key Identifier:
                keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/3818D9A09A9011EFB14F1729C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:d1:73:6d:c1:8b:50:44:59:3c:9b:d7:cb:78:67:ef:1e:80:
         59:e3:f5:f7:66:44:1b:1d:c1:64:cd:e7:ba:f1:1a:0c:8a:ab:
         12:e3:ee:56:b4:fb:3a:fd:f1:e9:ff:0a:6d:e8:50:12:94:ed:
         66:74:1e:fc:0a:0c:ac:a9:00:d2:3f:ea:ff:c3:d5:ad:b8:73:
         ca:dd:4a:90:ad:b8:2e:e4:77:0f:44:e9:24:6e:d1:e4:96:3e:
         44:48:2d:ac:c6:a1:46:2f:c2:bb:c9:a7:5e:0d:18:19:ae:0c:
         1d:d5:53:e8:19:c7:58:de:48:fc:b1:e3:fa:df:6e:f6:27:88:
         d0:b1:1e:52:d4:dd:e6:58:c1:47:4a:ea:66:7b:2b:02:42:10:
         55:d8:a6:c6:26:52:1a:19:7c:c9:54:90:be:4e:94:06:9c:fc:
         82:68:4b:a1:3d:54:ae:33:9d:61:3a:0c:90:38:80:39:e8:97:
         d2:9a:0f:4b:c3:90:5a:f5:b8:7d:35:3f:87:60:75:a6:5c:b3:
         12:30:c7:a7:8e:f6:60:f4:55:b8:66:6e:d5:bc:0a:be:b5:0f:
         01:2b:02:f8:e1:ea:0a:ca:3a:f6:f5:36:37:9e:51:cf:82:40:
         b4:ed:e4:19:76:8f:4c:64:84:41:60:51:a0:a0:47:cf:39:4e:
         19:dc:d2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:32 2024 by rpki-client on console-fra.rpki-client.org