Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/234A77E28D2111ECB33BB01AC4F9AE02.roa
File:                     234A77E28D2111ECB33BB01AC4F9AE02.roa (raw, json)
Hash identifier:          QN4dhYeOYexv58OGwmZdyDg8Z4B86G7ksX83Qid7CHk=
Subject key identifier:   E9:36:5D:2E:55:79:72:4F:51:90:FB:4D:24:0A:1E:9E:11:05:1C:79
Certificate issuer:       /CN=A91B588F/serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9
Certificate serial:       1C87
Authority key identifier: 0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/234A77E28D2111ECB33BB01AC4F9AE02.roa
Signing time:             Thu 18 Jul 2024 16:33:36 +0000
ROA not before:           Thu 18 Jul 2024 16:33:36 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     149429
IP address blocks:        103.178.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl
                          rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7303 (0x1c87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B588F/serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9
        Validity
            Not Before: Jul 18 16:33:36 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=669943e0-d797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:54:2b:2c:27:f7:c9:8d:75:d4:3d:20:9b:77:
                    2c:d0:1d:9b:c7:f9:e7:99:cf:9a:d0:df:21:e2:19:
                    03:8a:f0:7e:ed:f9:e2:a6:b9:c0:b1:c0:5e:07:9e:
                    69:a4:59:53:81:12:06:fb:e5:a0:23:81:bd:df:17:
                    fc:4a:5d:5c:bc:d8:8c:12:30:d3:a9:a1:bc:34:90:
                    af:46:d7:6e:7f:0a:39:8c:4e:31:2a:57:0c:f9:12:
                    1e:6b:5d:70:9e:d7:40:00:f9:7b:2e:be:e7:50:69:
                    6c:ee:39:d0:5d:a5:67:3c:79:bc:9a:1a:83:60:0c:
                    c2:32:cd:d3:29:a8:57:4f:05:cf:3d:88:e2:bf:1c:
                    73:fc:d1:e7:60:0c:7d:3c:45:c0:7b:fb:30:af:27:
                    48:88:fc:5f:c0:99:c4:00:ff:8b:b5:2e:9c:d0:58:
                    7c:92:b6:77:ca:35:38:a7:fd:22:09:8f:c0:90:4c:
                    ee:ee:c4:b4:81:86:91:e5:11:c0:20:3b:75:1f:36:
                    d3:26:1e:76:b8:c8:b2:02:5f:08:15:6f:a1:19:dd:
                    ac:19:ec:f8:ac:0c:c3:fd:80:e6:f5:32:23:bf:12:
                    a7:fd:65:68:1d:82:2b:a7:e2:89:f1:ec:c8:66:6d:
                    66:fa:7b:42:57:72:ec:3b:03:5f:41:5a:86:0d:ce:
                    87:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:36:5D:2E:55:79:72:4F:51:90:FB:4D:24:0A:1E:9E:11:05:1C:79
            X509v3 Authority Key Identifier:
                keyid:0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/234A77E28D2111ECB33BB01AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:42:94:04:b5:e2:79:00:23:13:8c:68:c0:53:09:aa:8b:8b:
         33:cc:e0:a5:58:82:c1:82:58:c4:a0:f1:93:97:60:8e:b0:4e:
         7b:fe:76:b4:27:fb:58:8f:7c:04:cf:dd:6a:6c:b9:e4:d4:2e:
         b6:94:70:2b:8b:47:a4:4b:aa:d4:5a:f8:ce:58:67:00:19:ad:
         40:80:93:95:0c:4c:1a:01:f7:ff:29:04:2f:da:ad:e2:6f:e9:
         78:c9:18:a6:81:2b:5a:46:7b:96:5d:ea:b0:e3:fe:f7:0c:f6:
         3f:1c:25:b5:b4:76:2d:f0:f5:64:a0:06:a7:2d:43:5a:4c:25:
         4a:05:1b:33:39:ef:06:85:4d:60:66:cd:58:92:36:40:ef:ab:
         67:de:f4:88:92:29:77:4a:3c:ce:3d:fa:53:f5:cc:b4:f4:18:
         8f:7b:a3:bd:67:81:5d:97:be:e5:23:f5:54:34:b6:eb:e1:2d:
         46:b3:64:b8:94:3f:36:63:5d:f8:53:7d:cb:b4:26:8a:75:16:
         7b:f5:d2:5d:71:ca:f9:3e:df:c4:8a:10:f3:56:1c:19:23:ee:
         e7:a3:f4:8d:d7:a7:d5:0d:c4:03:f1:b3:a0:7b:47:e6:c2:62:
         d8:a5:bc:f6:cd:f2:dd:a3:b6:0f:a0:73:48:71:ac:8d:97:f6:
         f2:b1:91:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org