Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/550459C02ACC11EE9FF1653AC4F9AE02.roa
File:                     550459C02ACC11EE9FF1653AC4F9AE02.roa (raw, json)
Hash identifier:          Pp2wl6A3zSkq1VTKNVHUqApUF811bZXZ3Xx2fT+zh/o=
Subject key identifier:   94:DC:3D:CE:B8:95:9D:C3:C2:F0:50:2B:4B:51:1B:C5:5E:0D:FB:A5
Certificate issuer:       /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3
Certificate serial:       034C
Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/550459C02ACC11EE9FF1653AC4F9AE02.roa
Signing time:             Fri 01 Mar 2024 02:45:10 +0000
ROA not before:           Fri 01 Mar 2024 02:45:10 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     151614
IP address blocks:        103.178.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl
                          rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 844 (0x34c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3
        Validity
            Not Before: Mar  1 02:45:10 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65e14136-8581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:66:3b:57:ef:f3:fe:ae:25:6d:39:5b:83:
                    9d:85:25:7f:79:d9:d7:2c:24:14:ab:01:fb:82:da:
                    5a:27:27:0c:62:4e:c1:17:81:28:bf:67:92:38:f8:
                    4d:a3:f5:31:33:6f:34:dc:2e:58:da:8d:c2:4a:af:
                    93:13:a0:48:7a:d7:e7:3d:b9:dd:d5:91:8d:c7:0a:
                    0a:cc:2f:b6:41:51:3c:93:a1:6b:14:c2:45:e8:1f:
                    83:a4:86:2f:ea:81:c5:86:19:a7:c3:75:39:c2:a3:
                    98:87:0f:a2:1c:71:9c:3a:d6:52:e6:b0:08:3f:dd:
                    2a:78:f5:72:ac:e2:3a:62:fb:09:74:5f:12:1b:b6:
                    d5:03:08:73:7e:14:a1:67:92:26:fb:9e:3f:96:e6:
                    24:ad:ec:28:41:be:0d:f8:d9:4c:06:c3:48:14:0d:
                    29:a4:a5:47:c9:6a:e9:5a:53:7a:c3:fc:28:1b:c0:
                    2b:4b:98:40:fb:35:37:85:0c:03:56:ec:f7:76:82:
                    70:b7:2e:67:1d:bc:4d:1a:d1:c7:22:d3:06:89:45:
                    b2:06:0f:e7:3d:e9:67:68:3b:63:ad:cc:fb:f7:1a:
                    fe:61:d7:f7:cb:8b:ca:42:8f:6f:32:ae:cc:eb:90:
                    54:c2:98:ce:2e:dc:fe:8c:ca:c6:d2:a3:23:a9:89:
                    12:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DC:3D:CE:B8:95:9D:C3:C2:F0:50:2B:4B:51:1B:C5:5E:0D:FB:A5
            X509v3 Authority Key Identifier:
                keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/550459C02ACC11EE9FF1653AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:e7:e5:fe:07:f1:75:d6:9e:60:e1:93:3d:a0:de:0a:6e:7d:
         e8:27:d2:bd:9d:6f:76:a3:83:9d:cf:3a:9f:0d:a1:d6:e7:ea:
         b4:f8:04:7f:57:30:70:49:01:7a:2a:3c:a8:6b:7b:a2:2b:8d:
         b1:ad:bd:50:61:bb:eb:f5:cc:67:d6:00:ab:8b:51:27:5a:6f:
         d1:03:31:7c:c2:2a:f4:c0:c5:8e:2a:2d:e2:84:2f:3f:ff:e9:
         41:0d:32:d5:eb:25:58:9b:21:92:77:ab:5d:33:34:d4:bf:9f:
         0a:9e:e1:ed:2c:d2:4f:65:74:c7:1b:db:00:13:e1:04:b0:e0:
         37:c7:af:0b:ad:12:15:38:7f:b1:5b:c3:81:2c:5f:e3:d7:48:
         49:50:7d:32:55:5d:c2:17:a9:65:84:b5:87:5a:74:3d:6c:3a:
         fe:0d:67:09:6a:21:f7:5c:32:d3:05:3b:f1:54:c4:6c:35:6d:
         4e:99:63:81:11:65:e7:dd:62:4f:da:4a:34:83:2f:6d:00:39:
         b6:ce:ca:d3:45:5b:e0:10:44:a2:d8:e5:7b:02:5a:9a:0b:be:
         a2:14:4c:9c:24:6b:de:4b:b5:08:e5:52:60:29:25:01:c1:a8:
         c6:99:34:26:d7:22:80:4b:7c:12:4b:15:d7:1d:60:b6:02:d8:
         c9:bb:26:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:44 2024 by rpki-client on console-fra.rpki-client.org