Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/A60B75F62B7B11EEA4D0FA24C4F9AE02.roa
File:                     A60B75F62B7B11EEA4D0FA24C4F9AE02.roa (raw, json)
Hash identifier:          PxsTAvWTPqR9GBGzSOodRTIXfRnRCSAKMsqdtd6R56Q=
Subject key identifier:   FC:87:A9:9E:80:23:1F:FF:B9:6A:AA:A0:02:82:F2:CB:9B:7F:8D:16
Certificate issuer:       /CN=A91B778A/serialNumber=12ABBE9D4E5998585981349A5FA9B75FDABC5876
Certificate serial:       A5
Authority key identifier: 12:AB:BE:9D:4E:59:98:58:59:81:34:9A:5F:A9:B7:5F:DA:BC:58:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/A60B75F62B7B11EEA4D0FA24C4F9AE02.roa
Signing time:             Wed 05 Jun 2024 07:36:23 +0000
ROA not before:           Wed 05 Jun 2024 07:36:23 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     137844
IP address blocks:        103.115.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl
                          rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 03:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B778A/serialNumber=12ABBE9D4E5998585981349A5FA9B75FDABC5876
        Validity
            Not Before: Jun  5 07:36:23 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66601577-e8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:32:d1:60:e0:f5:6b:f1:c7:7a:87:df:1e:32:
                    77:39:4f:9a:8f:3e:20:68:2b:ad:fc:ad:f6:98:f8:
                    de:ef:08:fa:3d:3e:5d:45:61:66:56:4d:d5:39:a7:
                    6c:9e:2a:9c:d6:a4:f2:ad:94:53:9b:fe:c3:a4:b6:
                    9f:2d:93:60:58:dd:ab:6b:81:ae:4f:ff:a8:4f:f6:
                    af:32:3d:e2:1d:33:5f:b2:2b:e2:b8:60:de:b9:16:
                    a8:40:5a:f6:b4:89:b4:ea:b2:82:b7:be:17:02:26:
                    58:43:d4:8e:32:27:b6:cc:8d:07:f5:e7:fb:16:41:
                    c3:af:96:ea:8f:c2:ce:45:40:e7:d9:c5:a1:63:7f:
                    b8:dc:1f:8f:1d:e2:85:4e:03:dd:a8:ee:26:2c:82:
                    55:92:b2:b9:0b:50:66:7a:6c:3f:7b:3a:89:4e:a6:
                    ff:1f:fc:b2:d9:83:c4:0a:6a:b6:c3:3f:34:fa:d3:
                    e0:0e:c5:7b:9a:5d:5c:cb:71:e0:c0:9b:76:2a:61:
                    92:de:c3:df:03:8b:18:bc:60:fd:fd:87:a4:df:12:
                    71:f6:8d:27:41:96:83:5a:e7:f7:2d:90:26:46:2d:
                    91:87:c5:d5:c9:5a:8a:a9:0d:7a:c6:bc:e3:28:a1:
                    b0:73:6b:96:11:02:bc:87:12:c3:f4:2f:2c:9a:bd:
                    38:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:87:A9:9E:80:23:1F:FF:B9:6A:AA:A0:02:82:F2:CB:9B:7F:8D:16
            X509v3 Authority Key Identifier:
                keyid:12:AB:BE:9D:4E:59:98:58:59:81:34:9A:5F:A9:B7:5F:DA:BC:58:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/A60B75F62B7B11EEA4D0FA24C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:69:fb:28:10:e1:d1:71:91:0e:dd:53:66:25:68:89:42:2a:
         f9:e6:e3:69:bb:1d:05:11:b3:c2:dc:fc:86:46:cd:3d:71:55:
         e1:64:c5:22:9d:79:91:9d:4e:85:39:01:cb:9c:67:29:29:23:
         82:3e:16:69:0a:d9:31:8a:25:3a:96:f5:fa:87:9f:0b:45:01:
         f9:8c:de:ae:08:98:e9:d2:10:42:b9:64:ea:21:9a:ce:14:e7:
         a3:65:6b:82:30:92:45:10:45:8d:26:d2:9e:91:86:83:11:71:
         0a:28:32:1e:ee:9b:1f:3e:20:6c:9d:85:0a:2e:ad:2c:80:c0:
         cc:3e:9b:6b:05:22:fc:66:ba:66:19:35:42:6c:5b:7e:ef:ef:
         8a:25:7d:85:68:bc:a8:9c:3c:a6:87:11:67:81:3d:43:1c:2d:
         92:22:91:1c:90:2c:75:f0:67:70:f3:db:f8:b0:e3:52:bf:75:
         42:aa:0f:0c:6c:05:c0:f1:27:d6:7c:b6:b1:e9:a0:8a:ab:27:
         5f:b4:2c:cc:de:2f:22:df:b7:cf:5f:6e:f1:a5:e7:13:c8:eb:
         39:0f:77:b3:7f:9d:4c:81:0a:75:2b:c7:77:28:91:cc:2a:25:
         d7:16:08:13:5b:17:7a:6e:90:dc:26:bf:63:0b:4f:f7:21:90:
         1b:1b:0c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 06:13:43 2024 by rpki-client on console-ams.rpki-client.org