Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/DC79515C011411EAAB0EF153C4F9AE02.roa
File:                     DC79515C011411EAAB0EF153C4F9AE02.roa (raw, json)
Hash identifier:          2sF0RGqydi9yAOOW0MmAfLox7UfaFANJNpO99v6yN+w=
Subject key identifier:   BB:E7:79:4F:4F:AA:90:E4:CF:3F:68:66:B9:7B:83:C4:AB:ED:EF:31
Certificate issuer:       /CN=A91BA9CE/serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72
Certificate serial:       0BCF
Authority key identifier: E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/DC79515C011411EAAB0EF153C4F9AE02.roa
Signing time:             Sat 08 Jun 2024 19:34:04 +0000
ROA not before:           Sat 08 Jun 2024 19:34:04 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     24516
IP address blocks:        43.239.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl
                          rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3023 (0xbcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA9CE/serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72
        Validity
            Not Before: Jun  8 19:34:04 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6664b22c-46e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:79:39:fe:40:4f:b0:19:4b:ed:9f:61:0e:af:
                    d4:2d:8f:5e:d6:ca:52:1d:f4:80:06:63:15:51:10:
                    0d:bf:1c:01:ed:00:47:06:2e:c7:d9:ed:ba:78:e6:
                    2e:c9:ca:9f:b2:d3:12:97:ad:78:23:05:69:5f:b4:
                    18:92:b7:12:3a:97:03:f8:25:50:54:06:9e:94:55:
                    c7:24:5d:f3:22:37:a2:0c:9a:9b:0e:d8:d6:46:67:
                    dc:37:15:80:b0:88:da:43:4e:92:bf:e2:f3:0b:19:
                    70:22:11:90:d8:b8:69:2e:b8:86:f4:64:ab:1b:0b:
                    73:cb:85:73:0c:12:50:39:d7:3d:8f:9f:73:1f:9e:
                    87:36:f6:77:a2:f5:64:6d:7c:ed:84:4e:bb:9f:ca:
                    73:40:b2:20:9d:b3:a7:86:71:37:4c:4c:53:6b:ec:
                    c6:0f:b7:82:fc:93:8f:f2:dd:95:1e:44:13:5d:fe:
                    bd:e9:c6:05:6f:49:26:7b:16:f6:3f:06:57:e7:b4:
                    88:18:08:27:0d:17:8d:e7:97:76:82:66:0d:f0:a7:
                    8d:fc:fd:cf:94:1b:f4:c7:a8:b3:99:b8:93:3a:14:
                    b4:d6:3e:cf:f9:77:d2:8a:af:50:8e:45:ae:d7:ae:
                    18:0c:a2:3e:4e:1c:51:e2:a0:31:98:2a:7b:9a:72:
                    17:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E7:79:4F:4F:AA:90:E4:CF:3F:68:66:B9:7B:83:C4:AB:ED:EF:31
            X509v3 Authority Key Identifier:
                keyid:E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/DC79515C011411EAAB0EF153C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:28:dc:98:e6:5c:65:e7:39:83:08:3e:30:f7:cf:84:85:d3:
         04:2f:f9:d9:bd:02:13:0e:c7:eb:82:f7:0c:08:54:83:13:13:
         6e:ad:f6:07:3a:50:7e:68:e3:10:7c:d0:ec:3f:d5:fa:b3:ba:
         26:60:d7:bf:8b:ac:bb:12:74:d0:82:ef:ae:25:ac:c0:1a:ca:
         65:18:4c:8f:1c:42:b6:7f:47:4b:a1:42:35:16:bf:16:40:85:
         62:74:be:ad:42:75:d3:fc:4c:f7:d0:76:cd:90:fb:d1:63:bd:
         91:c9:87:7f:e5:bc:d0:90:40:08:bd:7a:69:50:84:91:c6:53:
         f8:b7:d8:df:96:41:49:d4:be:c5:12:83:74:fe:52:a8:ce:de:
         50:05:0c:4c:08:33:f0:ce:42:94:69:d2:98:6e:48:b9:4d:58:
         70:48:90:5d:d6:d3:9f:36:54:6a:c8:8a:a8:5b:27:e5:86:e9:
         49:00:3c:25:78:4f:c9:2b:56:ad:9a:e4:10:fb:25:f6:e9:f3:
         22:60:99:74:bc:ca:58:89:4e:5f:01:0e:dc:7e:ec:bf:62:76:
         4e:91:c9:80:7b:6a:10:88:2e:92:5f:bb:3d:0c:99:1d:65:03:
         c0:b2:1a:0a:22:58:c7:31:38:51:30:9d:d6:82:07:5f:e6:17:
         1d:00:4a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:16 2024 by rpki-client on console-ams.rpki-client.org