Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/011CBE6CDF8911ED942E2A67C4F9AE02.roa
File:                     011CBE6CDF8911ED942E2A67C4F9AE02.roa (raw, json)
Hash identifier:          ruViVCRJvEfOz9OjHERXLsP/W7M4wMXz2oTU4fGgAJk=
Subject key identifier:   B5:15:96:DC:F8:02:A7:FA:86:AE:4B:46:02:E6:23:B1:2B:4D:5F:1B
Certificate issuer:       /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial:       0995
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/011CBE6CDF8911ED942E2A67C4F9AE02.roa
Signing time:             Tue 26 Mar 2024 21:10:23 +0000
ROA not before:           Tue 26 Mar 2024 21:10:23 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     395266
IP address blocks:        203.78.194.160/28 maxlen: 28
                          203.78.195.0/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
                          rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2453 (0x995)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
        Validity
            Not Before: Mar 26 21:10:23 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=660339bf-a182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:cc:d7:5b:b6:2f:ea:76:93:38:78:a2:98:
                    94:6e:86:58:a9:78:59:1c:ca:e4:e1:98:76:ed:1d:
                    3e:f5:c3:cc:99:92:73:59:52:62:c6:d4:26:ad:0c:
                    8f:61:8a:f2:1f:ec:0d:63:44:16:d3:de:f7:e3:19:
                    9c:ad:d7:d9:a8:0a:9c:84:38:ff:16:d8:81:2e:c3:
                    46:53:b6:3b:68:af:6e:36:e2:72:9e:be:f4:be:30:
                    7f:1e:3b:37:42:03:b8:e4:5f:74:6d:43:f7:96:8d:
                    fb:25:86:5d:3e:35:ae:9b:5c:b4:9d:9d:31:d6:21:
                    19:7e:00:56:69:6f:3b:0e:41:fe:92:ff:93:a4:ff:
                    c9:b9:16:18:ca:e0:90:93:79:ba:0e:c1:fe:75:3c:
                    35:4d:57:34:52:b7:d4:4b:a7:c6:92:a8:44:53:75:
                    db:96:91:9d:30:e8:97:58:b3:9a:07:ce:a5:f7:7a:
                    54:9c:f5:3e:21:cb:07:56:d0:8a:14:d0:47:60:c6:
                    16:6c:15:c7:cd:2d:6a:e2:59:46:6b:e7:6f:f6:59:
                    08:97:c5:be:4f:57:b0:60:08:9a:1a:60:75:b2:45:
                    0c:17:fc:68:c8:24:ae:2f:f0:82:56:3b:3b:54:3a:
                    f7:c2:95:c8:07:7b:20:e5:de:c0:27:9d:57:48:1f:
                    ee:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:15:96:DC:F8:02:A7:FA:86:AE:4B:46:02:E6:23:B1:2B:4D:5F:1B
            X509v3 Authority Key Identifier:
                keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/011CBE6CDF8911ED942E2A67C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.78.194.160/28
                  203.78.195.0/28

    Signature Algorithm: sha256WithRSAEncryption
         1b:4b:bf:48:60:b7:20:d2:e9:76:80:a8:9d:95:a3:de:be:3f:
         07:2c:78:63:ed:cc:97:29:4c:f4:6c:f2:05:03:da:82:d0:ee:
         39:93:93:9b:2f:8f:22:d7:05:6b:85:c4:fe:4f:e2:41:e2:06:
         d8:53:3f:39:9d:5d:67:49:d8:e0:56:e4:5a:8f:f3:d8:26:c4:
         1a:d0:4b:d9:77:ef:f6:1e:9f:03:9f:74:34:a2:68:dc:73:e7:
         52:d1:6e:da:91:69:7d:77:d9:a0:59:90:d0:f1:3f:25:c5:a1:
         f0:70:fe:4f:66:af:6e:0c:e6:46:e0:90:88:3d:4b:36:7c:1c:
         7c:2a:e1:cf:4b:58:83:c9:89:f8:4c:cc:59:f2:6a:25:e7:19:
         45:c0:13:4c:ca:70:e4:aa:d7:79:b8:03:f4:b6:ba:29:98:dc:
         7b:50:90:be:e1:43:7f:fc:50:1b:aa:ec:84:d9:0b:e6:16:23:
         46:5d:e7:6d:9c:c3:fb:33:0b:f0:8e:aa:f9:7c:78:05:2a:77:
         56:8b:de:75:23:57:cb:b0:c6:1a:6b:b9:2d:6f:57:cc:dd:88:
         ef:66:47:c2:8d:f4:02:d9:a7:1d:b6:46:4d:10:37:f6:68:2f:
         a2:b7:79:b5:07:eb:87:ae:32:8d:b6:a4:f6:a6:97:3c:22:c1:
         bd:44:f4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:34:58 2024 by rpki-client on console-ams.rpki-client.org