Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/60A8F48A25D211ECB2CCF633C4F9AE02.roa
File:                     60A8F48A25D211ECB2CCF633C4F9AE02.roa (raw, json)
Hash identifier:          +PbEWtYSfIT5V18KuiJqAnYLDPzBVBUjvZLUMUeffC4=
Subject key identifier:   B7:89:7C:D2:6D:7F:AD:E4:85:EF:4F:C7:5E:DC:97:E9:21:A1:AE:1B
Certificate issuer:       /CN=A91C0E57/serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED
Certificate serial:       0460
Authority key identifier: 0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/60A8F48A25D211ECB2CCF633C4F9AE02.roa
Signing time:             Thu 03 Oct 2024 00:33:30 +0000
ROA not before:           Thu 03 Oct 2024 00:33:30 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     147055
IP address blocks:        103.173.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl
                          rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120 (0x460)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0E57/serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED
        Validity
            Not Before: Oct  3 00:33:30 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=66fde65a-5646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:76:86:aa:c2:7c:3a:eb:e7:30:a3:2a:5c:c3:
                    6a:40:cb:0b:75:59:51:ed:4e:77:fa:08:18:1b:8f:
                    61:48:e0:a4:1f:50:d4:79:77:e2:19:47:da:b9:13:
                    bd:40:60:45:f5:9c:16:40:9c:9b:12:89:62:11:59:
                    8d:da:c5:45:27:bd:a2:36:d7:b0:52:22:e7:2a:5f:
                    05:0c:96:03:db:cb:09:16:6e:89:ed:fe:c9:6c:c7:
                    8c:a6:01:34:48:65:13:0d:e9:33:30:36:70:11:41:
                    81:57:52:d3:3d:5e:1c:39:8d:2e:fb:21:05:38:f4:
                    85:8a:58:be:e9:87:15:4e:2c:e3:4a:fa:56:66:cd:
                    e9:5a:be:f6:c7:d0:d3:64:14:35:ea:a9:3c:f5:a5:
                    56:9b:45:92:13:bd:a2:77:42:e8:c5:18:a5:19:19:
                    80:b4:d6:bb:1c:9d:e5:ff:14:3c:34:d2:f7:11:0d:
                    2c:4b:5c:db:ae:77:5b:7c:4e:fd:5c:c1:86:68:e5:
                    e4:e2:d6:fc:77:be:3c:8b:b6:ac:29:4e:56:4b:f4:
                    8f:52:e4:31:a2:85:ab:c3:69:82:17:94:1d:c3:0b:
                    16:19:cb:77:f2:cd:13:0b:cb:ef:6b:3f:0c:2c:04:
                    04:74:8b:c4:8f:11:46:4d:b1:ec:bc:11:a3:d4:84:
                    77:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:89:7C:D2:6D:7F:AD:E4:85:EF:4F:C7:5E:DC:97:E9:21:A1:AE:1B
            X509v3 Authority Key Identifier:
                keyid:0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/60A8F48A25D211ECB2CCF633C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:1a:4c:fc:5a:3a:81:ec:1d:7a:03:82:83:e6:fc:a4:ab:c3:
         a8:06:cb:a5:f6:3e:a1:bf:b5:35:73:b6:5b:cf:21:fc:d0:45:
         6c:ba:b7:93:fc:26:77:90:af:7b:7f:b1:ad:21:24:99:d7:30:
         2e:78:5e:cc:16:30:1f:bc:fa:c6:a7:10:43:cc:25:62:95:ec:
         4c:31:b9:c2:6d:7a:69:cb:5b:92:23:0c:6c:22:e7:b3:f4:82:
         bc:06:f5:78:9b:b5:36:5b:69:a0:1b:3a:28:b9:9d:16:d4:77:
         ac:8b:29:4e:27:37:c8:a1:b3:58:bb:af:a8:d1:5d:bf:71:65:
         12:dd:da:c2:f4:15:72:45:7b:ce:49:8d:b2:60:e7:94:4f:8d:
         57:df:bf:82:3b:fd:6e:ac:b6:71:c7:55:c9:cb:3f:2f:bf:eb:
         06:32:59:68:1e:aa:17:de:8a:ea:7d:c7:24:97:76:ff:9a:53:
         54:fe:12:eb:20:6b:a4:f5:3f:c0:2e:a8:de:11:e9:d1:ce:e5:
         e9:40:5f:6f:c7:ef:f6:0c:e3:15:c9:40:76:9f:a7:83:18:22:
         59:c4:12:c1:94:05:07:f0:bf:5a:6f:4a:0b:64:07:b7:93:00:
         03:36:4a:c2:c3:f5:ff:d6:95:3d:cf:40:65:00:5f:a3:2d:92:
         cd:f0:b6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org