Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/DC5A39DA965011EF85038743C4F9AE02.roa
File:                     DC5A39DA965011EF85038743C4F9AE02.roa (raw, json)
Hash identifier:          Oq2BM3PW09tunP3ZdeIXLYfigxwXQLqfwRoL/esj5kI=
Subject key identifier:   B4:64:30:BD:90:30:E0:1B:A1:AC:57:34:0D:C0:75:69:B8:B8:D6:57
Certificate issuer:       /CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
Certificate serial:       0C
Authority key identifier: 82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/DC5A39DA965011EF85038743C4F9AE02.roa
Signing time:             Tue 29 Oct 2024 23:52:31 +0000
ROA not before:           Tue 29 Oct 2024 23:52:31 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     61368
IP address blocks:        103.62.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
        Validity
            Not Before: Oct 29 23:52:31 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=6721753f-4020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5c:70:5e:de:49:e7:34:12:05:40:67:a2:1c:
                    f2:7c:ee:9b:38:6c:49:56:8e:3f:46:64:4d:87:48:
                    8b:de:9c:f0:33:b5:01:a5:3b:84:28:e6:10:e4:9e:
                    f8:73:7a:1e:c7:e2:20:fc:31:fb:66:3c:b1:ad:0c:
                    63:ff:14:91:ac:63:97:6f:d0:82:91:67:19:4a:4e:
                    d0:d3:9f:38:ac:96:25:7e:59:38:71:87:af:ce:fc:
                    80:be:c6:3d:70:c6:aa:46:44:78:bc:77:bc:c9:18:
                    4c:39:17:7e:77:1d:1c:5d:5a:30:73:a5:21:89:6d:
                    5e:12:af:c2:a8:ab:6f:87:aa:86:82:b8:64:98:17:
                    5f:f5:fd:a6:07:70:8c:e7:57:27:cb:b9:c8:cd:36:
                    fc:ee:06:fa:dc:aa:7f:82:d5:c5:3c:35:04:44:4d:
                    d9:8c:c2:2d:1d:92:b2:c2:43:ba:87:c7:d1:f6:d5:
                    de:3e:e5:21:8e:99:f6:9e:66:74:97:a5:5c:e7:73:
                    1d:ca:8f:15:e4:26:66:47:85:6b:db:11:30:53:75:
                    de:27:28:9f:08:68:2d:27:a1:34:a5:a3:3e:c4:30:
                    00:0c:18:95:b0:33:da:6b:9b:41:71:f6:e7:ed:2d:
                    91:02:6a:db:af:1e:4c:f9:12:5d:41:de:65:8b:11:
                    85:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:64:30:BD:90:30:E0:1B:A1:AC:57:34:0D:C0:75:69:B8:B8:D6:57
            X509v3 Authority Key Identifier:
                keyid:82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/DC5A39DA965011EF85038743C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:81:b7:a6:84:aa:3a:ac:91:c8:bf:d9:53:6e:b9:27:92:30:
         44:d0:85:42:53:d5:bc:be:18:8b:a5:81:f7:4a:3e:5c:0e:6d:
         28:48:eb:12:47:a5:83:dd:37:75:a3:f3:85:2d:ad:3a:86:31:
         b4:e2:0d:4e:8b:f9:dd:60:76:23:0f:a8:38:9b:f4:26:35:c5:
         64:1f:ed:bd:7f:9e:fa:4f:a6:a2:ca:01:b8:99:5b:fc:4d:db:
         fc:92:99:6a:82:19:96:8e:00:0a:06:cb:87:d1:54:b2:08:bf:
         5a:34:bc:5d:04:04:2c:fb:7c:20:59:10:81:28:4a:55:b8:13:
         79:ba:89:47:91:8e:55:4c:80:b3:02:dc:62:1b:0a:2f:76:c1:
         02:d0:4d:6a:fc:18:ff:c1:f7:ac:f4:9e:33:4f:87:5c:6c:2d:
         11:be:50:a4:6c:7c:71:c3:5f:c8:b4:76:d3:be:3f:0f:07:e8:
         9b:4b:e1:b4:1c:80:63:d1:da:82:b7:47:f9:6a:cb:f1:d6:ca:
         74:76:c7:55:f7:37:71:0c:80:d9:05:55:1e:a6:35:99:cd:e8:
         3d:14:bf:b9:48:36:c9:a9:b2:5b:f8:f9:63:1f:03:30:34:7d:
         8d:8c:08:ef:8b:f4:2e:de:7c:c3:48:a2:18:43:51:d2:e2:9d:
         47:65:62:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:50 2024 by rpki-client on console-fra.rpki-client.org