Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/96AC80A2CBB411EA99BB9A4DC4F9AE02.roa
File:                     96AC80A2CBB411EA99BB9A4DC4F9AE02.roa (raw, json)
Hash identifier:          eM0/ieW68pT/1mH+cnfWrxugWCGoyMvD9LF24IpYcvg=
Subject key identifier:   C2:8B:D9:27:35:BE:D3:F5:79:52:8F:AA:E3:F2:3C:BB:32:01:E8:E7
Certificate issuer:       /CN=A91CBB48/serialNumber=75D75BDA51BCA0060F708113234C4145E444421A
Certificate serial:       0735
Authority key identifier: 75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/96AC80A2CBB411EA99BB9A4DC4F9AE02.roa
Signing time:             Sat 02 Dec 2023 22:09:38 +0000
ROA not before:           Sat 02 Dec 2023 22:09:38 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     134555
IP address blocks:        103.130.244.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl
                          rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:38:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1845 (0x735)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBB48/serialNumber=75D75BDA51BCA0060F708113234C4145E444421A
        Validity
            Not Before: Dec  2 22:09:38 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=656bab22-4ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:05:aa:cc:5e:79:fe:c2:4c:56:9f:b6:96:58:
                    c4:b1:a5:43:37:0a:91:57:f8:74:0b:eb:5d:5d:38:
                    9b:a0:eb:db:e4:7f:55:0d:ad:96:6c:dc:87:2a:eb:
                    da:c0:3f:35:7b:00:85:aa:cc:e5:73:0d:43:16:a7:
                    16:5b:2b:14:10:71:d8:11:33:7b:e1:b1:2f:6f:15:
                    1d:39:18:d9:f9:d1:81:5b:c0:37:bc:71:ee:92:fe:
                    69:7b:2a:22:b7:f8:19:53:b1:7a:f0:9d:75:a6:05:
                    92:92:fd:3f:c3:fa:6b:0d:5d:a3:de:5c:81:43:5e:
                    65:ce:67:26:ad:af:a3:79:a8:6d:d9:da:5c:98:41:
                    92:87:27:de:34:93:f1:f1:fe:dc:de:5b:d0:b9:b7:
                    6a:fa:c0:6a:d0:7b:b3:e9:6e:b0:32:11:01:62:87:
                    a5:06:91:fe:6b:c4:e4:72:22:97:11:cb:11:7d:27:
                    ea:81:00:fd:41:49:c0:0f:01:3b:27:9e:19:21:be:
                    2a:75:30:2b:51:dd:fa:f0:08:97:10:96:07:a5:df:
                    aa:86:24:48:d1:0f:34:c5:73:d1:1d:08:af:1e:8f:
                    ae:69:f4:6e:04:a2:b3:19:c8:41:a1:bd:ac:e0:9d:
                    1a:73:eb:53:3c:5e:33:b3:4b:17:44:5e:1d:1a:d1:
                    be:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8B:D9:27:35:BE:D3:F5:79:52:8F:AA:E3:F2:3C:BB:32:01:E8:E7
            X509v3 Authority Key Identifier:
                keyid:75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/96AC80A2CBB411EA99BB9A4DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:f6:2e:2c:47:8c:e9:da:55:35:a2:e4:be:d1:32:80:1f:98:
         62:07:35:bf:5d:0f:08:61:4c:d7:9a:64:aa:27:36:16:b6:93:
         2d:67:d9:f6:5f:ec:4e:3f:71:0e:52:17:48:af:08:af:fd:77:
         21:27:5c:33:66:ba:f4:51:80:a5:73:87:2d:bc:af:3f:4b:da:
         04:6f:a5:24:5b:33:bb:9f:55:a3:76:eb:eb:37:59:1f:e8:f9:
         69:ec:b7:d7:f0:8b:52:e4:5c:e6:94:e7:b1:ad:49:06:09:a9:
         e0:b0:98:e3:86:19:2c:6b:bb:4b:d1:29:89:f6:60:b4:7a:83:
         78:16:e7:dc:c9:54:17:5c:37:2c:d4:90:17:6b:3b:13:ef:d3:
         d8:a1:7e:24:62:6e:83:75:ad:a8:87:77:89:2b:34:eb:65:5c:
         85:e3:61:a6:38:17:76:59:a1:46:23:e8:13:9b:17:e2:49:f5:
         a5:cc:38:10:1e:df:34:99:ba:ad:e2:9c:fd:52:ca:45:7d:83:
         de:1a:89:c1:bb:ce:7f:5d:e8:2d:35:0d:21:c5:08:07:a7:f4:
         70:74:95:c3:82:2f:c8:b1:7e:74:e1:37:55:c4:0e:44:d4:04:
         53:76:78:63:29:bd:72:75:94:5b:a3:e9:0b:a1:d8:07:27:b5:
         e8:5f:2f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org