Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/A6ACA298858911E88026B416C4F9AE02.roa
File:                     A6ACA298858911E88026B416C4F9AE02.roa (raw, json)
Hash identifier:          Q2m770Vn+WGuanvd0RoTq0rdlgedJHaVYLneYgONfTA=
Subject key identifier:   7B:C6:05:6B:39:FF:38:5B:CD:6C:06:95:34:4B:F1:21:D5:20:36:CD
Certificate issuer:       /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
Certificate serial:       178E
Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/A6ACA298858911E88026B416C4F9AE02.roa
Signing time:             Tue 12 Sep 2023 16:54:04 +0000
ROA not before:           Tue 12 Sep 2023 16:54:04 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     3223
IP address blocks:        103.118.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl
                          rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 16:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6030 (0x178e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
        Validity
            Not Before: Sep 12 16:54:04 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=650097ab-99f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6b:42:f5:be:e0:c3:89:3a:d8:3c:e9:37:53:
                    af:d8:31:cb:9b:32:10:31:c0:f1:02:6f:89:ea:55:
                    13:58:7f:fa:6c:17:8e:a9:a0:69:e5:8d:53:9d:8b:
                    fb:8e:ee:01:b1:c5:f2:74:f3:20:46:36:9a:92:0a:
                    7d:1d:b2:9b:4a:00:c0:c1:05:99:fa:ca:5f:72:f8:
                    91:b0:ed:b5:26:4f:f9:99:51:c5:b2:e3:92:75:d9:
                    60:35:df:8b:aa:a5:9f:22:e6:93:8c:e8:66:5c:7b:
                    86:49:b0:01:0e:6a:cb:a5:91:89:f7:07:61:b6:fa:
                    67:3e:77:18:81:ed:87:27:c3:cb:a2:fc:c4:d4:47:
                    df:56:a7:ca:ed:60:e2:d9:1e:44:7e:f4:20:90:d4:
                    f5:66:ae:a1:bd:07:bd:75:74:50:c8:9c:ba:88:a5:
                    63:aa:d2:c4:ae:c6:1e:48:bf:f9:b3:c3:51:f5:bd:
                    63:bb:54:14:3d:04:c7:0b:24:11:af:3c:fe:12:7b:
                    a3:47:46:c8:01:14:8f:3a:43:c3:0d:d6:5c:32:6f:
                    0a:53:b4:e1:b4:6a:49:a2:d8:0f:01:1e:24:5a:fe:
                    30:39:e6:72:bd:c6:4c:a0:5d:59:12:f1:80:4b:85:
                    4f:62:36:c1:f9:a1:86:13:9e:98:6b:93:5e:c5:ff:
                    7d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C6:05:6B:39:FF:38:5B:CD:6C:06:95:34:4B:F1:21:D5:20:36:CD
            X509v3 Authority Key Identifier:
                keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/A6ACA298858911E88026B416C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:bc:94:e0:9a:95:1d:9d:48:93:91:b9:53:b6:3d:36:03:f0:
         70:5b:58:3d:b0:0e:90:f7:f2:10:ea:c4:89:dc:ed:ea:e9:82:
         f0:67:b8:a8:23:5a:a9:9c:73:60:2c:36:a2:6a:af:ef:88:45:
         5a:0f:b0:a1:51:8d:2d:0c:c7:0b:0b:35:81:7a:c4:21:e7:07:
         b9:c4:93:8c:52:e9:27:42:fb:c6:e2:02:23:c3:7e:5f:90:d2:
         ca:c0:8c:34:49:bd:48:62:f2:97:a4:5f:ac:8c:ef:0d:35:18:
         1e:e0:f1:ab:4f:10:f9:50:4e:2e:80:37:7a:79:a9:46:c5:a1:
         97:93:c4:1c:fa:40:08:59:ad:0b:92:af:9e:8a:30:3c:13:70:
         9d:2b:95:a0:cc:d1:91:2e:00:eb:f7:fd:e0:6e:fe:89:a3:d9:
         cb:46:38:fd:8f:b2:fd:a5:15:f1:74:96:34:8a:75:f9:fa:d6:
         3d:6f:1f:26:91:e6:46:8c:03:57:18:b1:72:c7:8d:30:4e:94:
         42:55:fe:38:c8:a0:a6:9e:60:28:a4:7a:5c:3c:19:3d:47:ea:
         bc:2d:59:f2:ee:f6:72:dd:49:e5:8e:5e:36:77:c1:0b:e5:fa:
         72:3a:d2:00:7b:15:9a:3a:2d:ff:24:3f:d9:11:50:c5:70:4b:
         48:f4:51:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:51:51 2024 by rpki-client on console-ams.rpki-client.org