Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/05A2A4008FE811EEACB1296AC4F9AE02.roa
File:                     05A2A4008FE811EEACB1296AC4F9AE02.roa (raw, json)
Hash identifier:          RMAjjR/Z0XXDeykH/h9ZSJTCAkTWDVoYIsC8StPVzYI=
Subject key identifier:   98:4C:1A:07:51:46:CA:FB:B1:EB:C0:6F:ED:14:FB:2E:CA:3A:FE:F2
Certificate issuer:       /CN=A91CFFBE/serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F
Certificate serial:       04C7
Authority key identifier: D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/05A2A4008FE811EEACB1296AC4F9AE02.roa
Signing time:             Mon 03 Jun 2024 02:46:48 +0000
ROA not before:           Mon 03 Jun 2024 02:46:48 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     7545
IP address blocks:        103.166.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl
                          rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1223 (0x4c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFFBE/serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F
        Validity
            Not Before: Jun  3 02:46:48 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665d2e97-3857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b4:74:83:6b:9f:1a:89:32:c1:06:af:c7:53:
                    04:ae:68:b6:33:5b:88:7a:ec:79:1f:1b:7f:82:78:
                    27:a3:13:4d:d3:8c:5b:f1:28:32:f3:e4:cb:1c:30:
                    e9:4f:3d:46:d7:b6:b4:db:84:83:42:b3:e8:f0:86:
                    fc:fb:c5:c6:0d:90:92:45:a6:da:0f:18:08:20:1b:
                    38:bf:8c:2f:4b:16:4e:fe:47:6e:52:b9:43:38:f5:
                    34:d4:64:dc:dd:59:b2:cc:50:cd:92:1f:d9:2d:c9:
                    a3:bb:2e:09:45:7b:f8:21:65:5b:fc:51:4d:1e:b6:
                    9f:10:ed:1e:22:0b:f9:a8:ac:05:98:24:b2:70:b2:
                    ea:a3:cb:95:8f:0b:08:9d:7d:a4:12:d5:71:ec:86:
                    a2:92:c0:33:cc:87:d2:45:02:a1:04:7a:07:f3:94:
                    8f:29:b0:07:60:94:af:45:5e:f8:ab:a5:68:71:88:
                    13:42:9e:2d:f5:2c:83:b4:3f:21:5b:e0:85:e1:a0:
                    cf:6c:0c:d0:71:36:02:6f:6c:81:51:4e:18:c8:e8:
                    d3:26:17:4f:48:7a:f7:94:3c:72:af:da:8c:ee:a8:
                    62:d1:8c:10:e6:8e:c7:71:ca:35:71:44:90:c7:2c:
                    5c:66:45:62:4f:5f:2e:78:37:e1:c7:a2:3b:9a:17:
                    55:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4C:1A:07:51:46:CA:FB:B1:EB:C0:6F:ED:14:FB:2E:CA:3A:FE:F2
            X509v3 Authority Key Identifier:
                keyid:D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/05A2A4008FE811EEACB1296AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:a0:61:1c:0b:d5:f4:b8:2a:15:9b:0b:0f:28:7d:77:ff:7c:
         a1:b1:bf:78:53:d5:74:13:c2:7c:7d:40:6d:f6:8c:bb:7c:54:
         85:91:25:8a:11:64:63:cd:28:c8:16:38:45:53:0c:72:e7:bc:
         6e:e9:ba:d5:4e:b0:6d:7b:82:46:60:3e:30:4d:19:b8:1c:37:
         c1:75:d0:db:aa:63:00:54:e4:24:07:63:46:49:7d:a5:b6:07:
         a7:ce:c8:e1:26:28:b0:78:87:21:df:79:f1:d0:98:20:9d:30:
         4e:37:84:a3:ea:8d:73:45:ef:97:e7:d0:72:62:7d:6b:a7:b2:
         42:fb:02:60:c7:1a:ed:e0:50:2c:e7:4f:48:74:83:2d:be:7d:
         16:7d:55:7d:25:d9:8d:3f:63:28:77:6a:31:3a:25:da:f3:e6:
         ad:75:a3:3c:50:25:7a:f8:8e:d9:39:f8:da:fc:d6:c4:2f:fe:
         9b:2a:e5:15:11:04:a7:b4:31:8e:28:72:65:26:60:78:84:ec:
         ca:4f:ab:60:15:96:2d:7d:cd:b6:19:9e:43:c4:8a:eb:ea:9b:
         dc:bf:e9:a5:d9:d4:3c:6c:67:b1:c1:76:6f:65:3f:b3:2c:4e:
         f1:ad:33:a9:46:c2:b5:15:08:ee:af:df:31:3f:bc:e4:08:5a:
         86:d7:a7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:21:24 2024 by rpki-client on console-fra.rpki-client.org