Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/54D87FE02C2B11ECB519751BC4F9AE02.roa
File:                     54D87FE02C2B11ECB519751BC4F9AE02.roa (raw, json)
Hash identifier:          HxMzBwU0drdsgNcvOSUabUc0qZPrH3Qhh76eZIqC/MA=
Subject key identifier:   B0:6F:53:90:70:34:CC:6B:A3:E0:A3:FE:AE:90:DF:74:12:54:23:BB
Certificate issuer:       /CN=A91D0D1A/serialNumber=CEC27C76321F6647BC70FD40D9B70A62EDB587A3
Certificate serial:       03DB
Authority key identifier: CE:C2:7C:76:32:1F:66:47:BC:70:FD:40:D9:B7:0A:62:ED:B5:87:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsJ8djIfZke8cP1A2bcKYu21h6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/54D87FE02C2B11ECB519751BC4F9AE02.roa
Signing time:             Wed 13 Mar 2024 01:43:54 +0000
ROA not before:           Wed 13 Mar 2024 01:43:54 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     24499
IP address blocks:        103.104.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.crl
                          rsync://rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsJ8djIfZke8cP1A2bcKYu21h6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 987 (0x3db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0D1A/serialNumber=CEC27C76321F6647BC70FD40D9B70A62EDB587A3
        Validity
            Not Before: Mar 13 01:43:54 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65f104da-e90f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:64:f3:d5:a9:32:a9:ff:00:3b:30:02:97:bc:
                    0c:0c:dd:65:ca:04:16:19:18:52:ec:07:7f:a7:af:
                    72:db:ba:19:87:e3:59:ec:96:49:69:91:b7:3a:a7:
                    df:b4:20:33:21:4c:25:fd:2d:9f:3b:d9:ee:b7:32:
                    e4:9d:fa:0d:9d:9f:d6:af:d3:21:a6:4f:69:6d:3e:
                    ad:35:57:b7:b5:55:b3:13:5c:fe:70:d1:4b:98:24:
                    a7:16:58:c7:63:2f:5a:29:bd:48:e1:dd:39:ed:13:
                    17:9c:ba:4b:c4:df:86:62:55:70:6c:21:5a:eb:99:
                    75:a1:b0:b1:46:a6:1e:aa:99:6b:f0:ce:02:09:83:
                    21:27:c9:09:4e:cc:09:19:e0:d1:b8:0a:38:4e:c7:
                    d1:2a:62:f6:68:04:37:26:2f:c8:ee:b3:12:6f:cc:
                    42:b9:cf:41:07:b3:05:57:0a:01:c1:79:ea:e1:e6:
                    e4:2b:b0:11:8e:a4:c9:70:b8:15:5c:34:34:ab:94:
                    a6:2b:97:81:91:34:1a:56:8a:98:b4:ac:7b:bd:ee:
                    85:7c:80:f4:d6:26:fb:53:4e:63:8e:e8:79:83:d9:
                    65:b4:95:97:0e:af:11:a9:b8:e1:17:b6:57:a2:ff:
                    6d:3c:04:7d:85:5a:ec:e9:bf:c8:49:88:59:d6:51:
                    b4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6F:53:90:70:34:CC:6B:A3:E0:A3:FE:AE:90:DF:74:12:54:23:BB
            X509v3 Authority Key Identifier:
                keyid:CE:C2:7C:76:32:1F:66:47:BC:70:FD:40:D9:B7:0A:62:ED:B5:87:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsJ8djIfZke8cP1A2bcKYu21h6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/54D87FE02C2B11ECB519751BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:f1:91:da:32:6c:62:48:36:fc:23:3c:23:c9:11:d6:63:3e:
         2d:67:d4:eb:0c:73:25:4d:6e:d1:f0:f9:b7:44:6e:c2:ef:19:
         67:f0:c5:c1:7f:1e:d3:ad:e2:c4:de:9b:9b:e0:2b:05:d1:4b:
         f1:4b:22:3f:ae:8b:d0:fd:01:d7:7d:43:f4:eb:4d:85:bc:a0:
         26:e0:46:ff:8a:c1:a3:29:86:4b:88:35:29:5d:be:01:18:03:
         b8:43:c6:e2:be:e8:5d:15:d7:f7:d0:17:b4:15:26:4e:89:93:
         1d:79:b4:16:6f:a1:cc:2c:14:77:9e:6b:bb:c6:98:eb:b2:2b:
         50:f7:70:c6:c4:a8:32:1c:5e:bf:db:c5:7a:55:cb:df:39:5b:
         b3:41:e0:c7:15:a7:81:e6:6b:50:8c:e3:49:87:43:fb:6f:b4:
         0a:2f:dc:d4:5f:e3:b8:ff:1a:b4:48:9b:88:50:63:26:ef:f4:
         34:64:b8:7e:4d:3d:e2:56:8b:a2:fe:af:0b:cf:8a:db:d7:2e:
         42:d6:f0:28:3e:4f:f0:dd:76:8f:8a:62:e7:96:b2:92:d7:da:
         86:c0:54:c5:3c:fc:56:79:a9:3e:a2:8a:21:c5:b8:2d:be:50:
         9a:ce:26:f6:66:bf:55:cb:29:21:18:8b:b1:69:e5:87:79:30:
         b0:53:a1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org