Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/C965E8C4679911EEB466ED36C4F9AE02.roa
File:                     C965E8C4679911EEB466ED36C4F9AE02.roa (raw, json)
Hash identifier:          s47opPogcC5e1y+494dk+cvOuO26bbtxqUBe27NjZ2Y=
Subject key identifier:   0F:9D:D7:F0:6D:7A:6A:6C:71:95:64:43:73:A8:CA:F1:6B:76:E3:E8
Certificate issuer:       /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Certificate serial:       013E
Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/C965E8C4679911EEB466ED36C4F9AE02.roa
Signing time:             Fri 03 Nov 2023 04:34:56 +0000
ROA not before:           Fri 03 Nov 2023 04:34:56 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     55501
IP address blocks:        103.174.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 04:47:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
        Validity
            Not Before: Nov  3 04:34:56 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6544786f-f88e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7e:45:49:da:0e:ce:92:56:89:be:a1:75:c5:
                    bc:18:7f:b7:d6:5a:e4:47:94:79:43:a3:77:3f:46:
                    66:75:1b:ae:3c:fa:1d:2c:21:72:3d:e1:cf:6a:a4:
                    5f:cb:7e:8e:1d:46:7a:9a:93:fd:50:03:96:b7:9b:
                    4a:f2:b0:25:ec:be:6d:cc:95:62:e0:26:f5:4f:d7:
                    4b:32:54:79:f2:f9:44:3b:35:ea:15:cb:82:6b:4e:
                    50:ad:3a:d7:46:61:61:23:2c:17:0a:26:c5:f7:c4:
                    2d:95:9e:15:c4:13:e1:ff:aa:37:16:85:fb:f3:12:
                    bf:b8:6c:e8:17:52:d6:c1:e9:db:fe:e7:84:07:f0:
                    93:55:e9:19:71:a6:33:b9:ce:55:ba:b1:07:37:c5:
                    56:d2:64:53:08:87:33:45:20:a9:c4:70:f5:2b:0c:
                    3a:df:24:5b:cb:b6:a2:91:ff:e4:b0:20:93:37:db:
                    e1:81:17:6c:2c:e4:6c:19:d5:b2:68:8e:00:22:28:
                    f4:c9:b0:ce:cb:dd:63:1d:54:5d:18:3b:50:a6:ec:
                    0b:f0:16:b7:26:13:a4:e3:d6:5b:e5:a8:0f:96:61:
                    87:15:dd:4a:aa:7e:a8:c5:3a:b0:c9:cb:19:5a:fc:
                    95:86:9c:63:74:9a:ae:dc:6a:2f:69:ca:15:33:1c:
                    a8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9D:D7:F0:6D:7A:6A:6C:71:95:64:43:73:A8:CA:F1:6B:76:E3:E8
            X509v3 Authority Key Identifier:
                keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/C965E8C4679911EEB466ED36C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:41:b0:04:d8:fa:59:d1:7e:c5:b6:6e:f1:55:d1:37:26:2a:
         c0:d3:76:df:d3:8e:b2:78:95:d4:83:3a:8e:80:26:34:4f:ca:
         75:95:64:6f:6e:d9:7b:27:37:5f:b4:a1:a9:3e:4a:3d:cd:a7:
         08:a1:32:1d:85:a2:8a:ab:3a:9b:5a:02:ee:2f:1f:f9:e7:67:
         73:0b:71:43:e6:a8:9b:b0:d6:1c:43:af:17:ce:df:19:d7:fd:
         be:30:cd:91:fa:39:75:b1:15:52:c3:84:4a:50:42:89:a7:e1:
         24:e2:48:1b:3b:c0:e5:80:f4:ec:ba:26:2e:5b:8c:ce:84:e8:
         be:17:f7:90:78:14:4d:12:4c:6c:6c:8d:1a:b9:e2:d4:93:4e:
         23:be:34:34:e2:b4:03:26:f2:5d:02:97:6d:d3:e9:44:59:61:
         d2:ff:d4:e0:6c:e5:39:4b:d7:65:a7:bf:38:92:83:ee:40:e3:
         7b:0e:74:76:05:ab:94:60:da:7c:09:b7:15:fb:64:00:5a:e8:
         7e:0b:c4:dc:1d:ed:0d:1a:94:86:e5:8f:24:68:7d:1d:ba:a9:
         10:bf:c3:b6:8d:e3:b0:9e:84:c9:3c:d7:f3:b3:a7:64:89:e9:
         5b:3f:fc:13:89:f9:d2:0d:aa:81:b6:c9:af:81:0e:e1:93:90:
         ef:98:9d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:46:28 2024 by rpki-client on console-ams.rpki-client.org