Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/E27CA57ECA9111EC9F9A7513C4F9AE02.roa
File:                     E27CA57ECA9111EC9F9A7513C4F9AE02.roa (raw, json)
Hash identifier:          CvNhNif2kexa5t8nfd9T8e8mIo+X5t5p7RUz7Ta3UhQ=
Subject key identifier:   6C:22:E2:AE:DF:81:44:82:C0:55:01:F2:2B:BF:EE:A5:37:A9:55:54
Certificate issuer:       /CN=A91D2258/serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135
Certificate serial:       020F
Authority key identifier: F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/E27CA57ECA9111EC9F9A7513C4F9AE02.roa
Signing time:             Wed 29 Nov 2023 03:34:29 +0000
ROA not before:           Wed 29 Nov 2023 03:34:29 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     4826
IP address blocks:        103.42.19.0/24 maxlen: 24
                          103.157.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl
                          rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527 (0x20f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2258/serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135
        Validity
            Not Before: Nov 29 03:34:29 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6566b144-46d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9d:db:7f:f3:f0:54:a6:11:fe:a8:f1:84:5c:
                    f5:30:61:88:46:4c:a7:fd:d2:21:bb:dc:0d:11:32:
                    d6:c6:c6:cf:8a:ab:38:11:c5:f5:a3:cc:de:da:68:
                    0e:f5:ed:fe:be:42:72:80:60:86:a5:bd:e6:5b:f3:
                    63:69:d4:a2:ed:57:f9:1a:85:57:bd:d4:6b:26:ba:
                    92:66:c3:34:03:c8:27:44:7e:27:00:35:f7:46:2b:
                    fa:e6:90:5c:aa:dd:cd:cc:32:8a:39:b6:a7:57:a5:
                    a4:8c:2f:41:ef:a3:d5:ca:67:d2:1e:29:75:f3:43:
                    98:d0:45:14:e4:26:2c:79:58:58:1b:da:69:0d:fd:
                    75:ff:01:99:9f:77:d5:d9:8a:e8:83:a9:b3:1d:2f:
                    57:6e:86:a7:15:34:07:a4:10:31:53:6c:c3:bf:d9:
                    f2:af:20:c0:13:52:32:cf:ab:d2:f3:4a:4b:a2:79:
                    df:ca:8c:62:85:ed:67:7b:1c:c9:34:31:d2:61:f6:
                    1a:2e:c5:1a:11:19:8e:46:18:ea:5c:08:0e:b1:24:
                    62:82:dc:a3:ac:d6:92:5d:27:db:87:32:29:3b:e4:
                    5b:71:e6:75:44:5e:37:39:ab:80:90:3b:ef:00:39:
                    15:4e:77:e9:36:93:be:b9:d4:1a:50:5b:d2:48:63:
                    27:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:22:E2:AE:DF:81:44:82:C0:55:01:F2:2B:BF:EE:A5:37:A9:55:54
            X509v3 Authority Key Identifier:
                keyid:F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/E27CA57ECA9111EC9F9A7513C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.19.0/24
                  103.157.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:65:09:08:ab:69:7b:b9:6d:6b:be:9c:90:27:4a:c1:79:61:
         9c:61:60:f4:10:87:bc:9c:5e:9a:c4:51:78:81:30:02:20:41:
         79:fd:88:e7:be:96:73:0f:3b:d0:5c:55:ff:cb:70:19:1b:b5:
         98:1f:db:2a:05:41:52:e3:4f:64:8f:bf:20:20:b1:73:1f:24:
         94:4b:68:79:97:04:26:4c:11:65:ec:b9:a1:44:6c:41:f9:64:
         c6:75:00:cc:fa:f1:73:82:47:ec:69:48:84:99:a7:a1:1f:19:
         28:6f:ef:55:ec:0d:1f:2e:96:dd:ad:5a:9e:c9:98:0d:aa:dc:
         69:99:54:ec:16:eb:da:6d:d8:6b:64:ef:a3:9c:65:31:04:96:
         15:49:b0:27:71:99:88:9e:6b:70:a5:3e:b0:ed:82:af:a9:c0:
         d2:be:52:01:53:bf:e4:c1:fc:55:fd:69:d8:25:dd:9f:a8:16:
         d4:b5:5b:a8:f9:6d:b4:b2:7b:cd:37:c9:c0:f3:73:5e:fd:fb:
         b0:77:34:6d:a5:93:89:2b:fc:d3:02:be:31:5a:c3:d9:09:6b:
         0c:d9:93:15:fa:24:01:94:aa:31:5e:fc:95:67:e7:d0:6a:6f:
         a2:cf:4a:79:b2:4c:99:4a:26:b7:66:7d:6a:6b:61:5d:fd:0c:
         47:27:66:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:46 2024 by rpki-client on console-fra.rpki-client.org