Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/D061270A9C5111EEB28AC931C4F9AE02.roa
File:                     D061270A9C5111EEB28AC931C4F9AE02.roa (raw, json)
Hash identifier:          8Xa/VwyU4s9nAISVSMWl7RHJ83XTMNtNTrp4qhGQTeQ=
Subject key identifier:   9E:86:53:5C:3D:DB:FE:A8:D5:64:E7:26:81:DC:05:86:BA:85:67:BF
Certificate issuer:       /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541
Certificate serial:       0381
Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/D061270A9C5111EEB28AC931C4F9AE02.roa
Signing time:             Wed 17 Jan 2024 02:04:25 +0000
ROA not before:           Wed 17 Jan 2024 02:04:25 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     134480
IP address blocks:        103.175.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl
                          rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897 (0x381)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541
        Validity
            Not Before: Jan 17 02:04:25 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65a735a9-e0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:8d:3e:1e:5d:ea:15:19:55:3e:dd:12:3b:
                    38:e6:0d:99:1e:4e:93:01:cc:82:1e:6f:3f:82:41:
                    d3:1c:ce:84:ea:f6:a4:68:25:dc:08:03:83:8c:2d:
                    bc:7a:03:5d:ea:1c:09:34:8a:c3:90:03:97:dd:dc:
                    6d:ea:4d:ce:b2:6d:b9:f5:0a:0b:b8:41:1e:aa:56:
                    71:5f:53:39:ec:c8:24:16:9d:85:9e:a9:72:96:57:
                    42:4e:6e:24:aa:bf:d8:32:87:b7:48:6a:d8:cd:7f:
                    64:ed:78:3f:ea:cb:25:16:91:8c:05:44:05:4c:c5:
                    a9:6e:24:7b:35:d3:79:8f:00:ac:44:b2:4d:06:2f:
                    a5:a2:27:22:57:7b:2f:1d:2b:de:4a:86:37:1f:cb:
                    ec:74:4b:89:9d:d0:e3:3f:d4:e7:27:69:6b:a1:fc:
                    ab:91:44:b8:aa:f0:33:5e:fd:d4:8f:fc:7e:a6:e7:
                    ab:b8:e1:4a:ba:3b:0c:33:a7:87:db:02:bd:b0:aa:
                    14:24:64:cd:ef:59:5e:e9:53:52:99:f3:ac:60:42:
                    97:b5:91:79:d4:40:6f:9b:52:d2:a0:29:04:db:5d:
                    67:14:86:0a:4c:b3:b9:c8:7f:a9:e7:f5:65:c5:da:
                    3f:ce:71:e2:82:27:ca:5c:04:cd:78:10:f4:ba:fa:
                    a8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:86:53:5C:3D:DB:FE:A8:D5:64:E7:26:81:DC:05:86:BA:85:67:BF
            X509v3 Authority Key Identifier:
                keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/D061270A9C5111EEB28AC931C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:fe:83:c9:d8:e4:89:9d:33:43:1d:ca:2a:aa:b0:82:43:89:
         0b:05:d9:0e:f6:ff:53:c1:9e:e3:7e:be:34:cd:d1:47:9c:2d:
         04:cf:f9:93:a8:f0:ab:eb:30:03:df:83:49:e5:9b:ca:e9:67:
         a5:07:b3:aa:e4:af:c0:cd:b6:73:45:d6:85:ff:81:76:49:07:
         d2:a8:b7:71:9e:a9:0c:fc:e2:2a:8b:a7:f8:3d:6d:00:81:25:
         61:6f:da:bd:bf:96:a7:a2:38:f1:3d:8a:b2:c5:ad:0f:0d:27:
         a5:a1:3d:f2:91:12:a2:41:97:90:5b:08:47:e8:97:2f:fa:77:
         7f:ff:c0:e0:47:88:2a:46:79:a3:1f:c0:d8:a7:8b:5b:39:7a:
         ff:34:cb:86:cc:f8:9d:3f:d5:c3:6a:88:25:9e:d5:90:1c:92:
         fb:04:f7:c2:38:fa:3b:3d:2a:5d:4e:9c:1b:d7:79:a0:32:f2:
         58:1f:00:20:dc:3c:97:ac:6b:31:59:21:3d:14:04:cc:3f:b5:
         d7:8d:aa:5a:28:df:2e:29:09:ab:bd:67:e9:e2:95:99:4c:0d:
         8e:11:77:73:ee:d6:bf:f9:6d:a7:e6:e7:ec:b1:1a:2f:e3:4f:
         17:83:4d:90:d8:2a:e0:ce:06:7e:45:e3:97:94:3d:5a:b9:9f:
         4b:62:da:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:28 2024 by rpki-client on console-ams.rpki-client.org