Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/DD7E5CF29C3F11EFAB09C331C4F9AE02.roa
File:                     DD7E5CF29C3F11EFAB09C331C4F9AE02.roa (raw, json)
Hash identifier:          4z/BmPUjFoHSRBOOi3eLhOy6FBXwv/Bm1v1/mOuxKhI=
Subject key identifier:   45:50:12:1A:B0:C1:96:23:89:16:67:76:62:78:10:85:3E:13:01:6B
Certificate issuer:       /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial:       030C
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/DD7E5CF29C3F11EFAB09C331C4F9AE02.roa
Signing time:             Wed 06 Nov 2024 13:05:58 +0000
ROA not before:           Wed 06 Nov 2024 13:05:58 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     142063
IP address blocks:        103.172.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
                          rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 00:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 780 (0x30c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
        Validity
            Not Before: Nov  6 13:05:58 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=672b69b6-5af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:24:13:cc:c5:d3:7b:5e:d0:db:75:34:d1:4f:
                    da:55:37:23:83:53:30:aa:27:3b:15:0c:b2:f1:fd:
                    74:56:e0:55:78:62:b6:06:2b:d2:66:89:f7:d7:1c:
                    10:aa:e4:2d:b8:af:78:b5:e4:5e:82:6d:9b:55:0d:
                    f6:4f:34:9d:c8:5c:19:d9:ea:d7:fd:80:61:a5:9d:
                    a8:2d:0c:0b:8e:ac:e7:31:76:46:c6:2a:7a:12:bb:
                    4f:63:54:fe:03:40:9b:ab:3b:30:85:dd:84:da:cb:
                    0c:83:4b:22:68:63:0e:1d:4c:eb:a6:b4:64:45:16:
                    07:f9:45:9e:50:a1:24:cd:21:73:bf:81:77:3d:ba:
                    d5:c8:a3:15:84:fc:8e:ac:39:6b:14:e8:7c:03:a2:
                    36:bf:cb:bc:cc:0c:48:36:e9:42:d3:16:c8:97:7d:
                    d0:ca:21:ce:31:90:2e:77:e0:0c:48:c7:7d:96:eb:
                    e1:82:47:f9:1f:9f:68:55:64:01:35:ee:fa:cd:1d:
                    06:49:4a:5d:b4:94:1d:8e:30:c8:af:f2:35:f4:d5:
                    d7:63:a1:d3:82:05:71:e0:8e:6a:37:bc:b4:70:e5:
                    3e:8e:f8:21:92:ba:5d:05:fc:6c:c7:31:73:1e:07:
                    99:93:cb:a7:38:bd:89:d3:e1:e9:f3:4b:bd:3e:16:
                    c2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:50:12:1A:B0:C1:96:23:89:16:67:76:62:78:10:85:3E:13:01:6B
            X509v3 Authority Key Identifier:
                keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/DD7E5CF29C3F11EFAB09C331C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:98:ac:b0:54:84:7d:5a:16:4f:79:1a:eb:a7:f3:19:56:b0:
         4e:5e:03:e1:5b:4a:48:d4:43:6f:b3:12:ee:f6:06:0c:35:87:
         d1:cd:f7:76:e8:67:25:e3:e0:7b:91:c9:76:ea:db:dd:6b:c2:
         32:94:a2:15:ed:22:95:91:01:94:7c:dd:26:41:67:04:4d:22:
         b4:f3:98:78:e8:db:32:d6:02:6e:e9:58:f4:e4:87:8d:8d:c3:
         e0:8d:a8:04:77:1b:d4:38:7b:8d:f4:de:8a:c9:82:24:06:d9:
         cf:c4:69:2b:0c:3f:16:69:14:35:5c:ab:66:4d:69:1a:fc:8e:
         46:f4:cc:af:d3:5a:0b:e4:a3:2b:f9:1a:4a:19:4a:6d:88:92:
         bb:c8:d0:72:99:1c:6b:5d:e7:97:8d:73:4d:8f:3a:cf:30:c2:
         c8:99:4a:ef:7b:81:98:e8:cf:5c:77:17:84:99:bc:a1:20:e9:
         19:b3:e9:fa:8f:71:a5:cf:5b:75:63:22:70:24:ca:68:80:16:
         99:30:4c:a5:2e:be:84:52:9e:dc:db:b5:89:ba:98:24:1d:18:
         1c:af:e7:e4:e2:58:e9:0d:21:7e:85:b7:43:18:50:31:5f:4e:
         4f:e8:7f:d7:60:fa:00:c6:b0:f1:7c:c7:90:c2:58:e3:49:8f:
         9e:18:6d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:53 2024 by rpki-client on console-ams.rpki-client.org