Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/56617572537F11EB9C970658C4F9AE02.roa
File:                     56617572537F11EB9C970658C4F9AE02.roa (raw, json)
Hash identifier:          2DIFhNd/HGOMPfn8KyshfkQGAl/ng92desoVaGGJW4M=
Subject key identifier:   BA:2F:8F:73:5E:05:0E:B8:28:37:E3:97:53:5E:B0:73:40:0F:5E:B8
Certificate issuer:       /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Certificate serial:       05E1
Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/56617572537F11EB9C970658C4F9AE02.roa
Signing time:             Fri 12 Jan 2024 23:31:38 +0000
ROA not before:           Fri 12 Jan 2024 23:31:38 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     141436
IP address blocks:        103.159.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl
                          rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1505 (0x5e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
        Validity
            Not Before: Jan 12 23:31:38 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65a1cbda-f05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5a:fd:e3:94:a1:0c:2d:06:58:d6:c0:78:d9:
                    02:e2:04:f3:b1:73:8b:cb:73:d9:cd:8b:7c:f8:25:
                    42:8e:71:ea:50:f3:c3:27:1f:87:61:e6:68:d1:f5:
                    a9:1c:f8:f9:46:18:68:21:a9:85:65:b5:52:56:aa:
                    ad:d4:83:64:d5:fe:75:04:1e:97:95:85:57:8a:0c:
                    71:d1:a7:d2:cc:44:70:36:53:0b:03:e3:17:10:29:
                    c0:3a:ce:7d:26:70:c5:b9:9d:75:fd:14:24:f1:28:
                    0f:ae:37:61:ae:e9:64:bd:a3:27:6f:53:cc:84:b4:
                    4b:9e:24:b7:02:c7:05:77:9c:6c:76:d3:d1:19:05:
                    59:39:33:ad:b1:e4:3c:65:23:d5:ae:ac:07:1d:f6:
                    ce:54:5c:d1:9d:5a:79:67:b0:21:3e:e2:e5:57:bc:
                    72:f7:7d:9d:f3:b1:e8:d5:4d:38:9c:29:b4:ec:fe:
                    73:1d:0a:b6:d6:d4:82:a3:01:b1:16:3b:68:e3:0a:
                    8e:87:e8:73:8a:c5:92:1f:2b:ba:b1:8c:33:c1:39:
                    6b:4c:10:63:1a:75:56:34:88:d5:ca:49:82:17:63:
                    99:99:d7:d2:10:41:9d:15:56:66:b3:07:74:1a:1c:
                    b2:35:ad:93:37:3d:8a:5b:50:86:09:83:36:f0:94:
                    3a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2F:8F:73:5E:05:0E:B8:28:37:E3:97:53:5E:B0:73:40:0F:5E:B8
            X509v3 Authority Key Identifier:
                keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/56617572537F11EB9C970658C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:ae:49:d7:78:02:35:48:b1:c4:96:63:01:af:67:31:a5:f8:
         d5:e8:69:02:e6:25:79:95:c9:5d:b0:29:e9:18:35:a0:65:99:
         53:1e:cd:4f:a2:8e:bf:2d:cb:20:60:15:67:2b:50:0d:20:f4:
         7b:71:52:ea:e6:cd:62:69:43:7f:51:10:c2:75:f3:ca:6a:16:
         a5:c2:04:a0:ee:45:f3:48:ef:8c:f2:3c:ee:ec:97:90:57:d9:
         ff:1f:57:f7:08:5f:9c:1a:b0:fd:0d:ef:87:a0:fc:f9:cf:6f:
         ca:e4:f7:af:73:88:c2:6a:86:89:49:3c:92:ab:7e:ca:b7:a2:
         b4:a3:22:ce:ee:37:46:82:b5:ea:48:de:d9:f9:30:4c:c9:0a:
         a0:f4:97:f1:31:a8:a6:06:fc:06:29:9b:1e:3b:35:06:3c:37:
         9e:be:eb:54:9e:42:02:22:a4:aa:3b:1b:6a:49:fe:34:19:9a:
         0e:25:31:0e:c5:b9:32:fc:00:d3:08:c6:be:64:1c:79:e3:5f:
         9a:2b:9a:a0:f5:20:3c:3f:91:94:b0:a7:61:19:52:79:44:c5:
         eb:03:62:16:c2:0a:09:82:ab:d5:f7:6e:c1:20:0b:f7:8f:7a:
         6c:f1:2e:d5:f9:d7:86:68:04:c1:f6:c9:67:19:a7:17:01:de:
         95:5b:18:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:35 2024 by rpki-client on console-fra.rpki-client.org