Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/1B8DE01C641911EF83FFBF3CC4F9AE02.roa
File:                     1B8DE01C641911EF83FFBF3CC4F9AE02.roa (raw, json)
Hash identifier:          mAZNBvYiKFXdkzpTN4tNBsnyhqKr4h/2Tyrx/kSmdy8=
Subject key identifier:   F5:0A:12:D3:EF:1C:4D:36:7C:62:02:A2:2E:7F:6C:59:1A:FB:95:5F
Certificate issuer:       /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB
Certificate serial:       0140
Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/1B8DE01C641911EF83FFBF3CC4F9AE02.roa
Signing time:             Tue 27 Aug 2024 02:07:27 +0000
ROA not before:           Tue 27 Aug 2024 02:07:27 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     398704
IP address blocks:        103.251.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl
                          rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 09:51:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB
        Validity
            Not Before: Aug 27 02:07:27 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66cd34df-f8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5b:5d:9a:8e:25:ca:f7:6e:a3:ae:10:35:51:
                    d3:bd:17:b9:77:24:06:a0:52:65:3d:16:59:27:9a:
                    5e:43:82:38:35:ae:54:ae:a6:7e:c7:12:27:25:9a:
                    0b:93:eb:11:33:ec:0d:b5:d1:b0:8d:a8:71:9b:98:
                    6c:55:e4:77:90:67:dc:35:c0:eb:50:0d:8f:c4:07:
                    b5:31:3e:b1:a2:20:11:98:45:2c:92:48:db:05:7f:
                    0c:56:17:d6:82:01:e0:75:1f:72:f3:28:e8:da:16:
                    a0:48:c2:70:f5:4c:ae:84:8e:b1:23:0f:b9:28:82:
                    e3:4a:73:35:e1:98:60:27:26:79:aa:2a:a8:36:96:
                    fd:6d:c6:f9:0e:62:bb:44:5d:5c:4a:c5:89:bd:79:
                    ff:8a:35:2a:22:9a:fd:21:57:28:3b:80:95:42:06:
                    ba:ab:dc:e2:70:f5:64:19:43:d3:4e:9d:04:ef:28:
                    3b:8a:cb:6a:f0:ea:8d:08:6f:b7:b7:9c:b9:39:30:
                    96:db:5a:9b:3b:4f:bb:68:b1:54:2d:91:2d:b7:60:
                    08:c0:a9:f9:57:e8:55:5e:6a:93:b9:80:5e:09:71:
                    4e:5c:d0:0a:e5:e3:59:8a:5c:3a:b1:3a:45:48:2c:
                    51:57:24:00:d9:e1:2a:c8:8f:8c:99:98:b0:95:86:
                    c8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0A:12:D3:EF:1C:4D:36:7C:62:02:A2:2E:7F:6C:59:1A:FB:95:5F
            X509v3 Authority Key Identifier:
                keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/1B8DE01C641911EF83FFBF3CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:ab:d7:7e:0e:c8:6d:9f:cf:9e:0e:0f:1e:c3:54:44:d4:4b:
         2e:39:10:a0:95:20:bb:91:3f:65:73:f0:44:9d:8e:67:9d:71:
         11:76:db:82:c1:7e:9c:86:5e:3c:6f:91:80:b2:e0:a3:a2:55:
         22:9a:ea:3d:62:ca:a9:fc:31:d6:b0:0e:9a:b1:ca:19:f7:73:
         1b:48:b3:76:b2:84:5a:c2:07:58:79:28:f7:5d:61:24:3a:55:
         ba:43:bc:64:70:d8:b8:72:c9:d8:f6:d6:32:0d:6c:0d:48:8b:
         da:a3:78:b4:d2:ff:31:ed:ea:68:fd:75:3c:d5:12:d2:37:f0:
         1d:d1:67:f5:30:5e:47:02:8f:ab:20:80:94:7d:3a:6e:df:5a:
         99:af:e4:df:17:4c:b4:b3:e3:18:43:48:e8:93:dc:f4:33:c1:
         1b:42:40:bb:c7:b7:39:c6:5b:03:82:37:88:b0:bf:d5:ec:7d:
         e1:75:e3:7c:1d:4c:c0:1f:4b:f4:c9:b4:d9:7d:a2:e3:67:65:
         63:59:93:eb:1d:dd:4c:74:94:96:a2:ba:43:44:a3:32:07:26:
         05:66:a3:a2:a0:10:cf:3a:c1:13:59:79:bb:92:73:ab:df:a2:
         24:5f:de:20:f6:26:01:10:82:02:0c:7f:a5:54:29:01:e8:31:
         85:b6:df:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:06:29 2024 by rpki-client on console-fra.rpki-client.org