Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/6573863A759B11EF9C117755C4F9AE02.roa
File:                     6573863A759B11EF9C117755C4F9AE02.roa (raw, json)
Hash identifier:          /YBepwkrSKyiO32KQXkwoddzieTMhKVXLDr6JjkdpKU=
Subject key identifier:   97:E8:14:F1:86:BA:38:24:EE:FF:56:BC:55:D1:46:E7:F2:36:C3:2F
Certificate issuer:       /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
Certificate serial:       0A58
Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/6573863A759B11EF9C117755C4F9AE02.roa
Signing time:             Wed 18 Sep 2024 08:52:56 +0000
ROA not before:           Wed 18 Sep 2024 08:52:56 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     38562
IP address blocks:        103.175.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2648 (0xa58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
        Validity
            Not Before: Sep 18 08:52:56 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66ea94e7-c340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:48:d4:af:ef:3a:6c:6b:6d:68:a7:51:9b:13:
                    52:fa:74:20:75:2c:69:8a:8b:bb:40:81:d8:9d:26:
                    1c:d5:f6:94:c3:3d:fd:ee:c3:b8:1b:c8:03:4e:20:
                    41:cb:4b:9a:bc:61:94:cd:bf:21:3e:75:4b:0d:51:
                    4f:38:0f:fb:46:03:2a:90:09:09:22:17:2c:a0:d0:
                    25:af:05:a6:e6:a5:11:f7:13:cd:8f:5d:22:06:33:
                    a0:96:f1:a9:ec:8f:49:55:f4:d8:6d:74:53:ee:e2:
                    ad:d6:54:48:09:b6:ab:a9:cc:ad:0c:c3:36:2c:8e:
                    60:46:4f:10:10:12:51:13:42:20:a1:a9:3f:1b:f1:
                    6b:18:52:f9:ef:f5:a8:23:f0:e5:6a:c5:71:e2:0a:
                    44:72:5e:43:b8:46:f6:e6:f8:44:03:70:a0:e8:53:
                    a9:0f:98:5d:ee:0b:ec:63:0a:10:73:6f:6d:4c:3a:
                    52:99:58:7c:8f:26:07:d2:5b:55:7a:ca:d5:9f:ef:
                    19:e7:81:20:b4:e0:5c:4e:f5:fc:5a:d5:b2:ef:b5:
                    b5:68:f6:c7:28:db:80:f0:e1:ba:eb:ea:99:ff:9a:
                    93:c3:b7:27:ab:05:b5:d5:e5:ed:9f:93:28:9d:a2:
                    88:93:db:c2:44:58:df:19:da:14:11:77:b4:e4:ca:
                    ca:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E8:14:F1:86:BA:38:24:EE:FF:56:BC:55:D1:46:E7:F2:36:C3:2F
            X509v3 Authority Key Identifier:
                keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/6573863A759B11EF9C117755C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:c1:e4:7a:30:a9:78:4c:ed:df:17:1a:c7:d5:27:97:a3:d2:
         3b:a5:7b:79:6e:12:0f:6b:5e:f2:f2:5a:10:32:96:e1:db:14:
         7f:8b:fb:cf:01:29:53:25:92:8f:1b:2e:2c:0c:d7:de:e3:ee:
         69:64:50:f5:17:52:de:59:d3:49:d8:8a:58:a3:2e:5b:98:a9:
         06:4b:b3:a6:08:97:52:ad:5a:50:c4:67:0c:60:4e:9c:4f:03:
         2c:7a:77:a3:6a:36:bd:f5:bf:03:bf:ea:78:d6:38:90:ff:99:
         ae:9f:92:aa:39:ce:12:48:dc:11:18:2e:b7:db:a7:bd:55:0b:
         99:71:29:06:67:12:f2:fd:31:d5:5a:3c:c1:9e:e0:ec:26:97:
         fa:46:cf:27:d5:36:5b:83:9e:f5:6f:e3:77:94:96:8d:27:db:
         e3:43:49:8d:05:b8:4a:92:48:af:1c:20:28:55:9b:66:9f:cb:
         a1:12:42:db:dd:0f:e3:2e:54:25:aa:02:1e:c8:fd:d1:00:c9:
         af:c0:c7:21:e7:fa:a6:df:eb:ce:ee:9b:31:6a:41:80:37:9d:
         0f:9e:ef:c8:a0:53:b4:6d:90:e5:8b:8e:28:1a:10:cd:59:ae:
         f7:32:c1:f2:21:af:7e:4a:04:79:5b:d3:cc:26:2d:66:e3:d0:
         c6:58:ba:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:33 2024 by rpki-client on console-fra.rpki-client.org