Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/65051AB6BF3C11EAAF328582C4F9AE02.roa
File:                     65051AB6BF3C11EAAF328582C4F9AE02.roa (raw, json)
Hash identifier:          4eXLQ4JzaqPwx8QrXELsJd2j6i3Hu6f4WF3KeXD9VwA=
Subject key identifier:   A5:6F:8B:9A:D0:C5:D1:4A:1A:CF:4E:B2:59:BE:A2:18:2B:C5:12:09
Certificate issuer:       /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Certificate serial:       078F
Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/65051AB6BF3C11EAAF328582C4F9AE02.roa
Signing time:             Tue 02 Jan 2024 21:59:41 +0000
ROA not before:           Tue 02 Jan 2024 21:59:41 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     10021
IP address blocks:        103.23.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
                          rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1935 (0x78f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
        Validity
            Not Before: Jan  2 21:59:41 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=6594874d-3ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dc:bf:bb:36:31:e5:15:ce:29:e7:6a:5b:9a:
                    3e:05:ed:cd:d6:22:2f:41:51:e0:79:29:81:64:ba:
                    b0:53:92:ff:17:b9:21:e3:43:14:6f:97:97:34:e0:
                    11:c5:23:d9:53:68:44:65:fa:1c:ec:9f:03:ac:9b:
                    f3:22:38:44:b6:26:bb:2e:40:36:fc:a7:b1:d6:01:
                    ff:95:36:99:15:9a:c0:13:09:87:b6:53:e5:63:cb:
                    be:30:5f:3f:3a:2a:bf:05:53:f7:7b:50:79:d1:59:
                    9a:e0:b9:76:52:1f:df:b3:6d:18:e1:f9:c9:87:e5:
                    89:22:f4:86:46:ca:6e:9a:28:7d:9c:bd:ce:34:08:
                    18:6a:3d:7b:77:88:18:32:24:4f:39:80:a0:0c:93:
                    ea:0b:cb:b0:5d:94:f0:da:00:fe:0c:e1:2a:c3:d2:
                    8d:4e:5e:cf:7c:82:78:f5:54:15:a2:d3:34:84:29:
                    85:64:48:b3:9b:c1:f4:c3:65:a5:c3:58:16:14:ac:
                    4a:65:0b:7e:18:c7:1e:2a:77:cc:af:45:b1:12:0a:
                    97:52:ca:44:fb:47:db:e1:00:ed:89:af:70:c4:66:
                    65:fb:98:52:b1:29:fc:c7:1e:84:06:f3:18:63:b0:
                    b9:2c:8a:95:b5:26:c8:67:0a:2a:ea:f8:a5:da:89:
                    36:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6F:8B:9A:D0:C5:D1:4A:1A:CF:4E:B2:59:BE:A2:18:2B:C5:12:09
            X509v3 Authority Key Identifier:
                keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/65051AB6BF3C11EAAF328582C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:e2:81:1f:04:31:6a:cb:2d:6d:14:d7:91:dc:f2:1c:42:3e:
         8b:42:31:5f:62:3e:6b:f3:e8:58:36:4f:2b:89:b0:46:3a:ab:
         e9:77:0f:89:e7:78:88:51:94:36:d4:02:24:1d:8d:c0:3e:60:
         4e:62:ba:a8:51:c1:e2:59:88:cb:cd:96:7a:dd:bf:2b:d2:57:
         b0:e3:20:bd:a7:16:40:9e:b0:95:ed:40:85:7f:ea:4b:9d:df:
         75:01:d8:07:ae:6d:8a:7a:8a:6c:27:9f:a2:07:35:65:e1:c4:
         ef:94:1f:fa:0e:96:2c:97:e0:1f:a6:dd:4d:86:18:a6:66:ad:
         9c:17:02:e5:6d:58:36:7f:57:cb:78:8f:1a:ac:3b:6a:3c:9d:
         5b:ec:02:32:24:44:d8:db:b2:9d:3d:f4:1f:4f:d7:d1:6c:3f:
         ee:2c:f2:1b:e0:2c:e3:a8:c6:96:fb:e5:98:6c:21:ae:51:57:
         e3:df:82:88:26:47:c8:1b:91:3e:ec:4f:e9:fe:43:04:b1:4d:
         23:4d:c7:1b:a8:29:ef:39:e3:59:2a:4f:f0:dc:02:52:cd:cc:
         83:80:26:37:e1:7e:a3:3a:bd:e3:f8:aa:64:a9:18:71:25:68:
         02:3d:bf:3a:c0:ef:03:91:e4:c7:31:32:33:85:85:9e:6e:54:
         f2:47:48:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:48 2024 by rpki-client on console-ams.rpki-client.org