Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/1FBEA1EEDE9711EC9289256FC4F9AE02.roa
File:                     1FBEA1EEDE9711EC9289256FC4F9AE02.roa (raw, json)
Hash identifier:          0gEYccIBYOr+zuyign/+C00HzqYzr+UjJcZXD9KjzOg=
Subject key identifier:   29:04:EB:8B:05:FF:12:BA:C9:9D:2A:77:40:8D:CA:4E:37:30:B1:EF
Certificate issuer:       /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Certificate serial:       0328
Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/1FBEA1EEDE9711EC9289256FC4F9AE02.roa
Signing time:             Wed 27 Dec 2023 02:14:38 +0000
ROA not before:           Wed 27 Dec 2023 02:14:38 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     137427
IP address blocks:        103.254.73.0/24 maxlen: 24
                          192.197.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl
                          rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 808 (0x328)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
        Validity
            Not Before: Dec 27 02:14:38 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658b888e-57f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bd:14:a8:57:a6:46:12:94:d1:ed:d9:08:1f:
                    49:27:10:0f:84:79:c3:bc:40:2c:c1:fc:cf:e7:08:
                    a4:f6:1b:55:3a:63:84:fa:e4:62:78:fa:cd:7f:61:
                    a8:70:89:4f:de:2b:fa:bd:65:0a:cd:ee:83:57:f0:
                    04:a6:3b:b5:6d:a1:b4:3a:5c:a4:af:68:d9:4d:0f:
                    24:fd:b1:5e:33:db:a9:97:c1:35:27:9a:47:76:11:
                    ca:9d:5f:ce:e4:00:31:eb:4d:da:82:3e:7e:f5:1a:
                    15:97:4d:00:47:f5:a6:f3:05:ca:35:6e:fc:42:a9:
                    f7:74:ae:c2:d7:c0:02:0a:14:bc:ba:9a:21:6b:2a:
                    84:2a:67:7b:b2:64:6f:67:93:7f:6c:97:98:f7:79:
                    f3:b4:76:fc:a7:9c:00:2b:10:9d:0d:40:84:93:46:
                    0e:62:b5:40:81:de:bf:10:08:7e:54:20:82:35:5a:
                    46:06:79:92:98:ff:a6:81:df:0c:d1:52:df:ad:77:
                    3f:06:72:2a:fb:06:33:ec:54:15:cf:36:d0:e0:55:
                    4a:17:81:ca:3f:37:ef:e0:60:31:4e:32:7e:27:04:
                    f2:69:50:7d:b3:bf:a7:45:76:55:08:b8:64:62:96:
                    a4:3d:a9:21:37:5f:cc:78:51:72:4e:ca:2c:74:a8:
                    cb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:04:EB:8B:05:FF:12:BA:C9:9D:2A:77:40:8D:CA:4E:37:30:B1:EF
            X509v3 Authority Key Identifier:
                keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/1FBEA1EEDE9711EC9289256FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.73.0/24
                  192.197.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:1f:bf:ff:b5:10:cd:68:d9:d2:90:2a:91:e2:f3:4f:bb:fd:
         ae:89:c1:13:10:0c:f2:4f:5a:df:bc:65:0f:46:0e:6e:2d:69:
         85:e0:9d:b7:7e:b4:8d:62:95:fc:58:68:0e:75:33:49:13:e6:
         15:75:bf:5c:bc:39:b0:44:18:e9:7c:7d:ea:12:d2:32:98:ee:
         5f:f9:86:c2:84:5a:79:30:55:38:98:81:c3:a4:db:7d:f2:42:
         26:ae:e5:ef:fb:60:46:59:1c:1d:5d:94:c4:bc:24:67:ab:3b:
         ce:30:2f:92:a3:a0:75:f7:3c:ef:34:2c:53:5e:35:ef:a2:3b:
         33:20:e1:eb:55:78:b1:72:0a:ac:a0:2c:68:57:ed:17:76:73:
         9e:77:dc:c8:32:fb:ea:fd:68:a0:4b:0f:d1:9e:99:f7:72:30:
         84:89:ed:5e:0d:15:80:6e:3d:ca:5e:7e:ab:36:12:9f:50:0b:
         db:ab:18:9d:b7:a3:29:de:af:ae:b0:c9:ab:fb:49:9d:7f:d3:
         cd:7e:45:7b:9f:5b:92:64:89:19:d3:9d:b1:1a:c3:74:21:e2:
         90:7d:52:22:7c:11:2b:a0:8f:b1:4f:a9:69:6d:ac:77:73:24:
         20:04:d3:7f:68:9c:90:1d:62:63:62:c1:8e:1c:71:55:4f:58:
         7a:da:c2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org