Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/119B023E80A111EFAC559545C4F9AE02.roa
File:                     119B023E80A111EFAC559545C4F9AE02.roa (raw, json)
Hash identifier:          UcLab4fcVSxFTCKz9jwV2FcIwBHm9AwWLQOJArqJHjI=
Subject key identifier:   22:EE:0C:51:87:29:42:42:32:B6:EA:EA:23:BF:44:AD:BF:EE:9C:BA
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       3591
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/119B023E80A111EFAC559545C4F9AE02.roa
Signing time:             Wed 02 Oct 2024 09:31:15 +0000
ROA not before:           Wed 02 Oct 2024 09:31:15 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     4608
IP address blocks:        203.30.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13713 (0x3591)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Oct  2 09:31:15 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66fd12e2-3fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2f:42:09:cc:d4:86:2b:db:4f:4c:2b:17:73:
                    c4:09:33:47:6b:64:25:f3:d8:00:3a:26:3a:10:ee:
                    c3:e6:20:ae:9b:0f:94:b0:f9:05:22:42:fc:3c:7b:
                    24:de:90:49:9f:4c:1d:40:fb:82:8d:b0:ba:e6:3e:
                    44:26:e5:6d:eb:f9:a0:c3:26:b6:1b:53:d6:07:34:
                    cf:97:a7:a3:36:7e:9b:f3:1b:a9:8e:de:33:95:af:
                    c3:9f:43:85:fa:32:36:57:c0:aa:71:5c:ca:23:18:
                    2a:53:26:e7:da:87:dc:5f:79:10:05:09:b6:65:24:
                    ef:bb:3d:91:2f:75:08:6b:39:f0:06:e3:48:34:59:
                    5d:2d:67:ad:49:d6:d5:0b:65:ac:80:fe:40:c9:34:
                    9a:75:f9:70:f2:62:fa:ae:81:04:92:ba:1f:02:2a:
                    1d:74:9d:8c:f5:15:74:73:03:80:95:e9:dc:cf:34:
                    ea:ed:1e:37:b9:f3:ae:29:b0:bb:3f:0a:98:c2:28:
                    4a:7b:e7:5c:94:57:00:13:9a:96:e2:63:bc:ca:e2:
                    8c:ec:b6:b8:6c:17:8b:c8:73:f0:d1:87:9c:d0:ae:
                    ee:fb:60:d9:4c:da:77:b4:2b:f3:1f:61:e5:75:3e:
                    39:f0:14:9f:b5:e2:e7:27:0d:25:40:8e:9b:24:b5:
                    3b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EE:0C:51:87:29:42:42:32:B6:EA:EA:23:BF:44:AD:BF:EE:9C:BA
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/119B023E80A111EFAC559545C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.30.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:da:41:dc:dc:a7:4e:94:1d:3b:21:f0:8d:c1:13:db:96:07:
         7e:3f:18:81:16:31:3b:97:bc:55:7a:23:a9:66:f5:77:59:92:
         4e:9f:1f:e4:f7:b4:f8:5a:98:f7:ae:1e:44:b4:f6:09:9f:fa:
         41:86:df:79:bd:90:48:1f:e5:33:a1:f1:4a:0c:43:bc:81:a0:
         94:fa:ec:20:b5:34:2c:4d:fc:7a:cf:45:5a:ed:94:f3:c5:a1:
         04:8d:ae:9f:ff:54:f1:d6:f0:c9:1c:7d:ce:b7:54:ba:58:e5:
         06:d6:59:6e:24:cb:d7:c0:7d:0f:19:f5:24:56:b7:72:f6:ab:
         13:19:e6:16:41:6d:d6:b9:53:93:3c:55:3f:2a:95:92:7f:91:
         b3:02:f9:e5:9f:51:4e:52:b1:fb:6a:5d:e4:a2:a4:62:a2:96:
         bc:40:fb:ad:b2:2d:78:28:d6:52:e1:6b:4f:9d:7b:36:e7:31:
         b5:7a:8c:fa:df:89:ca:56:3b:c4:84:92:35:81:09:6d:69:14:
         49:94:ad:be:65:ef:c2:e9:bc:3d:fa:d2:c2:39:59:1e:55:c0:
         29:0e:14:ef:cf:a7:0c:06:fc:99:80:86:87:82:b6:1a:56:e3:
         d0:83:6d:20:fe:1a:e5:d1:55:58:17:ed:28:30:d9:39:ff:bc:
         e4:e7:5c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:50:05 2024 by rpki-client on console-ams.rpki-client.org