Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/C5713632828611EC83D75A3DC4F9AE02.roa
File:                     C5713632828611EC83D75A3DC4F9AE02.roa (raw, json)
Hash identifier:          tV4u9al3y6g99UeUfGb7cNTPt/AoQwjdzEg1zE0T9TE=
Subject key identifier:   5E:77:3F:D9:1C:DE:DC:F6:2D:EF:0D:3C:44:15:EC:30:F8:69:53:51
Certificate issuer:       /CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20
Certificate serial:       039F
Authority key identifier: 26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/C5713632828611EC83D75A3DC4F9AE02.roa
Signing time:             Fri 03 Nov 2023 02:13:54 +0000
ROA not before:           Fri 03 Nov 2023 02:13:54 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     147189
IP address blocks:        103.174.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl
                          rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 May 2024 02:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927 (0x39f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20
        Validity
            Not Before: Nov  3 02:13:54 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65445762-236d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:56:4b:f4:c6:00:60:26:e6:bd:e0:41:33:d2:
                    32:34:45:42:b5:30:4f:42:db:2b:c8:1b:96:ec:e0:
                    f1:58:0e:e3:7e:06:77:91:94:71:c3:8d:bd:19:39:
                    2f:27:47:a8:33:5f:93:6a:fa:4d:14:d6:05:fe:02:
                    55:32:56:8e:d8:ab:da:5f:03:42:f7:41:ed:23:bf:
                    89:84:f0:f1:28:51:36:a1:8e:47:6e:85:cf:07:f4:
                    59:d7:42:49:d0:3a:d2:20:ae:34:23:ae:ae:f7:fa:
                    31:4d:88:d4:c2:aa:c2:16:fa:ec:35:5e:40:15:02:
                    50:b2:f6:b2:4c:d9:fc:55:6e:a4:5f:93:09:63:be:
                    5b:a2:c1:a5:b8:e1:3e:51:a7:13:c0:b5:af:fb:da:
                    50:6c:c0:94:6b:b2:0b:93:bb:1d:97:88:8a:42:88:
                    eb:7a:a5:a1:23:b8:ea:45:5c:81:65:4b:40:75:ea:
                    58:44:fd:6f:d9:0f:78:75:f9:2b:9e:5d:c5:bc:8d:
                    f9:ab:ef:03:98:95:9f:62:f3:64:a4:82:ce:38:ef:
                    2d:c6:d1:bf:d9:29:03:01:eb:35:ec:43:ca:d8:38:
                    3a:24:a3:ca:3d:df:3e:d4:70:d4:5e:51:48:48:66:
                    a2:76:43:1c:70:52:60:e2:b5:8d:f3:d0:67:a1:ac:
                    cd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:77:3F:D9:1C:DE:DC:F6:2D:EF:0D:3C:44:15:EC:30:F8:69:53:51
            X509v3 Authority Key Identifier:
                keyid:26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/C5713632828611EC83D75A3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:f0:96:57:fd:61:18:9e:64:33:ee:a6:29:10:0d:8c:f8:b0:
         44:1a:a3:fe:b5:a1:0b:98:c9:43:ca:55:13:f5:31:0c:c1:0c:
         8a:6a:67:90:3b:31:7a:28:99:35:f1:2a:5f:21:4b:5a:23:1f:
         d1:6b:98:0f:08:cd:75:91:b7:f3:5e:67:04:b1:c7:18:ea:14:
         7a:1b:97:7b:bd:dd:12:71:16:a5:80:7e:eb:b6:ca:0f:83:de:
         4a:ed:9f:08:c0:6a:14:eb:ee:f9:52:3b:97:06:1f:b2:32:37:
         54:6e:43:52:d4:c1:b9:1b:18:91:70:20:fe:73:2c:27:fb:3f:
         93:e1:39:df:af:8c:72:f1:5d:67:ae:cb:0e:54:30:4d:1c:d7:
         af:6f:75:af:2f:7c:e9:20:55:ff:a2:9b:ce:dd:c9:6e:44:9e:
         5d:fb:d7:b2:12:6f:3f:ce:fd:3b:ec:7d:9d:69:78:2d:83:1e:
         bb:95:58:6b:ff:13:1d:4e:ab:a2:9b:b0:72:45:13:69:ae:1c:
         07:60:ec:bc:b9:63:37:e7:d7:c8:26:77:20:55:6e:4d:e4:84:
         d9:fd:63:1c:fe:2c:99:c7:03:07:92:e7:39:ca:13:0c:23:ef:
         7a:21:8e:3f:f1:c2:cb:41:6c:65:73:96:b6:69:e9:e4:52:29:
         3a:85:0b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:53:27 2024 by rpki-client on console-fra.rpki-client.org