Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/B0F9178297B811ECA8AA4230C4F9AE02.roa
File:                     B0F9178297B811ECA8AA4230C4F9AE02.roa (raw, json)
Hash identifier:          rH3iNkyKCP1WOHmdWJs473P5oOLqXKXAcstIBMnJV2I=
Subject key identifier:   79:34:EC:B4:7B:F8:F8:B7:6B:EC:FE:48:8B:7D:64:06:5D:02:C4:D5
Certificate issuer:       /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Certificate serial:       0295
Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/B0F9178297B811ECA8AA4230C4F9AE02.roa
Signing time:             Wed 15 Nov 2023 02:54:43 +0000
ROA not before:           Wed 15 Nov 2023 02:54:43 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     139659
IP address blocks:        103.74.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
                          rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 661 (0x295)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
        Validity
            Not Before: Nov 15 02:54:43 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=655432f3-5e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d0:ce:a7:c4:9c:66:ec:65:bc:42:74:b0:96:
                    7e:92:dd:68:a7:85:f5:89:1d:38:aa:1f:3c:34:12:
                    62:5e:bd:f6:27:45:a4:b1:fc:d6:dd:1c:be:32:24:
                    d6:48:6c:0d:f5:18:67:7d:da:04:1e:76:c5:3d:2b:
                    fc:bf:93:05:92:3b:b6:8b:83:64:b8:0c:9e:20:46:
                    14:fd:59:ff:e9:a4:b8:4f:af:57:f9:e8:9b:de:33:
                    62:6c:76:e1:ac:68:9e:e6:3a:06:a4:91:de:66:00:
                    8d:e0:cd:16:ee:14:df:dc:ed:93:d9:12:e9:c6:dc:
                    9e:11:25:f3:11:3f:0d:c7:49:60:89:af:f8:29:65:
                    1b:5c:cd:ae:97:51:f6:4e:a0:ea:31:d0:c2:98:a7:
                    2e:fb:bb:98:98:d5:f1:1a:2f:56:71:02:8d:e0:4e:
                    c5:6b:7e:f6:c6:41:6b:8a:ce:86:b5:5f:01:1b:5a:
                    96:17:f8:55:c4:25:b7:1d:7c:dc:32:b5:5c:71:31:
                    bd:85:4d:c3:2b:86:71:38:dc:d9:ea:fa:e8:60:6c:
                    d6:45:ab:88:9b:3b:db:78:5b:92:c4:e1:aa:65:a9:
                    d6:78:0b:93:f4:a6:7c:bc:50:ba:20:a9:10:67:d1:
                    3f:61:a7:aa:ee:f7:c7:b4:26:20:47:43:71:d3:89:
                    41:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:34:EC:B4:7B:F8:F8:B7:6B:EC:FE:48:8B:7D:64:06:5D:02:C4:D5
            X509v3 Authority Key Identifier:
                keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/B0F9178297B811ECA8AA4230C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:98:8d:95:e7:b6:8f:9e:3c:ba:19:4a:5e:98:ea:c8:50:36:
         80:0c:c0:34:33:c7:06:02:7a:4c:a3:ab:9e:b0:e5:d9:ab:f5:
         52:26:7c:f5:55:6f:5d:fe:9d:67:87:7f:cd:72:75:17:66:1e:
         8c:c3:f0:b5:9e:cf:c0:e5:44:c1:c9:ad:43:6b:4e:20:7b:6d:
         b9:30:bc:d1:f9:1f:96:55:24:b0:09:55:c3:0f:a9:0a:cd:f0:
         ff:c4:99:14:50:be:a3:bc:91:cf:e3:ef:51:00:0b:fd:1b:7a:
         e8:e6:cc:a9:89:af:e9:48:ce:07:86:e7:ea:e6:30:6d:25:11:
         a5:40:68:cd:15:7b:7e:40:33:de:49:92:3a:6b:72:37:4e:09:
         5c:82:2e:6f:8a:1a:34:ce:96:e9:3f:03:df:4a:b8:0b:1e:f1:
         74:8b:70:e0:1d:87:a3:8c:d9:30:e6:6e:15:9e:96:32:0c:f7:
         fe:2c:1d:84:61:4b:35:f2:52:fa:4b:b7:eb:21:72:b9:e2:c0:
         ca:56:c4:09:c8:80:6d:45:66:9c:91:30:27:50:a9:c9:be:80:
         bb:49:44:84:65:9d:35:12:a6:3d:a6:76:94:14:f0:38:fc:d8:
         cf:57:8a:b5:bb:88:44:39:b4:2d:da:76:f2:74:3c:25:a8:cb:
         7a:78:d2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:52:23 2024 by rpki-client on console-ams.rpki-client.org