Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/732ACDFA1C7D11EF95F4D214C4F9AE02.roa
File:                     732ACDFA1C7D11EF95F4D214C4F9AE02.roa (raw, json)
Hash identifier:          D54fzGr3XuP/sJMXmQZGHvGWo91QA4TjhHmNz0qmjV0=
Subject key identifier:   36:90:6C:02:D4:E2:F1:FD:38:64:88:F2:EC:63:9A:7E:49:A0:F0:33
Certificate issuer:       /CN=A91E3015/serialNumber=79A99E12313A7671F0D959070D50FFEF4B525525
Certificate serial:       02
Authority key identifier: 79:A9:9E:12:31:3A:76:71:F0:D9:59:07:0D:50:FF:EF:4B:52:55:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eameEjE6dnHw2VkHDVD_70tSVSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/732ACDFA1C7D11EF95F4D214C4F9AE02.roa
Signing time:             Mon 27 May 2024 23:04:20 +0000
ROA not before:           Mon 27 May 2024 23:04:20 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     150798
IP address blocks:        103.107.178.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.crl
                          rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eameEjE6dnHw2VkHDVD_70tSVSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Sep 2024 04:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3015/serialNumber=79A99E12313A7671F0D959070D50FFEF4B525525
        Validity
            Not Before: May 27 23:04:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66551174-5c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:af:79:b9:3e:48:dc:22:9d:92:92:5f:41:3f:
                    b5:02:ee:0f:73:7f:49:63:4f:a2:ef:f1:3e:3e:8a:
                    f5:00:3e:cc:59:d5:ca:af:93:cf:cc:d8:b8:4c:23:
                    42:79:a6:3a:f8:cb:2f:24:44:05:6b:6e:2e:8b:45:
                    d7:b0:b0:80:3b:10:78:e5:24:db:5f:b7:a5:d7:7e:
                    da:2d:8c:29:fa:5c:18:18:36:e2:eb:ca:89:02:fd:
                    07:2e:74:02:01:4f:63:70:1a:53:cc:62:7e:3d:ef:
                    4b:cb:98:8f:44:46:e7:a6:73:ae:99:94:9d:21:77:
                    5c:c3:90:79:58:a4:09:b2:ff:09:d3:7f:e3:0b:80:
                    52:88:3f:d3:23:9e:5f:5a:b7:b6:df:58:b3:22:1b:
                    cd:bf:04:8a:46:0b:74:4e:16:09:58:34:e1:2e:78:
                    b9:55:9f:54:74:7e:b4:cd:3e:ba:82:ab:2e:06:91:
                    53:ab:41:2f:95:37:6a:2e:65:31:1d:c0:27:a4:c4:
                    37:a3:af:6b:42:ee:c7:0d:31:34:be:42:42:f1:f5:
                    84:5a:21:03:35:da:6f:10:06:cf:d3:6a:b2:50:66:
                    7d:ac:06:b7:5b:0f:10:fb:07:0d:a9:bc:98:cf:97:
                    53:b2:61:8e:04:81:fa:66:1c:fc:54:fe:31:90:46:
                    93:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:90:6C:02:D4:E2:F1:FD:38:64:88:F2:EC:63:9A:7E:49:A0:F0:33
            X509v3 Authority Key Identifier:
                keyid:79:A9:9E:12:31:3A:76:71:F0:D9:59:07:0D:50:FF:EF:4B:52:55:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eameEjE6dnHw2VkHDVD_70tSVSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/732ACDFA1C7D11EF95F4D214C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:76:28:50:83:a3:d0:35:ea:aa:8e:ee:7b:23:6a:fc:3d:6d:
         7f:b8:b1:be:f6:c0:4e:72:b3:ab:5e:28:61:7c:00:5e:49:ac:
         4c:05:b2:c2:de:36:f2:64:8e:8a:0b:f5:12:14:2f:e4:c3:cd:
         6e:7f:bf:13:2e:08:b0:fd:1c:a8:65:a5:3f:ca:78:7c:8f:64:
         cd:99:8b:f9:5d:5f:7b:4c:fd:48:cc:5b:e2:f6:e3:c2:f1:aa:
         69:85:13:20:1b:c7:73:31:5c:66:dd:dd:a1:f4:3c:6f:0f:5f:
         7e:e9:fb:ef:81:28:4c:ef:c6:c2:6b:b4:34:a8:1f:34:86:e8:
         f2:c5:6c:87:26:6a:67:2c:ae:e3:2b:c4:06:48:19:c6:e2:ce:
         46:16:71:62:dc:f7:c3:fe:b0:5c:5c:c3:a8:04:7c:45:59:08:
         16:99:1f:f9:2b:9c:0c:29:4a:f1:15:44:b1:50:90:88:f5:c4:
         b0:01:ed:31:c1:64:36:76:6b:76:b4:6a:e4:fd:50:ee:a8:79:
         22:59:00:c9:fc:71:42:42:0b:b8:ed:0a:93:4f:e4:ef:9b:f4:
         a8:e3:23:f6:d9:a5:d8:ee:37:4c:07:3a:a1:87:d1:13:16:40:
         7d:c4:cf:86:71:33:59:75:ca:e8:5b:e2:d7:d4:44:9a:c9:3e:
         29:5f:35:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 08:12:30 2024 by rpki-client on console-ams.rpki-client.org