Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/C53629FEEACE11EEA8513D34C4F9AE02.roa
File:                     C53629FEEACE11EEA8513D34C4F9AE02.roa (raw, json)
Hash identifier:          m2mZEmy+jYi2Exf5MsZvNb+d8UP/lXqWFf7D/THaytE=
Subject key identifier:   28:BF:78:E0:9F:4C:6B:39:94:8F:0C:53:3B:38:5E:17:02:25:36:BA
Certificate issuer:       /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial:       0ABA
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/C53629FEEACE11EEA8513D34C4F9AE02.roa
Signing time:             Tue 30 Jul 2024 19:57:40 +0000
ROA not before:           Tue 30 Jul 2024 19:57:40 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     141351
IP address blocks:        103.116.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
                          rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2746 (0xaba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
        Validity
            Not Before: Jul 30 19:57:40 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66a945b4-a010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:4f:8c:85:23:e7:0c:ce:e2:8d:48:27:f0:
                    62:59:d7:f4:cb:18:f7:38:64:a2:04:95:79:76:52:
                    09:9f:04:94:40:10:15:7b:a7:37:6a:50:41:a0:48:
                    cd:05:cc:5d:42:cb:d5:e9:fe:0a:0a:c0:78:fc:83:
                    83:32:9c:37:d5:4b:cd:65:ae:b9:3c:d9:97:19:73:
                    bc:e7:a0:22:d9:05:95:61:07:e0:be:26:c3:22:02:
                    93:d9:88:b0:2c:ec:64:70:c6:3d:4d:9f:9c:16:38:
                    45:0a:68:2a:76:19:94:26:b7:62:79:94:64:b3:86:
                    34:33:d8:e1:0b:bf:37:65:bc:25:19:30:56:e2:7f:
                    88:83:f7:6c:1a:15:a7:e6:34:1d:a5:f5:67:7d:3d:
                    b2:83:3c:8e:0b:f4:da:1b:84:de:c2:30:dc:9e:cc:
                    35:a0:b6:78:64:61:78:17:f2:37:0e:18:e0:ce:3e:
                    a5:b0:9a:09:39:ca:96:44:c8:cc:e4:a7:76:3b:d0:
                    d3:a3:c9:9f:b7:28:a1:15:3b:35:e0:3b:1b:fb:0f:
                    03:ec:29:f3:84:4f:e3:68:d4:1a:54:a9:77:c9:ff:
                    40:57:9a:2f:45:5f:d6:24:1b:92:23:83:2e:15:df:
                    96:96:95:84:10:33:e7:0c:54:05:41:59:ee:9c:e1:
                    7b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BF:78:E0:9F:4C:6B:39:94:8F:0C:53:3B:38:5E:17:02:25:36:BA
            X509v3 Authority Key Identifier:
                keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/C53629FEEACE11EEA8513D34C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:d1:70:a5:e9:64:1b:dd:dd:09:c4:72:cb:79:10:bb:00:47:
         fc:f5:2b:ad:25:c5:0e:fd:0a:8e:e6:b5:f0:44:48:84:89:be:
         39:30:00:15:01:c3:45:98:12:2d:e6:f4:52:47:7b:2c:1f:30:
         06:5e:f3:e0:e9:c2:5b:d3:b4:71:ac:1d:ed:d0:72:20:40:c5:
         c0:e7:2e:41:93:9e:ba:3a:b9:06:33:76:da:10:d1:2f:d9:e4:
         86:38:b7:8c:0a:53:f5:c7:e7:95:9e:40:62:48:be:ad:a4:22:
         bd:67:29:a7:b1:4b:85:c0:46:2b:16:59:9d:42:cc:59:4a:ef:
         fc:93:53:b7:86:d5:2c:35:1b:8e:56:d3:cc:35:f5:10:5d:48:
         be:7a:af:db:1c:5c:b1:2a:7f:e1:dd:8f:da:cf:0c:8d:f1:5b:
         ba:37:18:03:6d:20:e1:c5:99:0b:92:b9:bf:a4:21:da:05:b8:
         ab:2c:73:95:23:a5:ab:4c:23:29:7d:1e:7e:4b:91:2f:d2:22:
         df:fa:e1:bc:30:ba:af:21:97:e6:9a:96:50:7b:63:e4:48:90:
         43:f3:ed:e3:18:0e:ac:c8:8a:a0:b9:b5:86:e9:59:58:6f:83:
         ae:66:b6:51:7b:8b:e8:14:a0:17:62:f2:cd:35:cd:3d:b1:3f:
         45:2a:26:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:48 2024 by rpki-client on console-ams.rpki-client.org