Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/8D9FFB3EEB2911EB9891D01DC4F9AE02.roa
File:                     8D9FFB3EEB2911EB9891D01DC4F9AE02.roa (raw, json)
Hash identifier:          mgW7VeujR3wQCY2FOQTLD+1AfxSaJAkPmJmO0oMCuHQ=
Subject key identifier:   96:53:EF:8B:66:3B:55:D8:40:A3:33:1F:E8:9F:D7:1A:5F:60:21:C4
Certificate issuer:       /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
Certificate serial:       0C4B
Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/8D9FFB3EEB2911EB9891D01DC4F9AE02.roa
Signing time:             Fri 26 Jul 2024 19:06:36 +0000
ROA not before:           Fri 26 Jul 2024 19:06:36 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        103.80.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl
                          rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 18:05:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3147 (0xc4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
        Validity
            Not Before: Jul 26 19:06:36 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a3f3bc-525c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ce:bf:c1:da:74:f0:f6:3e:2e:10:fb:ef:47:
                    0d:94:5c:54:f7:90:5a:25:8a:c6:1d:eb:b1:48:f8:
                    2c:76:ed:72:73:fa:98:3a:cf:d8:57:43:4e:e5:d5:
                    10:9d:94:2f:d0:96:dc:d3:7f:4b:a8:a6:e2:5f:a8:
                    d1:e4:b3:af:58:3a:c0:1a:98:ae:99:6d:fb:4c:68:
                    24:e2:6f:a8:ae:02:99:70:df:ff:6c:bd:5c:d9:d2:
                    12:89:80:3c:24:17:16:e4:49:0e:54:12:12:56:ba:
                    db:f5:a3:5d:83:9c:8d:17:de:97:25:da:0f:82:ff:
                    e5:4b:f7:a4:f3:36:60:68:81:96:c4:f4:47:29:2e:
                    c6:08:5e:15:16:7b:2f:82:a7:71:85:29:5c:a1:2e:
                    fa:ff:ce:5f:bf:af:2a:15:14:d4:12:60:c7:ba:a5:
                    9e:7d:a0:b7:22:0f:21:a0:a4:b7:3e:8c:8c:ed:73:
                    e3:84:b0:f7:6b:e3:d0:df:b1:6a:7f:ba:d8:c0:e7:
                    62:17:3a:6f:19:af:c8:2a:8d:6a:c7:71:83:ea:c8:
                    ef:5a:94:0e:45:11:2d:16:f9:d7:b7:2b:6d:6f:18:
                    4b:9e:96:23:64:90:66:cd:15:de:33:a7:a0:67:0b:
                    1e:43:ab:2e:65:42:8a:aa:8f:ca:43:07:d7:b5:f2:
                    d0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:53:EF:8B:66:3B:55:D8:40:A3:33:1F:E8:9F:D7:1A:5F:60:21:C4
            X509v3 Authority Key Identifier:
                keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/8D9FFB3EEB2911EB9891D01DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:67:18:57:7a:a5:c0:48:2c:ad:30:09:c7:f5:1a:d6:c9:56:
         60:20:0b:c6:5d:2b:66:dc:8a:80:8a:91:5f:11:ce:ae:45:ee:
         20:84:55:be:a0:7d:1c:98:d7:d1:7d:f1:58:6b:9d:ab:3b:ba:
         00:25:0f:11:4a:1f:ce:3a:77:35:3a:93:16:de:39:75:5d:38:
         92:eb:a3:aa:70:87:10:32:c9:75:3e:8c:95:a8:bc:29:5c:c5:
         b6:c4:b9:6d:65:b5:a4:37:82:f6:bb:34:28:55:da:92:73:89:
         38:6c:15:0f:54:d2:56:a6:5c:e4:67:ac:b5:f6:ec:e6:2a:30:
         0a:8b:08:6c:1f:36:43:b2:65:c7:a9:2e:cb:d3:d5:95:a7:3b:
         67:9d:65:5b:04:74:0d:19:79:46:a9:8a:bd:38:e0:71:03:7f:
         27:6e:78:14:eb:37:db:db:07:2f:6a:c0:b2:95:b0:7a:7c:36:
         b4:2b:27:52:14:66:4c:1c:83:48:ad:42:47:7a:e8:83:ff:4c:
         92:ee:35:38:18:fe:29:c1:a9:a6:4c:0a:f8:04:50:b8:df:11:
         52:b0:f0:6f:7f:2f:c4:fc:3c:e8:24:c3:92:81:f3:d5:d1:6b:
         1a:95:6c:f5:ec:07:df:8a:9c:06:09:5c:0a:62:c4:5e:87:ca:
         c8:ac:1d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:07:28 2024 by rpki-client on console-fra.rpki-client.org