Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/8E4647E6EB2911EB9891D01DC4F9AE02.roa
File:                     8E4647E6EB2911EB9891D01DC4F9AE02.roa (raw, json)
Hash identifier:          adFrZ9wVUFL/q70xYlPOLV2jTwKmfI9/GoGFtthCxcw=
Subject key identifier:   AA:03:7A:11:E7:45:E6:45:1E:6A:87:0C:EF:DC:74:89:4D:61:4C:C6
Certificate issuer:       /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
Certificate serial:       0C4C
Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/8E4647E6EB2911EB9891D01DC4F9AE02.roa
Signing time:             Fri 26 Jul 2024 19:06:37 +0000
ROA not before:           Fri 26 Jul 2024 19:06:37 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        103.80.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl
                          rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3148 (0xc4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
        Validity
            Not Before: Jul 26 19:06:37 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a3f3bd-0592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9b:58:7c:63:a6:c7:d7:36:73:c6:f0:eb:d9:
                    9b:37:e4:08:1f:58:44:69:66:36:ba:42:c9:f8:ab:
                    18:3d:48:00:83:92:4b:c2:46:b0:b7:04:cb:db:d6:
                    11:ff:dc:cf:88:5a:d0:e0:28:39:cd:bd:50:72:08:
                    ce:23:9e:4e:08:47:ba:3e:1c:94:59:c4:11:29:f3:
                    e1:2c:15:74:86:b1:75:e9:88:33:40:4a:82:5f:aa:
                    6b:ab:74:e9:4e:70:59:19:81:a8:5b:d1:d6:7f:eb:
                    64:15:56:d6:dd:ae:a2:e8:eb:7e:8b:42:0a:11:c7:
                    84:e0:23:1e:21:26:2d:49:c0:c3:2d:f5:23:ae:4a:
                    60:40:86:21:ae:ae:c1:da:15:c9:24:02:cd:bd:6d:
                    d8:e5:5a:eb:d0:f6:d7:fe:3d:24:f8:c7:9b:25:09:
                    d5:bf:5d:af:b8:c5:36:69:66:4e:74:1e:5a:c3:36:
                    87:18:57:4b:be:b4:3b:08:3f:0f:70:cf:16:5d:57:
                    b7:8b:ef:22:07:c0:44:07:4b:5f:74:4d:35:8f:5d:
                    a6:8a:de:22:06:f8:7b:7e:b8:14:c3:90:aa:51:d3:
                    94:1d:ce:0f:60:cd:91:2f:92:13:5b:fb:eb:87:c2:
                    91:43:23:cd:bc:3c:2d:f7:d4:a6:55:97:19:91:02:
                    f5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:03:7A:11:E7:45:E6:45:1E:6A:87:0C:EF:DC:74:89:4D:61:4C:C6
            X509v3 Authority Key Identifier:
                keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/8E4647E6EB2911EB9891D01DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:7a:3c:fb:a3:b9:71:01:5c:9e:04:15:7f:a7:81:82:e8:00:
         a5:38:1c:9b:eb:31:cf:20:1d:d2:07:03:e0:c9:7b:8b:97:2d:
         42:4d:af:2d:37:e1:45:f4:75:a2:1c:f5:dd:b5:1c:5c:01:0b:
         11:98:5c:24:5b:08:b0:2e:19:2e:be:28:f5:03:01:c1:63:fa:
         5b:d6:c9:cd:94:2c:db:ed:06:11:0e:ac:ee:d4:56:2b:32:e1:
         c8:9e:a9:01:7f:0a:57:2d:d7:5f:5c:49:b5:f5:5b:e9:5f:7e:
         0d:f7:39:ce:9c:1b:b9:89:7a:dc:44:76:4e:4b:28:f0:0d:db:
         6b:13:3d:ea:be:37:a8:86:85:53:17:e1:91:00:bd:29:90:66:
         64:b9:91:d0:b7:27:5e:b2:6d:d0:30:5e:07:f7:24:37:14:87:
         0b:85:23:1b:17:f5:6f:44:d9:b6:f5:d8:4c:e9:5e:e8:38:58:
         da:ed:08:dc:6e:fe:10:ef:60:f1:8a:ac:9e:5c:d4:54:69:11:
         2e:8c:9e:fc:61:c7:35:e3:25:09:4b:f8:33:ae:9e:43:4b:26:
         7a:54:3f:4c:70:f2:1e:8c:67:e4:51:bb:68:03:e4:9b:a6:fb:
         81:3f:bd:2b:8e:58:94:93:49:c8:f3:13:a8:cb:69:a0:56:3a:
         cb:f8:6c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:36:26 2024 by rpki-client on console-fra.rpki-client.org