Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/654307DC26CC11EDB395A078C4F9AE02.roa
File:                     654307DC26CC11EDB395A078C4F9AE02.roa (raw, json)
Hash identifier:          hGQixG8nIJXVA0JQORYC8z0pOj4UbTutn+kvPqmH25s=
Subject key identifier:   4C:9B:64:6A:EB:0D:7F:01:10:DE:72:8E:BE:6C:67:A8:63:80:88:F8
Certificate issuer:       /CN=A91EACB9/serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
Certificate serial:       01CE
Authority key identifier: 1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/654307DC26CC11EDB395A078C4F9AE02.roa
Signing time:             Fri 25 Oct 2024 02:46:39 +0000
ROA not before:           Fri 25 Oct 2024 02:46:39 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     139651
IP address blocks:        103.142.212.0/23 maxlen: 30

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl
                          rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:42:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EACB9/serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
        Validity
            Not Before: Oct 25 02:46:39 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=671b068f-3f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:79:0a:cf:dc:9a:7f:55:f4:27:39:ca:a8:c8:
                    b9:6a:cf:46:09:82:fb:94:ce:25:cf:82:0e:1d:d6:
                    85:ed:0d:8a:29:ea:12:2a:62:9e:4d:37:1f:ed:9a:
                    da:44:71:ca:44:f2:c1:ae:3d:bb:11:34:f3:5f:65:
                    1e:31:26:61:6c:ee:02:68:d0:34:3d:a2:41:34:c3:
                    d7:90:2b:1a:20:b0:52:6f:2a:01:4e:05:41:cd:87:
                    f9:c2:fe:cb:06:91:85:99:9b:25:64:1d:19:90:fc:
                    e5:c5:c1:4c:b6:79:cb:61:d4:59:b6:b9:2f:7d:8e:
                    cd:ee:8f:d4:4f:c7:b2:99:f0:b9:48:1a:47:0a:7a:
                    a1:88:98:6f:e5:1e:10:b1:ee:88:4f:28:2e:46:60:
                    c3:a9:95:a9:0c:9e:a7:00:f1:f9:0d:11:74:39:6d:
                    91:5b:84:43:75:6b:a0:88:1c:0c:1b:6d:6d:ef:85:
                    fa:04:ee:3b:0c:0f:53:32:49:19:d7:89:15:23:10:
                    fc:c1:f3:bb:65:4c:fa:f5:a2:ee:28:5d:79:50:48:
                    b2:b2:82:2d:3a:d5:d3:1a:11:ef:73:24:ab:5c:7b:
                    5e:78:1c:82:e6:2e:77:1d:47:1a:50:8b:60:7d:33:
                    ce:7f:1d:71:73:89:cd:10:9c:44:63:b3:1b:56:15:
                    12:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9B:64:6A:EB:0D:7F:01:10:DE:72:8E:BE:6C:67:A8:63:80:88:F8
            X509v3 Authority Key Identifier:
                keyid:1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/654307DC26CC11EDB395A078C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:01:58:1c:55:ee:9a:cd:ac:7b:44:5c:1f:72:d3:e5:1e:dd:
         af:17:3b:28:33:22:48:d8:30:4a:12:4a:f7:41:0f:fb:62:fa:
         ef:77:b0:72:1f:25:86:06:ff:7a:fb:d9:2c:5d:12:0c:c0:49:
         31:e4:a6:20:27:3d:c8:dc:b0:38:01:bb:8f:e7:cf:3c:f0:41:
         e0:28:fb:55:e1:e5:63:a0:a0:b8:bf:f5:28:50:fb:4e:e5:2a:
         e6:9a:6d:38:64:77:e6:6c:37:ec:6c:e5:a1:bb:a8:48:ad:c6:
         21:a6:d1:85:09:d9:30:58:6f:e0:38:68:3b:93:86:b0:e8:d6:
         61:27:0e:44:cf:21:75:e4:b8:34:00:0c:8f:aa:0d:9a:bc:53:
         09:06:20:db:96:33:03:60:de:4c:c7:6f:bd:92:cf:60:da:4c:
         d3:dc:6b:25:c4:75:af:be:cb:fd:bc:45:3a:f9:24:05:35:74:
         23:20:49:74:8f:5c:ee:99:ca:d6:b3:0d:64:9d:ac:e9:ec:d2:
         ad:c5:db:ee:18:86:12:64:35:98:8f:06:e5:00:f6:53:69:08:
         14:ab:02:ae:12:ef:97:a9:bc:93:e2:10:b5:88:a8:a0:ac:bc:
         be:67:4e:29:b2:a9:f4:ec:d9:3c:3b:83:5c:1a:3b:98:d0:d7:
         0e:53:42:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:57 2024 by rpki-client on console-ams.rpki-client.org