Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/0104D0BADB0D11EE88489759C4F9AE02.roa
File:                     0104D0BADB0D11EE88489759C4F9AE02.roa (raw, json)
Hash identifier:          LPhjXW7HkqepU7G8SEAF/BpJh0/ofgBAEpXIt/PkqcQ=
Subject key identifier:   00:A1:2F:EC:F8:1C:4F:FE:1D:75:DD:A8:CD:C3:3D:51:67:77:F0:E2
Certificate issuer:       /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Certificate serial:       03F0
Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/0104D0BADB0D11EE88489759C4F9AE02.roa
Signing time:             Tue 17 Sep 2024 00:33:31 +0000
ROA not before:           Tue 17 Sep 2024 00:33:31 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     136969
IP address blocks:        103.152.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl
                          rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1008 (0x3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
        Validity
            Not Before: Sep 17 00:33:31 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66e8ce5b-81d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b1:b4:68:03:ce:05:bb:2a:97:37:b3:7a:f6:
                    8d:be:00:7a:e9:e1:46:aa:3b:ab:89:0c:fd:ea:b6:
                    60:37:eb:16:01:6f:ed:3e:d4:0b:a5:0e:7d:25:06:
                    84:e1:f6:e5:05:a5:76:23:6f:02:7f:4a:48:4a:27:
                    04:d1:16:2c:1b:8b:24:9b:12:d0:30:f2:6c:cf:50:
                    12:7f:19:0d:38:64:03:81:1f:b4:e8:2d:4d:2c:79:
                    d4:b2:d3:49:10:77:30:77:57:4b:64:ab:62:7f:ff:
                    1a:2f:78:b9:bf:0b:6e:8a:49:4f:89:dc:b9:73:06:
                    55:9b:b0:c8:33:b5:5b:e4:66:6b:00:84:27:f4:99:
                    63:38:52:23:0b:52:78:0c:2a:fc:91:7b:5a:7e:66:
                    d0:3b:39:b6:7d:c6:8b:da:28:d0:b7:e5:4a:e2:55:
                    c0:ed:4c:12:09:6a:26:c8:2d:9e:15:9b:91:8d:03:
                    a7:84:cb:fa:8c:8d:92:f4:e1:e1:a4:c7:0c:3f:23:
                    02:c5:f5:17:3c:5c:72:6f:37:a9:61:91:a2:0c:94:
                    ed:8c:45:57:f8:d5:44:74:b6:d5:44:47:c4:78:3e:
                    76:52:0a:ac:b9:40:4e:bd:d6:77:b2:67:ac:f8:19:
                    fd:74:6a:93:c2:72:eb:cb:0d:6a:17:14:94:af:ed:
                    42:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A1:2F:EC:F8:1C:4F:FE:1D:75:DD:A8:CD:C3:3D:51:67:77:F0:E2
            X509v3 Authority Key Identifier:
                keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/0104D0BADB0D11EE88489759C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:3e:de:a0:0f:35:be:a5:19:c4:16:4e:13:67:66:ea:3d:2c:
         bf:ff:23:a6:0c:89:d9:24:30:53:ea:2b:16:45:75:89:6a:e1:
         68:0f:9b:e6:91:21:50:13:4a:48:78:23:8e:f0:37:73:6b:05:
         95:01:94:51:2b:88:2b:f0:14:06:51:e1:bc:63:47:d5:ea:1c:
         66:dc:4c:d5:21:77:b0:d8:16:48:7a:47:ae:9f:43:e2:ad:2f:
         16:c0:9a:0f:80:22:1e:30:e2:a7:3a:29:ab:da:fb:d5:d0:8c:
         23:ea:33:18:cc:ad:be:af:dd:fb:b7:d8:3f:91:6a:2e:04:0f:
         12:fe:63:76:44:02:ff:f8:5c:6c:ea:be:57:76:33:d4:70:53:
         98:33:ad:e7:66:59:d2:3b:0c:82:51:24:51:56:26:b6:7e:c1:
         48:b5:bb:2b:8c:42:74:d9:c9:2b:74:06:ef:8a:bd:91:74:3d:
         b4:da:62:f5:9f:2e:41:f2:f3:fa:54:6c:6b:05:6a:f0:78:3a:
         43:cf:9a:67:a1:12:0c:5d:eb:43:16:54:31:64:fc:a1:0c:0e:
         eb:fc:67:6f:d4:a8:80:4f:bb:5d:14:72:69:a2:c3:b5:a9:41:
         75:27:3f:7f:9b:24:7b:71:f7:d8:ba:8f:2e:ef:64:5e:00:2f:
         6c:08:1b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:26:06 2024 by rpki-client on console-ams.rpki-client.org