Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/E7DBA61CA1FA11EF9696DF59C4F9AE02.roa
File:                     E7DBA61CA1FA11EF9696DF59C4F9AE02.roa (raw, json)
Hash identifier:          pkyn+1MHjXSVpOUyEDdNddLi9pFxAtP/4B4YmJnFzL0=
Subject key identifier:   09:5D:0B:54:96:E7:F2:74:0A:13:92:51:49:0F:D0:52:BA:C7:D3:71
Certificate issuer:       /CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
Certificate serial:       03E0
Authority key identifier: 91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/E7DBA61CA1FA11EF9696DF59C4F9AE02.roa
Signing time:             Wed 13 Nov 2024 20:07:28 +0000
ROA not before:           Wed 13 Nov 2024 20:07:28 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     134732
IP address blocks:        103.178.66.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl
                          rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 992 (0x3e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
        Validity
            Not Before: Nov 13 20:07:28 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=673506ff-c8bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5d:29:0d:4e:3e:25:11:61:08:cc:f6:9d:38:
                    dc:e2:1b:bb:5f:95:2c:aa:a7:f2:33:a1:e1:13:55:
                    cd:fe:0c:9a:e2:07:84:37:29:89:54:d6:13:e0:18:
                    0d:15:e6:56:f5:21:28:77:3d:cc:e1:40:d4:37:46:
                    2b:ce:90:25:49:aa:eb:be:45:d1:1d:ae:d4:ab:ed:
                    81:d9:e0:91:d7:c0:90:cc:3c:54:e1:53:44:49:ef:
                    6b:26:40:32:cc:02:ca:85:15:9a:5b:d5:f5:21:aa:
                    cb:23:70:1f:7b:62:b5:c4:de:7c:8c:36:9d:a2:c3:
                    52:8d:18:fd:52:d2:b0:6b:e5:aa:0d:74:fd:82:8c:
                    c0:c7:1b:c1:30:72:bc:d6:59:c0:bf:dc:08:82:64:
                    7a:f9:5b:b2:ff:3d:26:05:ca:be:c1:30:f8:65:c4:
                    c1:58:10:39:1f:ea:e6:b8:0e:3f:d7:67:04:16:b5:
                    03:17:e4:ac:a2:6a:34:1c:78:ed:3c:8b:ba:1b:08:
                    e6:68:d1:14:4b:7f:e7:49:25:21:dc:28:79:be:00:
                    57:de:da:e5:8b:c0:da:06:42:db:e0:00:81:65:ec:
                    16:17:fa:72:55:34:55:c5:04:04:f3:7c:e0:29:1d:
                    0b:2e:bb:f9:c4:1a:23:d8:5c:78:16:db:94:6e:d3:
                    8c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5D:0B:54:96:E7:F2:74:0A:13:92:51:49:0F:D0:52:BA:C7:D3:71
            X509v3 Authority Key Identifier:
                keyid:91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/E7DBA61CA1FA11EF9696DF59C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:b5:ba:a3:98:a8:0d:a5:5a:aa:70:f0:0a:d0:fd:33:94:ff:
         96:23:2c:e5:8b:45:ea:df:e7:61:98:59:34:75:3a:7d:81:2f:
         b0:90:12:ec:93:65:a4:85:fe:40:8d:1e:26:89:6f:7c:11:fc:
         ac:02:35:32:c4:d6:92:39:2c:48:ff:c1:e1:af:fe:5b:34:b4:
         5e:c8:a4:7c:dc:02:30:9c:05:40:18:a6:2e:89:58:68:64:3d:
         ac:d6:2d:f6:66:48:ed:b0:af:2c:82:85:0e:3a:0d:95:20:ea:
         ad:d1:0e:25:82:07:f8:60:41:f0:17:87:e3:18:b4:cd:f0:a5:
         5f:69:9c:d9:bc:3c:12:b1:64:12:ce:a2:4e:ec:62:e0:2a:bd:
         81:37:da:03:78:24:74:96:c5:df:2e:44:ee:16:88:38:05:23:
         3c:a9:6f:43:0c:6e:cd:37:26:6b:69:62:5e:f4:b8:84:78:ea:
         29:c1:0b:90:6d:d3:40:64:34:b0:b6:ab:a1:e6:01:38:18:76:
         de:24:d8:7d:e2:16:1c:0c:b8:d4:ae:e4:ce:bb:55:b5:50:1b:
         92:f1:8d:c4:a2:b3:1a:b8:eb:7b:bd:28:41:d1:f0:bd:a2:2d:
         99:43:77:ce:41:f5:7a:0b:e6:fc:53:c2:97:e6:a0:f7:17:d3:
         71:18:ad:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:30 2024 by rpki-client on console-ams.rpki-client.org