Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/0232AA081A5A11EE89B07267C4F9AE02.roa
File:                     0232AA081A5A11EE89B07267C4F9AE02.roa (raw, json)
Hash identifier:          E8aCWI5va6H/40DfS+TkQOoU/nMICN5p7NAnAXpdfVw=
Subject key identifier:   CB:F1:D8:FB:6F:B6:C1:AC:61:6C:8A:54:D2:D9:21:F4:B4:E0:66:B8
Certificate issuer:       /CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7
Certificate serial:       338E
Authority key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/0232AA081A5A11EE89B07267C4F9AE02.roa
Signing time:             Sat 02 Dec 2023 15:00:48 +0000
ROA not before:           Sat 02 Dec 2023 15:00:48 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     9301
IP address blocks:        203.5.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl
                          rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 14:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13198 (0x338e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7
        Validity
            Not Before: Dec  2 15:00:48 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=656b46a0-0e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ce:67:37:ef:d3:0f:5d:1a:90:be:68:69:48:
                    8f:be:bf:af:8f:fa:e0:62:94:4a:66:7a:09:ee:97:
                    e7:7c:42:39:05:32:54:97:69:e0:17:13:3f:cf:da:
                    b4:75:10:86:41:4b:50:1a:ae:85:37:bf:01:92:4e:
                    71:36:31:23:39:24:1f:1f:6e:ee:31:3e:35:02:1d:
                    2f:02:7a:63:83:3b:31:79:74:c2:03:cd:ec:05:55:
                    ae:d6:0a:0d:79:b4:f3:d0:fe:a2:b3:2f:44:db:41:
                    6f:21:69:8b:ad:61:15:a2:71:9a:b4:f0:38:bf:c7:
                    61:71:43:ae:59:df:c4:07:d1:29:9f:6e:35:1e:ff:
                    ed:8c:90:fc:1f:b4:41:e2:46:fb:d6:25:d2:eb:fa:
                    40:cc:a6:2d:c1:1e:84:68:39:f1:96:38:3a:fc:8f:
                    ef:32:97:8a:85:9f:85:cd:d8:00:55:00:2a:d9:5f:
                    ed:53:a0:f6:e0:8b:70:cb:9b:b7:3f:98:94:6d:43:
                    ed:87:a9:0e:df:40:0f:d7:11:4e:7e:10:6a:1d:f3:
                    6b:23:4b:4a:26:75:c1:de:43:79:cc:cf:bd:5e:d8:
                    b8:68:1d:f3:0c:86:71:30:ba:5e:69:12:2a:30:6e:
                    1e:00:43:ac:82:c8:08:be:d2:d8:e7:d6:e7:4f:0c:
                    fb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F1:D8:FB:6F:B6:C1:AC:61:6C:8A:54:D2:D9:21:F4:B4:E0:66:B8
            X509v3 Authority Key Identifier:
                keyid:66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/0232AA081A5A11EE89B07267C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.5.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:2b:31:a6:9b:4d:5b:d1:da:d0:29:1c:7a:9b:ae:e0:e1:da:
         72:c7:c0:a9:04:dd:3b:ef:d1:2a:e7:3f:16:ea:48:66:fb:f8:
         9a:9d:d5:e2:a7:37:e0:af:96:77:31:19:7f:6f:34:3e:d1:9a:
         f0:31:c4:39:a8:15:85:6e:35:ac:b5:bd:20:84:c4:b4:08:c8:
         b5:c0:ad:cf:97:0e:ff:72:ed:4b:cf:9e:b9:50:63:75:ad:18:
         4a:96:a0:db:62:76:b1:ff:af:cf:5e:0c:d2:c1:d9:e8:a9:9a:
         5b:25:00:3a:d4:cb:a4:65:50:10:87:17:62:a9:66:53:66:6c:
         c1:d0:ef:0a:a9:83:96:52:b9:b3:67:48:0f:ce:ed:92:61:a1:
         87:ab:72:da:a3:9d:f6:70:8a:dd:ef:ee:8b:9d:9b:ce:b5:cd:
         dd:79:53:a9:0e:8a:16:98:88:2a:9f:7d:90:19:62:95:92:fc:
         40:05:17:05:55:ad:b5:c0:f5:06:4c:76:4f:f7:3d:a7:91:22:
         34:33:5b:13:45:24:69:78:23:84:c7:ab:2a:e9:a6:e7:a5:39:
         9c:33:be:b9:9f:6c:e9:bb:06:9c:a2:b6:b5:7e:bb:fb:ae:cd:
         5d:29:6f:db:05:0f:3c:cd:50:f8:f4:4a:c7:0d:26:b5:21:e3:
         3e:ea:d5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 16:25:28 2024 by rpki-client on console-ams.rpki-client.org