Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/88B3F0026E9F11EEB03D9582C4F9AE02.roa
File:                     88B3F0026E9F11EEB03D9582C4F9AE02.roa (raw, json)
Hash identifier:          XwKeJLskTB6Imr0S9o23k/3GveOx7qAiEQDWVAowUlY=
Subject key identifier:   42:C1:48:F3:CE:D7:E8:0F:BD:F2:C6:8C:AF:D6:22:22:29:14:0D:58
Certificate issuer:       /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1
Certificate serial:       0315
Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/88B3F0026E9F11EEB03D9582C4F9AE02.roa
Signing time:             Sat 09 Mar 2024 02:54:40 +0000
ROA not before:           Sat 09 Mar 2024 02:54:40 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     151791
IP address blocks:        103.180.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl
                          rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 789 (0x315)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1
        Validity
            Not Before: Mar  9 02:54:40 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65ebcf6f-08cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f3:8b:7f:de:8f:9a:fe:95:6e:e6:44:b8:7f:
                    f3:3d:3c:88:e2:e3:53:bd:3c:f6:36:ea:b8:4c:c6:
                    36:34:3b:55:ae:0c:2a:cc:8e:52:c3:9d:82:71:9c:
                    af:c9:cd:47:c9:e6:5e:ec:e3:e6:8e:28:54:20:8c:
                    f1:6e:7c:28:64:89:61:bb:7b:33:55:90:51:ac:64:
                    19:43:25:86:f6:b3:e5:20:58:2c:45:4d:c1:48:4e:
                    e0:ef:af:86:1b:05:8f:f2:68:af:b9:6f:18:24:cb:
                    18:ca:96:52:a2:4c:0d:f8:25:df:27:3b:1a:a4:f1:
                    ae:75:ee:0c:40:c0:2f:68:e4:85:59:4c:a6:ab:8f:
                    eb:e2:9c:31:8b:1f:dc:e5:0b:84:68:50:f4:d2:7d:
                    aa:8b:b1:35:f0:1e:84:8a:5f:3c:d0:b9:cf:27:be:
                    28:9d:c5:ec:4d:62:4b:45:ef:1b:ce:b1:0c:21:19:
                    48:a0:cd:32:03:68:d5:43:b2:84:88:c6:5d:35:35:
                    67:93:9b:ea:c0:0f:c5:57:99:68:12:02:f2:d9:b1:
                    91:61:89:c4:7c:c6:d3:6c:47:eb:b8:4b:2a:bd:8f:
                    f9:9b:68:b4:8b:6e:5b:86:02:34:54:fe:0f:7a:0e:
                    ad:60:1a:95:93:1e:31:f7:36:e0:db:c0:60:e9:78:
                    72:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C1:48:F3:CE:D7:E8:0F:BD:F2:C6:8C:AF:D6:22:22:29:14:0D:58
            X509v3 Authority Key Identifier:
                keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/88B3F0026E9F11EEB03D9582C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:6b:10:2b:39:66:b8:60:5d:c4:b2:cd:2b:e2:6a:e3:8a:58:
         ad:85:f0:46:1e:ab:8f:85:23:3c:ad:cd:f3:90:60:6e:bb:9f:
         5c:23:82:e4:b1:6e:a2:18:9c:65:34:8a:cb:79:47:c2:4b:21:
         e8:33:ad:78:2a:62:5a:94:31:ab:6e:7c:7e:6d:2f:cd:9f:09:
         95:d6:f5:5c:54:50:47:47:51:1c:9d:36:10:9c:61:ae:45:94:
         69:74:9b:0e:2d:66:b4:ec:32:1d:ba:46:9a:46:38:f5:f5:c9:
         26:b6:36:6d:8f:ab:3d:0a:be:d8:59:36:10:b9:60:a7:57:ee:
         a3:17:50:87:2d:b6:d1:f6:25:a2:7c:16:9f:fe:83:07:7e:b0:
         76:eb:33:65:84:4b:26:c7:12:fc:58:f4:ae:fc:4c:c3:bd:cb:
         24:ab:8f:65:43:ec:9b:98:2f:af:cf:59:b1:6c:b6:51:cf:f3:
         a1:a9:35:74:0a:cc:95:00:90:2a:4c:b8:43:cf:0f:13:bb:07:
         83:62:61:58:4a:1f:33:db:d8:3d:61:f1:e2:b6:a3:eb:38:2f:
         fa:63:ee:26:e0:4d:7f:af:3d:f7:49:6a:43:ae:f5:5d:24:4e:
         67:e7:9a:1b:a8:52:c8:f2:6a:96:70:40:7b:7b:b8:2b:70:0e:
         84:e1:70:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:38:17 2024 by rpki-client on console-ams.rpki-client.org