Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/0ECA16060C5911EFA8601E42C4F9AE02.roa
File:                     0ECA16060C5911EFA8601E42C4F9AE02.roa (raw, json)
Hash identifier:          lZN8I9KZhIY+6zkUuDTd1f/VOr/7joqERe0PJi8R+bM=
Subject key identifier:   B6:3F:82:3A:DA:CB:DE:75:38:20:33:B2:E4:DF:E3:B6:D0:BB:0E:90
Certificate issuer:       /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Certificate serial:       02FC
Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/0ECA16060C5911EFA8601E42C4F9AE02.roa
Signing time:             Tue 07 May 2024 10:03:31 +0000
ROA not before:           Tue 07 May 2024 10:03:31 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     137453
IP address blocks:        103.181.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
                          rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 764 (0x2fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
        Validity
            Not Before: May  7 10:03:31 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=6639fc73-7be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:63:1a:69:f1:9e:98:33:a5:80:23:45:0d:01:
                    f9:43:b0:3d:d9:b8:22:b9:c7:05:6c:b0:32:84:62:
                    1a:ea:f7:fc:ab:1f:78:a2:28:ee:d0:01:ce:c3:17:
                    08:79:0e:c9:98:af:65:d5:b9:1d:1b:8c:70:1b:c6:
                    6e:8e:fe:c5:20:1f:c1:d6:12:5f:b0:f5:b1:b4:fb:
                    2a:4f:2b:ae:ef:2a:6f:da:9e:a4:cc:58:90:06:b8:
                    56:2c:55:e1:02:0f:f3:40:09:cc:ee:3f:3e:29:f5:
                    04:1f:57:ee:30:10:66:6d:fd:22:ba:e6:1b:01:fd:
                    f6:6e:ff:e7:58:f3:c9:41:1a:0f:f4:5d:4a:b8:6e:
                    58:6a:3f:be:c3:fe:62:2e:6c:d6:e4:bc:6e:62:f1:
                    25:5c:ae:0a:f6:85:51:b4:71:75:c4:39:b4:7c:7e:
                    15:ff:49:71:83:e3:ec:cf:b5:82:7e:6f:79:06:be:
                    55:0b:fe:5f:62:59:26:6b:4a:6b:44:82:71:7b:a2:
                    70:63:1d:0d:40:16:37:1f:8d:e3:b8:44:56:cf:22:
                    df:13:41:54:e0:6a:d7:52:9c:7c:f4:68:23:12:2b:
                    ad:a5:fd:29:95:ef:ab:84:11:b9:07:79:eb:ab:3e:
                    1d:20:33:10:a3:01:b0:0d:9a:81:81:a6:e4:11:5d:
                    14:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3F:82:3A:DA:CB:DE:75:38:20:33:B2:E4:DF:E3:B6:D0:BB:0E:90
            X509v3 Authority Key Identifier:
                keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/0ECA16060C5911EFA8601E42C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:a1:61:10:a6:63:84:1f:96:6f:a1:8f:73:14:85:a2:b6:d4:
         cd:e1:f6:20:32:76:f6:84:f2:27:ee:d0:50:07:37:6e:c1:9a:
         11:bd:c4:d7:38:17:df:07:f5:fb:12:b2:6a:f4:0c:75:ff:fd:
         a2:e8:dd:16:5d:e2:cf:8b:16:28:7f:a6:2f:6f:ab:fe:7d:e2:
         87:b4:e3:a2:2d:0b:49:35:cc:e5:c6:0a:de:d1:2b:94:1c:90:
         2b:79:4c:86:9f:4f:94:e8:c4:02:19:64:cb:07:c2:cf:23:5c:
         9e:54:27:85:95:82:e9:c6:44:3b:df:8d:5d:57:a3:20:c8:b2:
         d0:1f:cd:84:56:25:7f:48:0d:89:6e:65:b4:0d:72:a7:78:70:
         ba:9c:f6:2e:d3:bc:18:71:bb:15:a8:76:a3:6b:0d:a4:e1:15:
         c7:b7:6b:02:8d:fc:52:30:39:32:d5:16:0e:a7:64:98:58:40:
         6c:67:08:c9:54:0e:62:50:5b:20:c9:d1:3b:4a:58:97:37:9b:
         ab:eb:dc:3a:fe:d7:61:36:27:9b:4b:f5:30:63:73:c9:e9:96:
         eb:2e:0c:3b:68:f0:05:dc:87:7e:03:14:5e:51:f0:05:e4:8b:
         fe:30:d0:42:13:da:a6:01:40:89:2f:2b:01:ff:13:2c:8c:22:
         3e:86:67:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:52 2024 by rpki-client on console-fra.rpki-client.org