Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/9071A5E690CB11E6A804EF84C4F9AE02.roa
File:                     9071A5E690CB11E6A804EF84C4F9AE02.roa (raw, json)
Hash identifier:          KE/U/8wUAW1falY4CgDPXTNiOOjIqQ1zJL90tHiSQS8=
Subject key identifier:   2D:1C:11:C9:54:B6:9B:35:14:9A:02:18:50:F9:62:32:06:44:43:32
Certificate issuer:       /CN=A91FC765/serialNumber=4E284DF28C6520A771130415F393C8347D6E6DE9
Certificate serial:       1DCF
Authority key identifier: 4E:28:4D:F2:8C:65:20:A7:71:13:04:15:F3:93:C8:34:7D:6E:6D:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/9071A5E690CB11E6A804EF84C4F9AE02.roa
Signing time:             Tue 22 Oct 2024 16:23:48 +0000
ROA not before:           Tue 22 Oct 2024 16:23:48 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     394434
IP address blocks:        103.75.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.crl
                          rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 16:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7631 (0x1dcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC765/serialNumber=4E284DF28C6520A771130415F393C8347D6E6DE9
        Validity
            Not Before: Oct 22 16:23:48 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6717d194-95ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:14:37:de:f1:99:6d:0a:31:06:52:d1:5a:77:
                    53:1b:56:11:15:18:1d:d2:1a:36:c8:6c:88:32:e9:
                    62:49:9b:9a:e9:7f:ca:ba:28:9f:b8:57:af:5e:57:
                    87:62:dc:e8:ae:16:6e:4c:e7:c5:f9:e5:33:6a:c4:
                    39:44:9e:4b:5d:fb:b7:d2:e0:7e:ec:7e:12:c5:6b:
                    c1:ac:07:69:31:f9:e2:8a:bd:a1:85:60:49:18:a5:
                    0b:ef:8b:57:2f:48:a2:3e:86:63:bb:81:93:e7:c7:
                    f3:f4:64:29:63:bb:ff:06:61:ee:62:ed:ab:e8:f0:
                    30:38:45:bc:8c:5d:d0:cf:37:87:47:b7:97:7b:d9:
                    ba:8f:68:84:e2:c4:a3:6a:6b:2d:5d:92:78:05:16:
                    75:96:50:76:94:8d:74:77:c8:1e:95:4e:bf:57:87:
                    36:62:16:7c:bd:26:42:9b:91:2a:15:53:06:6f:bf:
                    11:94:9e:a1:d0:a9:8c:c3:a0:47:a9:7d:e8:5c:60:
                    97:99:e0:b1:a7:02:98:8f:eb:01:db:6e:7d:7a:bb:
                    71:29:5f:a5:40:c9:b7:f9:c4:08:be:ae:48:6c:92:
                    c0:2e:f3:f9:8a:bf:0f:06:ef:61:27:99:a5:97:ee:
                    ca:1d:af:80:e4:27:8f:8d:0e:76:50:a4:b4:8d:fd:
                    09:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1C:11:C9:54:B6:9B:35:14:9A:02:18:50:F9:62:32:06:44:43:32
            X509v3 Authority Key Identifier:
                keyid:4E:28:4D:F2:8C:65:20:A7:71:13:04:15:F3:93:C8:34:7D:6E:6D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/9071A5E690CB11E6A804EF84C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:89:9f:58:c0:15:73:a2:df:ce:64:3b:f3:0e:f5:45:50:8e:
         15:0b:f1:6f:a5:f4:f2:bc:35:c8:73:de:fe:70:c7:d7:dd:38:
         82:1b:3c:1d:7e:ee:c2:1b:f3:e3:10:f6:f6:34:56:8e:c8:42:
         c8:0e:32:25:15:e8:24:ca:3f:be:5f:09:da:c6:30:16:71:af:
         b4:b0:99:26:5f:7b:f2:61:dc:7c:d4:6a:ad:80:7d:2e:53:34:
         f6:4a:b9:35:2b:26:f3:a4:83:35:16:b6:0f:d3:91:df:bb:37:
         54:c7:04:c3:dd:b7:e0:0e:6d:7c:54:77:d3:6f:a7:57:53:94:
         a1:ff:b8:71:09:28:fe:5c:7e:4a:48:ad:20:89:f7:b3:52:6d:
         1b:61:d5:87:3f:86:b5:ac:27:74:23:aa:45:68:9d:ae:7d:2f:
         13:ff:98:e0:cc:bd:b7:e5:17:a8:50:b9:b2:39:50:49:e2:1a:
         07:94:1d:7e:d4:5e:5d:b6:fd:25:e7:af:fc:6b:d1:35:d2:c8:
         32:8f:68:79:2b:98:ee:1a:97:f8:f2:67:36:10:06:1d:11:85:
         61:ca:6f:39:c5:f9:f3:31:d5:21:2e:c0:9a:43:e1:b0:c9:14:
         2e:0f:86:94:e0:96:25:27:e3:1d:7e:02:07:fa:e4:06:d0:c9:
         09:da:43:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:45:08 2024 by rpki-client on console-fra.rpki-client.org