Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/078AE946642A11EAA019224CC4F9AE02.roa
File:                     078AE946642A11EAA019224CC4F9AE02.roa (raw, json)
Hash identifier:          zuPgCF1JRKRsNBDnVgon3sTbonHhVFuQJcOm55m3PwI=
Subject key identifier:   0F:A8:4D:1D:6B:40:E1:4C:14:3D:CA:A3:C8:D5:10:4F:F4:DB:14:6A
Certificate issuer:       /CN=A91FE7DB/serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90
Certificate serial:       09FE
Authority key identifier: AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/078AE946642A11EAA019224CC4F9AE02.roa
Signing time:             Sat 04 Nov 2023 20:28:00 +0000
ROA not before:           Sat 04 Nov 2023 20:28:00 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     135554
IP address blocks:        103.123.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl
                          rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2558 (0x9fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE7DB/serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90
        Validity
            Not Before: Nov  4 20:28:00 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6546a950-f4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f8:3a:3e:f8:ac:7f:1f:9e:7c:e5:f1:f9:f5:
                    d4:bd:04:57:4a:04:9d:c7:96:54:9d:fd:22:cb:6f:
                    fc:4b:b9:04:7c:19:f2:99:2e:a4:a3:ca:d6:e8:56:
                    ef:67:09:2c:18:35:47:fa:92:a0:7a:97:69:06:43:
                    b4:d5:ed:22:db:37:28:b0:87:ee:13:9f:97:0f:df:
                    1b:d3:5a:87:58:c6:71:ab:05:a7:e0:72:98:f2:aa:
                    22:b0:cb:bb:97:fd:2e:74:ef:8f:b6:c5:73:bf:14:
                    a5:73:90:c5:62:f0:a5:96:57:c2:62:e9:22:19:d2:
                    e9:6b:bb:9a:31:ab:17:56:61:78:6a:02:c4:bb:f8:
                    9a:bb:52:a5:a2:62:3f:31:cf:ea:37:93:91:44:7b:
                    9d:34:8a:e3:60:e0:30:2c:0e:83:da:29:24:36:b8:
                    b1:a1:ef:d6:f3:e4:58:14:4c:1a:b3:25:fc:74:80:
                    29:bc:dc:af:0c:cf:37:83:e2:a5:35:6e:d3:f0:8e:
                    07:9f:5a:96:ba:a3:f5:43:ad:b0:65:c3:f6:e0:e7:
                    66:d0:af:15:21:2b:8e:42:66:a6:83:7a:8e:f7:13:
                    54:9c:29:2d:32:18:36:a7:b4:a2:c8:2c:56:91:59:
                    05:aa:06:9f:81:5f:c0:60:12:43:f5:37:38:ce:54:
                    80:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A8:4D:1D:6B:40:E1:4C:14:3D:CA:A3:C8:D5:10:4F:F4:DB:14:6A
            X509v3 Authority Key Identifier:
                keyid:AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/078AE946642A11EAA019224CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:76:39:b8:c0:5d:b4:40:c6:46:6d:60:3e:3f:19:eb:06:3a:
         4d:27:25:a6:3d:c3:06:0d:a1:1e:8c:e7:4b:42:b6:9e:a8:8e:
         4e:b6:a5:4d:48:1d:38:b6:68:5d:b1:7c:73:e0:4e:47:5f:a1:
         f0:a6:cd:f7:d0:4e:4a:0d:ff:f1:f5:35:42:ba:2a:13:5d:fc:
         b6:2c:cb:06:d9:a0:91:0f:95:7c:7a:7a:45:96:77:2e:64:cb:
         60:59:7b:58:0c:ba:7e:52:b8:70:4e:9e:75:72:9a:37:9d:db:
         34:48:8c:78:6b:01:57:08:15:46:e7:ee:a7:8e:6b:18:4c:61:
         ee:aa:95:aa:db:4c:50:75:72:9f:b5:1f:e9:2d:1d:d5:b4:57:
         16:18:30:d8:e7:b1:a7:85:e4:c3:01:10:05:b7:a1:dc:7a:63:
         de:a4:79:a8:f2:6a:72:64:1b:7b:13:73:a9:0d:31:f6:36:df:
         c2:4f:05:bc:fd:73:c1:b6:5a:bd:e2:ac:8b:da:40:3c:bc:f7:
         61:43:04:e1:ae:e8:3d:17:0b:48:31:43:11:e0:95:4f:e0:5c:
         89:9a:45:39:51:d3:67:a5:a3:3e:32:79:4e:b7:f7:dc:01:45:
         57:c1:56:03:5e:91:77:86:91:6f:91:9f:e8:14:1d:1e:b3:ea:
         77:cb:5c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:34:56 2024 by rpki-client on console-ams.rpki-client.org