Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/0C023160C4C911EE9278E261C4F9AE02.roa
File:                     0C023160C4C911EE9278E261C4F9AE02.roa (raw, json)
Hash identifier:          RLzlmcW/oxo3+VUjO1sUrRUA07nzGadIHmec6ld3tSY=
Subject key identifier:   7B:5C:FE:7E:DF:FF:D4:99:AC:4D:D6:73:DD:AD:9C:C6:CE:23:D5:9E
Certificate issuer:       /CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1
Certificate serial:       03CC
Authority key identifier: 72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/0C023160C4C911EE9278E261C4F9AE02.roa
Signing time:             Sun 17 Nov 2024 00:33:33 +0000
ROA not before:           Sun 17 Nov 2024 00:33:33 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     149016
IP address blocks:        103.176.81.0/24 maxlen: 24
                          2001:df0:b40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl
                          rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972 (0x3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1
        Validity
            Not Before: Nov 17 00:33:33 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=673939dd-38e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c5:45:7a:50:b6:da:cb:22:75:01:51:1f:b0:
                    0b:76:1b:cc:a5:2f:2d:0b:d4:bd:5f:44:e5:dc:e1:
                    14:34:30:89:e4:a0:54:32:a1:24:92:3c:38:21:ad:
                    7a:6a:3d:7a:f4:d5:9b:95:38:89:c8:4f:c7:78:bc:
                    b5:63:9f:06:8c:48:4b:ee:4a:65:68:78:6f:5a:76:
                    61:92:8c:26:46:b6:d3:2a:c0:25:ea:3c:a6:c0:8c:
                    9f:d1:52:6d:e9:d4:87:29:23:b1:6f:b5:b2:0d:2f:
                    be:37:23:6b:77:bd:d0:f1:0e:9e:19:d9:9a:10:a8:
                    93:10:99:85:b2:db:36:34:e8:81:63:9d:8e:e1:80:
                    0a:64:21:47:f5:7d:a9:16:08:4d:9b:14:76:30:01:
                    53:4d:1b:4d:e8:5a:72:c7:49:bf:33:37:49:34:2d:
                    95:e0:b2:c4:6f:ac:8a:0e:a6:03:36:2d:a7:d1:b6:
                    e4:96:a4:17:fb:cc:1f:50:0a:9d:31:3d:20:5b:cb:
                    c3:b6:f3:41:43:10:9b:38:a2:9e:12:d9:0b:b2:32:
                    b6:92:f0:59:fe:50:c1:3e:5c:8c:f2:ef:80:71:51:
                    b5:d5:45:87:c4:b6:d9:da:58:18:0e:85:14:53:cd:
                    0c:a3:4f:f3:c5:05:75:c8:55:8f:3b:ad:5c:3f:ae:
                    c5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5C:FE:7E:DF:FF:D4:99:AC:4D:D6:73:DD:AD:9C:C6:CE:23:D5:9E
            X509v3 Authority Key Identifier:
                keyid:72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/0C023160C4C911EE9278E261C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.81.0/24
                IPv6:
                  2001:df0:b40::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:5f:6f:72:e5:8b:5d:e6:32:64:b9:44:21:38:f8:25:f1:f8:
         ac:1d:65:0a:97:8d:42:e9:32:92:c0:3a:6e:33:6a:3c:bd:d7:
         ec:35:54:ab:8d:c7:c4:86:f6:b9:76:b1:9d:b8:8a:63:65:27:
         92:6d:26:13:ba:1d:f9:61:96:ea:b7:85:dc:b9:96:53:bc:79:
         92:33:c3:f6:67:03:f3:21:2c:a5:63:81:14:fd:ba:0a:42:00:
         52:34:e8:e1:7f:33:a8:3b:66:21:08:72:57:7e:a2:59:ee:ee:
         37:a2:4b:09:ef:d8:61:38:82:e5:53:8b:a6:0a:92:94:14:ec:
         06:51:14:dc:cb:1e:38:6a:fe:8c:e4:fc:cc:df:49:6c:33:b4:
         e8:58:75:79:d6:a4:9f:28:36:ca:5e:a5:06:25:ac:94:98:83:
         e0:eb:98:ad:ca:2d:0e:5c:64:35:5d:ac:e0:bd:4a:ab:44:43:
         11:b1:58:d4:3b:4e:71:6f:90:c2:a7:46:a9:41:5a:43:a6:84:
         4c:34:80:5f:17:3e:01:13:f0:c6:de:6a:94:a8:70:23:b1:9f:
         ff:99:3f:5c:16:d6:1a:2f:90:00:e9:3e:a1:0f:9d:1f:b9:db:
         56:7f:a3:6d:48:e3:ef:2e:2a:e5:91:64:84:57:80:fd:14:92:
         01:1b:28:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:52 2024 by rpki-client on console-fra.rpki-client.org