Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/4D87ACF0C4C911EE9E405162C4F9AE02.roa
File:                     4D87ACF0C4C911EE9E405162C4F9AE02.roa (raw, json)
Hash identifier:          GbO0pfdRRcEQHd1XoMpUxyX6yosrdAznLWaP+V/m//0=
Subject key identifier:   6E:5F:DD:D3:59:79:FF:4B:1B:B9:57:C7:02:C2:92:3B:5E:91:CB:91
Certificate issuer:       /CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1
Certificate serial:       03CB
Authority key identifier: 72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/4D87ACF0C4C911EE9E405162C4F9AE02.roa
Signing time:             Sun 17 Nov 2024 00:33:32 +0000
ROA not before:           Sun 17 Nov 2024 00:33:32 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     140616
IP address blocks:        103.176.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl
                          rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 971 (0x3cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1
        Validity
            Not Before: Nov 17 00:33:32 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=673939dc-e079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:16:f8:d2:8a:5d:7d:f1:27:a0:b9:b4:c3:4e:
                    ed:75:8e:17:d6:d3:dc:48:9c:55:1b:33:fa:78:fe:
                    da:be:fc:24:d6:72:42:e5:84:74:cd:52:56:96:ca:
                    a3:79:89:fc:57:fa:8d:92:f4:0e:3d:22:b5:94:59:
                    c3:f1:3f:24:64:ab:bb:ee:a5:ff:dd:2e:55:e4:97:
                    3a:1f:c5:eb:b7:75:54:1c:27:ff:55:eb:0e:71:6d:
                    13:93:4f:5a:4e:35:1f:dc:d3:76:0e:c2:75:0f:1c:
                    31:1b:20:ba:39:76:4e:c8:aa:98:72:41:bc:a8:8c:
                    39:da:62:ed:8a:2a:e7:53:11:ac:35:27:11:04:cc:
                    3a:d6:23:b0:b2:9f:36:bc:5d:68:69:12:fd:64:e2:
                    f6:29:93:15:d5:e5:6b:61:0f:16:41:6c:36:d8:c1:
                    18:17:ed:a5:84:25:0b:ec:b5:36:71:a5:f8:a6:df:
                    09:07:87:03:a3:cf:54:f2:34:9f:6f:6f:4f:1e:bc:
                    76:3c:a9:6f:7f:5c:71:d1:ea:99:22:24:ea:67:e6:
                    33:b4:d0:7b:3b:16:bb:f4:fd:49:38:2f:8e:dc:a1:
                    69:7e:cf:95:e0:f8:4c:43:c9:0c:07:8b:90:07:1f:
                    f7:a1:f2:45:52:27:e7:19:4d:29:9e:ab:6c:14:be:
                    a1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5F:DD:D3:59:79:FF:4B:1B:B9:57:C7:02:C2:92:3B:5E:91:CB:91
            X509v3 Authority Key Identifier:
                keyid:72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/4D87ACF0C4C911EE9E405162C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:be:52:31:fd:7d:22:25:43:52:97:94:0a:0b:ef:e7:00:40:
         8c:66:61:b6:2a:5f:d6:d4:68:bc:04:7f:09:a7:f4:af:83:a1:
         94:b1:7e:1d:27:c5:4e:c4:df:80:d2:86:80:d1:60:00:7b:78:
         f3:8a:7e:6f:ca:a9:c7:51:a7:3e:67:ef:80:08:2a:b9:61:97:
         c9:e1:a0:2f:7c:5d:65:3a:fc:6c:d0:3c:61:7f:fd:9f:f8:98:
         e2:cb:63:83:1b:70:97:28:b7:23:60:f8:02:3c:fe:fd:fe:e3:
         47:ef:48:2a:08:1b:8a:ef:d4:67:b0:e4:4a:c9:c1:26:00:45:
         93:82:da:09:d0:16:ad:f7:16:72:c2:f5:8b:d3:51:56:7b:9b:
         27:df:37:3f:71:1f:25:09:bd:ff:7e:61:2e:da:e3:6c:60:5a:
         01:d7:0a:e9:2a:37:dd:8c:9b:a5:22:59:9c:4f:66:3e:45:ba:
         af:e3:95:27:0d:28:c8:4c:df:cf:d2:ed:4f:6f:f3:e0:8a:c1:
         8b:7e:f9:e0:cd:eb:30:9b:3d:e0:0d:1d:ab:fa:8e:3b:b6:cb:
         bc:b6:c7:1d:34:5e:2c:ea:a8:4a:0a:95:87:1c:c3:d9:69:61:
         e9:37:cb:46:27:fd:17:96:4e:f5:fe:6a:3c:67:44:9b:29:2a:
         ba:c4:a1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:52 2024 by rpki-client on console-fra.rpki-client.org