Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/C2604920CFE011EE83247F7CC4F9AE02.roa
File:                     C2604920CFE011EE83247F7CC4F9AE02.roa (raw, json)
Hash identifier:          8T3yBHmtCqlB+aM8ej4zblFk+WNFmZ0LxXxnA03WiR8=
Subject key identifier:   54:9A:64:D4:D6:62:10:83:6C:F3:18:76:D1:B0:08:DC:7D:0D:B7:F2
Certificate issuer:       /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Certificate serial:       AD
Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/C2604920CFE011EE83247F7CC4F9AE02.roa
Signing time:             Thu 01 Aug 2024 06:07:57 +0000
ROA not before:           Thu 01 Aug 2024 06:07:57 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     135661
IP address blocks:        103.62.232.0/24 maxlen: 24
                          103.62.233.0/24 maxlen: 24
                          103.62.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
        Validity
            Not Before: Aug  1 06:07:57 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66ab263d-5daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8d:ae:5d:38:92:03:f6:d7:e7:69:c6:1b:e1:
                    ed:6e:aa:f8:00:7a:66:59:52:29:85:40:30:98:65:
                    db:65:a8:91:4a:2b:3d:e7:89:a9:7f:47:33:e7:16:
                    8e:a5:cb:9f:58:d8:de:02:96:5c:4b:e0:24:5d:3b:
                    fd:5b:b2:57:c7:f2:ce:2c:e6:db:12:7e:bb:38:8a:
                    20:33:d0:62:ce:61:c1:4c:c8:66:d3:f7:6c:6f:52:
                    29:32:54:b1:e8:17:42:9a:23:c8:10:b1:d5:3b:26:
                    4a:fd:03:14:1b:47:de:a5:b7:c5:05:5a:82:ee:2c:
                    16:b0:1c:83:2d:7d:08:0e:8a:74:d4:66:50:73:d4:
                    27:2a:a2:fa:39:6e:52:16:2f:0d:d3:b7:78:3e:1e:
                    9d:12:6c:fa:95:74:6b:5a:85:e4:68:53:ab:33:2c:
                    02:f1:5b:0c:32:4f:e3:97:72:5d:36:21:c6:15:56:
                    9a:1b:6a:c7:05:48:19:01:a7:ba:6b:42:64:be:59:
                    24:f6:e9:75:42:f0:87:e8:d0:7f:52:f6:43:d3:ff:
                    2a:74:14:01:67:16:28:c5:c2:06:e7:b2:b1:a6:a7:
                    85:4d:a4:ad:7a:25:1e:a8:31:cc:d7:eb:46:3c:0f:
                    61:8f:b1:f1:e3:b9:cc:60:60:c7:92:a0:66:b0:31:
                    89:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9A:64:D4:D6:62:10:83:6C:F3:18:76:D1:B0:08:DC:7D:0D:B7:F2
            X509v3 Authority Key Identifier:
                keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/C2604920CFE011EE83247F7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.232.0/23
                  103.62.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:e2:cf:45:1c:51:f3:0f:35:39:2e:3c:40:87:31:9a:cc:96:
         61:c8:59:ce:2f:fa:a8:4e:0e:78:c2:96:38:61:f0:bf:8d:14:
         db:d9:0b:d3:4e:b4:21:b1:c7:e5:6c:44:27:d5:fd:d9:19:05:
         4e:eb:67:d4:53:23:d8:81:69:4b:b5:49:3a:a4:3c:d7:da:35:
         d4:43:8a:2d:cb:19:ad:57:b8:95:7e:99:72:b2:59:be:68:40:
         4b:09:01:ee:1d:ef:52:c5:23:23:d2:a9:86:32:6e:00:72:a0:
         2f:87:54:43:35:0d:cb:43:d2:3e:63:e6:b0:71:61:11:b1:d8:
         a9:82:8a:4c:03:02:01:20:98:a8:0d:ca:4b:42:e8:c4:d5:85:
         ef:8c:60:aa:1a:f3:b0:e2:ec:26:b0:d2:7b:18:17:22:77:94:
         ee:3b:cc:11:de:10:e7:72:ed:98:f9:ee:ba:eb:09:aa:bd:37:
         45:f1:14:b3:a7:bb:04:d5:70:1d:3c:03:67:63:72:6b:a3:00:
         1c:23:47:26:61:3b:ee:61:f4:3a:49:20:7c:71:a1:ff:ae:e8:
         13:4b:e2:9f:79:08:5d:7f:44:7a:ba:f8:4b:c0:3f:06:35:dd:
         3b:ad:93:98:c0:74:5d:cc:d5:e2:a3:b3:b3:65:57:98:40:88:
         11:65:a7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:19 2024 by rpki-client on console-ams.rpki-client.org