Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9F6AA75820CE11ECAEA9140DC4F9AE02.roa
File:                     9F6AA75820CE11ECAEA9140DC4F9AE02.roa (raw, json)
Hash identifier:          v5PrqfVCr8q8FvX1NWEBqRMp4kzzDk/z/M4X41okkjU=
Subject key identifier:   EF:55:6C:54:78:DF:E3:45:A7:BA:1D:EB:3A:49:BF:50:9B:62:91:63
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3E65
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9F6AA75820CE11ECAEA9140DC4F9AE02.roa
Signing time:             Tue 12 Sep 2023 02:41:19 +0000
ROA not before:           Tue 12 Sep 2023 02:41:19 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     135908
IP address blocks:        103.82.196.0/22 maxlen: 24
                          2001:df6:2200::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15973 (0x3e65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 12 02:41:19 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ffcfcf-ec28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ee:99:b5:54:a2:79:78:14:29:ed:9c:06:2e:
                    40:61:bf:1b:af:b3:fc:98:85:5c:51:d1:a8:fa:eb:
                    45:b9:57:1c:27:27:e6:96:96:a9:c7:28:7d:cc:4f:
                    9f:d0:3c:c7:b0:e2:90:3e:3c:fe:ca:07:4f:f7:4b:
                    b0:4a:a0:c4:65:8a:50:b4:cc:8e:b7:0e:10:33:de:
                    4c:f2:6e:93:28:f2:88:0f:9b:f3:15:2f:32:86:11:
                    3c:21:80:2b:ef:09:cb:d4:80:44:f7:d8:75:dd:91:
                    b4:04:2f:1c:ef:fb:b3:2c:15:36:b1:c6:ba:e4:48:
                    d3:35:24:bc:ba:6a:cc:88:4a:cd:44:fd:6c:c7:0d:
                    aa:73:96:7c:cd:35:d7:06:54:04:a9:af:3f:39:e3:
                    27:f0:1a:f3:50:4d:02:9a:6f:78:db:69:64:c1:d5:
                    48:94:e1:7c:b3:e6:59:4b:78:fe:b3:3f:d4:0b:d9:
                    1e:07:12:ce:a3:03:f0:66:5f:66:09:da:9f:0f:9e:
                    4b:1c:3e:5d:a1:5b:b4:01:58:6d:aa:6f:0a:2c:eb:
                    55:23:66:36:ff:9a:14:4d:07:06:5c:c2:d9:62:29:
                    05:39:52:9d:00:68:72:52:4f:f3:c9:6f:fe:76:f5:
                    ad:7c:3e:b3:ae:77:d6:3d:d9:26:f5:60:49:e8:88:
                    2e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:55:6C:54:78:DF:E3:45:A7:BA:1D:EB:3A:49:BF:50:9B:62:91:63
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9F6AA75820CE11ECAEA9140DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.196.0/22
                IPv6:
                  2001:df6:2200::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:d2:50:80:93:da:85:7d:85:e3:39:27:34:e6:df:82:20:5f:
         bb:30:e4:e8:8f:e0:28:e5:46:e6:06:6c:da:54:33:2f:44:8a:
         3e:58:5a:33:84:71:46:5e:d8:26:b6:3e:53:51:6e:2f:29:45:
         bd:52:3c:48:4e:01:77:cf:c1:37:24:46:7b:6f:d2:5f:70:d6:
         2d:8d:38:10:17:ab:80:c3:bb:51:d5:80:ff:a9:d0:21:90:5c:
         0f:02:d1:2d:f1:c4:ef:03:f5:b8:b1:b2:09:62:c9:50:86:f2:
         b5:ac:d1:44:76:3d:3c:1f:88:0b:ba:b5:20:b2:f1:09:22:a6:
         3f:a0:56:7e:20:dd:c2:75:45:20:e6:58:28:48:75:c6:34:78:
         c3:60:4d:63:0b:49:fc:87:63:51:14:90:59:e6:5b:5b:31:23:
         f7:6a:c1:80:9f:dd:a8:a6:b9:d0:0f:36:dd:8d:f0:5e:5a:b7:
         df:87:52:e3:64:e5:16:35:c7:6d:40:62:37:a0:fa:46:ad:b0:
         3c:38:28:8b:e3:e9:c4:c5:35:1b:1b:6a:16:65:35:17:c8:3e:
         cd:3e:76:0b:2e:5a:38:74:6e:7d:07:c7:08:6a:85:b8:b1:c0:
         48:eb:fa:8a:ee:0c:90:47:2b:f6:5f:eb:6c:c3:83:78:90:de:
         52:97:1c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 06:34:17 2024 by rpki-client on console-ams.rpki-client.org