Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/6065A88AFE0011ED89B23949C4F9AE02.roa
File:                     6065A88AFE0011ED89B23949C4F9AE02.roa (raw, json)
Hash identifier:          GQuRICCeDjjGixJ45rH35u2ONJ6slmeUzZUnxu6QOIk=
Subject key identifier:   C7:64:C0:CD:22:6C:CC:04:41:17:21:17:7D:B8:D8:A4:60:28:DD:34
Certificate issuer:       /CN=A91A92D6/serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662
Certificate serial:       F1
Authority key identifier: C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/6065A88AFE0011ED89B23949C4F9AE02.roa
Signing time:             Tue 03 Sep 2024 05:47:46 +0000
ROA not before:           Tue 03 Sep 2024 05:47:46 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     147040
IP address blocks:        103.194.214.0/24 maxlen: 24
                          103.194.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl
                          rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A92D6/serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662
        Validity
            Not Before: Sep  3 05:47:46 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d6a301-e4fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:aa:53:d7:1e:db:c6:42:24:9e:f5:a1:ae:ed:
                    14:b8:b6:f5:8e:e7:3d:e5:1b:92:3e:55:3a:56:e4:
                    10:d3:19:19:f3:5f:2d:27:c2:55:de:fa:1c:77:28:
                    1e:c8:e4:b7:ae:a2:9a:9f:46:2e:61:fc:30:7b:09:
                    5d:63:88:46:3f:37:b8:f0:42:bf:de:fe:6b:d5:e8:
                    b7:b8:17:eb:6c:7d:72:f9:ac:70:ba:df:6d:ef:69:
                    84:7e:ad:25:a8:48:12:b5:42:38:54:c3:a0:d2:90:
                    7b:13:d5:77:b8:69:56:33:fa:95:55:4e:68:53:84:
                    03:ba:2b:c3:a8:1e:1e:96:c6:d2:48:8c:ad:34:86:
                    8c:f7:fe:fe:cf:56:ec:57:8c:ac:2a:67:93:76:1b:
                    0c:ca:3d:0e:cd:a3:4d:f3:a1:76:6d:f7:4b:b0:a3:
                    ae:29:ce:81:20:12:9c:87:a7:94:e2:97:24:b6:32:
                    de:46:7e:a8:62:e2:9c:97:88:95:dc:1c:bb:55:bd:
                    e6:2c:b6:44:89:16:19:bd:39:c9:3c:3d:73:ec:89:
                    db:39:dc:a5:df:71:05:fd:5d:10:7c:82:ae:69:f7:
                    3a:3a:6e:6c:df:79:92:4f:e6:d3:25:e4:3d:44:a7:
                    26:04:89:3a:f3:7e:21:11:57:f0:db:a0:8d:8d:04:
                    3f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:64:C0:CD:22:6C:CC:04:41:17:21:17:7D:B8:D8:A4:60:28:DD:34
            X509v3 Authority Key Identifier:
                keyid:C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/6065A88AFE0011ED89B23949C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.194.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:00:59:85:c9:98:12:4b:86:37:73:63:d4:9e:2a:2d:72:18:
         64:6f:f0:5c:8b:4b:8f:94:95:d4:dd:ce:98:1b:c4:a9:bb:4e:
         c3:02:05:e2:f7:c8:23:fd:78:06:19:10:ea:19:c9:c1:3a:39:
         6b:04:fd:49:b1:39:09:2f:b7:49:6b:6c:94:0a:52:4a:9e:96:
         de:9c:86:88:ce:fa:fc:68:75:0a:9f:45:9f:2f:6d:5d:95:08:
         07:f3:ca:bc:a4:11:e8:02:8a:42:b5:d1:2e:b5:e8:cd:07:78:
         1b:9c:56:2e:f8:c3:03:75:37:d7:07:69:08:18:45:0b:90:7f:
         24:b7:4e:f0:8c:32:b1:31:6c:05:be:9f:5d:f0:24:d7:76:5a:
         ce:18:71:43:56:ff:f0:a1:ad:be:7d:6c:46:af:75:65:68:fd:
         84:9f:ed:bf:08:cc:f4:3b:b7:9a:29:e8:8e:b4:f7:20:dc:bb:
         ea:5f:37:4d:14:6b:ba:4e:cf:50:62:c2:32:c1:92:b2:b4:aa:
         0d:36:92:ff:ef:50:09:c5:33:fd:7d:99:26:69:a2:e6:4d:8b:
         b1:f5:72:b4:ae:33:1d:1b:27:bf:77:92:26:90:5e:de:0d:f6:
         1b:1b:38:f4:d0:3f:23:34:f8:cb:3d:c5:ee:b3:14:90:19:ee:
         2d:b8:23:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:55 2024 by rpki-client on console-fra.rpki-client.org