Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/93D60566AE5B11ECB19C1569C4F9AE02.roa
File:                     93D60566AE5B11ECB19C1569C4F9AE02.roa (raw, json)
Hash identifier:          mfWKFm3R9Zz1cfvfe7gZWjinbVCRooVyIR4rmFi/Bec=
Subject key identifier:   DD:FF:ED:8D:62:3F:67:A9:F6:25:AD:95:32:D5:2D:8A:B0:54:01:44
Certificate issuer:       /CN=A91B7700/serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2
Certificate serial:       0306
Authority key identifier: CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/93D60566AE5B11ECB19C1569C4F9AE02.roa
Signing time:             Thu 07 Nov 2024 00:53:39 +0000
ROA not before:           Thu 07 Nov 2024 00:53:39 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     132829
IP address blocks:        103.174.196.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl
                          rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 774 (0x306)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7700/serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2
        Validity
            Not Before: Nov  7 00:53:39 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=672c0f92-afd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:21:d5:25:4a:b8:82:a1:27:f9:33:c4:c5:b7:
                    f1:b4:bf:ad:e7:b7:34:84:11:58:37:5d:50:b3:00:
                    13:6f:46:93:af:5c:5f:f2:eb:69:36:2c:cf:73:c2:
                    76:a7:f8:53:47:23:c3:8b:24:ae:89:8d:b5:ea:62:
                    ea:30:b2:3f:cf:a2:51:f3:a5:4c:a1:ba:96:9c:b7:
                    16:e1:7b:08:75:8a:76:18:06:da:b6:92:49:69:23:
                    72:bd:d2:cd:1e:f3:ea:ab:03:40:23:30:79:60:bf:
                    aa:9a:6c:ad:d0:f3:06:f3:c6:2d:0f:4b:16:52:32:
                    2a:23:8a:14:df:85:f0:50:73:1d:8e:53:e2:0a:7f:
                    4e:74:22:9f:8c:90:c7:e2:ab:5c:8f:03:19:94:b3:
                    34:71:1a:67:92:ea:92:d7:1d:72:d3:4d:f0:24:f1:
                    77:44:77:6a:4b:de:23:34:11:49:4e:f9:3c:61:94:
                    cf:a6:47:59:1b:1a:bd:1d:f0:55:b0:5e:5e:ac:18:
                    20:12:db:9b:09:20:14:19:4e:3b:ad:8e:23:d0:4a:
                    77:ee:e4:f8:d8:8b:db:47:b5:e6:c0:1c:1a:51:b8:
                    8f:2d:be:da:b9:3f:f0:68:03:7f:9f:75:15:d9:e0:
                    f4:41:8c:a3:35:88:5b:22:dd:12:a6:3c:3e:46:cb:
                    2f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FF:ED:8D:62:3F:67:A9:F6:25:AD:95:32:D5:2D:8A:B0:54:01:44
            X509v3 Authority Key Identifier:
                keyid:CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/93D60566AE5B11ECB19C1569C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:fe:8d:ab:c4:5d:2a:bb:fd:36:05:7f:c0:3b:b8:f3:36:03:
         3a:e0:fa:ee:84:4b:ec:3b:ca:b5:62:f2:72:4c:27:17:dd:e2:
         f9:39:fe:a0:ab:8c:98:70:b9:25:d6:dd:07:35:bb:c5:c3:a7:
         9f:c1:7f:0f:26:51:b1:d5:a8:77:3a:3a:70:59:82:eb:58:d7:
         ba:ee:1b:08:0f:15:6a:7e:24:76:82:f6:85:96:81:b6:ec:31:
         63:13:b2:5f:d0:35:88:3b:85:c6:ba:f1:de:be:3f:5c:31:08:
         49:3d:d6:3a:c7:7a:a0:b2:37:65:52:4e:38:e5:66:05:44:ba:
         2f:38:59:b4:04:b7:02:dc:34:a4:a7:d4:bf:3e:93:0b:68:ab:
         88:e2:31:2d:07:e6:14:7b:99:61:c7:61:09:bc:5f:ea:a8:8d:
         1f:78:d7:cf:cb:4b:8b:41:72:34:67:3a:41:03:8b:cd:e5:8e:
         8e:71:63:ca:d1:b6:27:66:1f:a5:22:e6:b1:5a:04:be:9c:7b:
         3d:93:4f:61:99:24:bc:25:c2:ee:6b:4f:b4:27:41:e3:27:88:
         23:c2:93:67:c9:70:ce:6d:7f:47:6c:7d:42:86:ea:7b:c9:12:
         57:49:71:2f:f0:80:10:b4:e9:be:d0:7b:63:d6:43:00:d9:45:
         49:1e:be:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:44 2024 by rpki-client on console-fra.rpki-client.org