Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/3CD61DC8812D11ED9C04940EC4F9AE02.roa
File:                     3CD61DC8812D11ED9C04940EC4F9AE02.roa (raw, json)
Hash identifier:          4r+FPODWlYAg3R0bTGG1po2dllmEFZLNMXrI5xbY0sU=
Subject key identifier:   D8:AB:50:87:4F:92:29:45:20:2A:A8:20:C5:E5:D0:07:E2:DE:47:FB
Certificate issuer:       /CN=A91B92DC/serialNumber=3ED226AE927F83981780546CE362F3369EDB24B3
Certificate serial:       0133
Authority key identifier: 3E:D2:26:AE:92:7F:83:98:17:80:54:6C:E3:62:F3:36:9E:DB:24:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/3CD61DC8812D11ED9C04940EC4F9AE02.roa
Signing time:             Sat 03 Aug 2024 04:55:05 +0000
ROA not before:           Sat 03 Aug 2024 04:55:05 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     150121
IP address blocks:        103.191.68.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.crl
                          rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B92DC/serialNumber=3ED226AE927F83981780546CE362F3369EDB24B3
        Validity
            Not Before: Aug  3 04:55:05 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66adb829-7c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ed:88:cd:57:ca:ac:fa:c5:ec:48:c0:b5:fa:
                    d0:bf:64:45:f3:ec:72:e3:9a:db:63:6a:ed:c2:6c:
                    0d:d1:49:9a:21:b4:24:83:d0:73:51:d1:3c:e5:a9:
                    65:ec:9a:3c:63:ab:27:c0:4f:3d:85:20:06:12:0c:
                    2e:4f:af:9f:10:05:23:b0:1e:be:a7:5d:0b:e5:97:
                    1f:8c:e2:70:a4:ca:91:e7:9c:b4:a6:34:cf:46:21:
                    f8:6a:93:13:49:ac:0d:2f:5d:68:cd:32:fc:68:7f:
                    87:5d:3b:20:87:c9:32:a0:96:cc:3d:b8:cd:b9:2d:
                    ab:e4:1d:62:c2:d9:89:95:07:c6:56:28:82:66:a4:
                    d6:89:55:ba:7b:55:3a:48:0c:fe:f0:5c:e6:b7:10:
                    f4:65:a7:51:87:ab:97:df:58:56:a8:f0:c6:e2:78:
                    ca:b5:01:b1:72:3d:3b:9b:b7:a9:cd:67:6a:64:7e:
                    48:a7:8f:e5:23:94:8d:eb:9e:9a:f6:bc:b9:54:4c:
                    9a:24:5b:e8:42:26:12:07:da:44:27:54:c6:6f:70:
                    66:f8:67:90:8c:2a:15:9b:63:a6:77:a5:46:9f:48:
                    20:a1:d8:03:6e:79:e6:e5:0d:8a:ad:59:3e:ef:5f:
                    6c:c7:44:9a:c3:c7:d5:09:3d:8d:32:00:b2:42:78:
                    d5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AB:50:87:4F:92:29:45:20:2A:A8:20:C5:E5:D0:07:E2:DE:47:FB
            X509v3 Authority Key Identifier:
                keyid:3E:D2:26:AE:92:7F:83:98:17:80:54:6C:E3:62:F3:36:9E:DB:24:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/3CD61DC8812D11ED9C04940EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:83:ff:f0:fd:7c:09:c6:86:dc:8d:34:e5:23:57:94:60:07:
         2b:67:43:8b:15:7b:07:8a:1d:06:4f:7f:c1:c8:ef:25:6e:7d:
         ea:53:39:8e:54:74:70:e8:62:19:11:ba:41:c0:47:89:cc:cc:
         88:84:3a:33:fd:37:4e:80:9b:72:c8:f6:9e:00:25:51:1b:f3:
         b1:1b:90:4b:7e:67:51:fb:0d:34:8b:a4:d0:bc:b1:c4:05:b2:
         e4:7c:52:65:dc:d0:e1:24:8e:8a:1f:17:78:d7:e2:c1:a5:cf:
         17:19:7d:30:e5:2c:f1:0d:7c:16:3a:39:d9:10:18:a2:55:60:
         cf:68:5e:59:ab:59:ed:d5:c2:4b:61:06:a2:41:eb:24:dd:b9:
         3a:eb:e4:fe:4b:dc:a5:01:e3:0e:e7:c0:d7:97:1d:ab:b3:4b:
         f2:c8:db:2c:61:64:b1:d2:dc:79:2a:7a:cf:7b:39:55:77:c2:
         1f:f6:4a:6f:03:91:4d:1d:19:42:b4:f4:aa:3b:84:d4:d6:cf:
         16:12:8f:f3:f5:7b:e5:54:38:48:5e:ca:33:b2:69:bd:a1:08:
         22:6f:2c:17:52:49:7c:25:28:67:83:3e:ca:50:4f:22:60:93:
         66:6f:92:a8:01:ed:15:14:08:1f:78:4f:4d:9d:aa:9b:30:05:
         03:ac:c7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:55 2024 by rpki-client on console-fra.rpki-client.org