Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/D154F886EB7E11EE973A5D76C4F9AE02.roa
File:                     D154F886EB7E11EE973A5D76C4F9AE02.roa (raw, json)
Hash identifier:          KNP57ubsOVF9oNCH7Xk/Z7xQApgpYUwHKDlJNQIBNxs=
Subject key identifier:   17:F2:E6:D3:A5:AE:D6:CD:D1:4D:E1:C2:0E:56:48:38:0A:76:FA:6F
Certificate issuer:       /CN=A91BB6B3/serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698
Certificate serial:       056C
Authority key identifier: 6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/D154F886EB7E11EE973A5D76C4F9AE02.roa
Signing time:             Thu 13 Jun 2024 01:25:35 +0000
ROA not before:           Thu 13 Jun 2024 01:25:35 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     2914
IP address blocks:        103.151.6.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl
                          rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1388 (0x56c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB6B3/serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698
        Validity
            Not Before: Jun 13 01:25:35 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=666a4a8e-3a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:05:8a:71:20:88:06:6a:d9:5c:26:68:34:57:
                    39:2a:c9:ec:ce:ef:4b:1e:56:b2:64:e2:b2:9d:c5:
                    4c:1f:88:bd:d8:1a:56:e6:12:67:75:15:16:d0:e0:
                    fa:fb:81:fb:6d:c9:19:66:3a:c4:25:97:f8:c5:27:
                    b5:d8:3e:56:92:6f:98:29:96:ae:92:e9:b3:67:7c:
                    c3:9f:0f:b3:20:ed:5a:9b:84:ad:ef:42:79:a2:a2:
                    b5:8a:63:6c:fd:12:7e:9a:93:35:3b:48:02:50:04:
                    f7:67:33:48:b5:00:43:50:bc:04:aa:0a:19:da:ba:
                    84:15:87:f5:0d:35:56:4a:3d:b6:ea:ae:f8:49:e2:
                    f4:27:00:20:70:f7:0f:e7:d2:87:bb:2f:c3:ec:0f:
                    68:75:dc:7c:59:d3:10:8b:30:0c:76:45:85:ec:a0:
                    f8:65:5e:74:18:26:b9:2c:a7:b9:59:a8:cf:50:15:
                    12:70:bd:e8:0c:65:af:81:73:92:d6:60:09:0e:b0:
                    05:a4:d2:26:7a:0b:77:21:9f:9a:d6:5a:a0:86:e6:
                    f1:3a:3a:8b:30:01:f9:7e:f1:7a:b4:3d:26:31:19:
                    98:60:11:1b:f4:fe:d5:69:7b:56:f0:15:f9:ed:48:
                    7e:e6:57:ab:ce:fc:ae:44:8e:22:32:19:fa:3f:a1:
                    ac:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F2:E6:D3:A5:AE:D6:CD:D1:4D:E1:C2:0E:56:48:38:0A:76:FA:6F
            X509v3 Authority Key Identifier:
                keyid:6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/D154F886EB7E11EE973A5D76C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:3e:e6:b2:b6:b1:4a:4a:c7:de:b5:19:6f:06:67:e6:5e:dd:
         4b:0a:65:0a:8d:73:73:50:db:60:d0:bc:4d:de:78:ac:68:31:
         1e:43:c6:54:62:a0:52:2c:ca:3e:a9:ed:52:ef:d9:0e:e4:45:
         ad:9b:f8:b7:d8:42:b0:61:97:81:b4:f7:a0:db:77:1f:12:49:
         8a:41:1f:d6:b7:61:b3:0b:23:3e:f6:b9:2b:ec:61:19:c7:11:
         c2:25:84:88:c4:41:f8:0c:19:be:78:f3:85:df:39:9a:82:c5:
         3a:d0:0c:3c:1e:ee:bf:f1:27:66:b9:b1:8c:b7:17:a0:cd:ff:
         82:29:ed:30:f1:c4:c4:3a:46:91:68:e4:13:5f:40:37:71:66:
         f3:b5:62:42:8c:9b:38:d7:9d:71:c4:6e:50:a4:35:ec:48:de:
         b7:ff:66:b4:a1:6d:c7:33:bc:08:fb:32:04:a4:2c:b4:9c:cb:
         70:bc:a1:87:fe:a7:04:45:6c:c3:ba:31:2d:25:67:fe:67:01:
         ab:8d:3a:22:8d:3b:44:6d:d6:d0:55:a6:f4:c8:55:39:f9:fe:
         07:cf:72:91:41:5d:8d:6d:ad:cf:90:b9:1f:6d:8e:6a:6b:e9:
         82:e7:d3:82:01:65:97:8a:bf:ab:65:31:b8:3f:03:0e:54:df:
         c2:d5:d1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:55:52 2024 by rpki-client on console-ams.rpki-client.org