Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/6CE66CFC630E11EEA9EDC20FC4F9AE02.roa
File:                     6CE66CFC630E11EEA9EDC20FC4F9AE02.roa (raw, json)
Hash identifier:          GWZ2MHtEWnxPiTCBVRb6cUY0T8WOEUXRXli5S8fNKVc=
Subject key identifier:   69:D7:71:1A:18:24:05:75:45:B2:8C:F4:BF:4C:DB:6D:4A:E9:4F:CC
Certificate issuer:       /CN=A91C37ED/serialNumber=071F8119171441802BE3261F15627DAF289DB336
Certificate serial:       CD
Authority key identifier: 07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/6CE66CFC630E11EEA9EDC20FC4F9AE02.roa
Signing time:             Sun 03 Nov 2024 03:57:34 +0000
ROA not before:           Sun 03 Nov 2024 03:57:34 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     151826
IP address blocks:        103.217.68.0/23 maxlen: 24
                          2401:40a0::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl
                          rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C37ED/serialNumber=071F8119171441802BE3261F15627DAF289DB336
        Validity
            Not Before: Nov  3 03:57:34 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6726f4ae-80e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:20:a0:4a:df:da:5a:1d:2f:5d:11:17:3e:dc:
                    cd:52:d0:2b:b6:11:19:99:fa:b4:c3:17:2a:9c:3d:
                    a2:bf:62:9f:ee:90:47:7b:77:76:bc:2c:1d:1f:0b:
                    16:94:88:61:b0:e4:c2:c8:a9:bf:58:84:2d:6c:0c:
                    51:d2:fe:22:f9:99:a5:f4:84:f8:25:b3:ad:6b:71:
                    9c:a7:92:60:e8:0a:74:20:f9:52:16:05:00:f2:a0:
                    f5:5e:a5:d0:f8:ed:73:7f:69:55:cb:35:4e:5d:ae:
                    38:38:b8:66:08:64:7f:23:f0:dd:02:d6:86:1f:05:
                    e6:46:86:0e:14:90:f2:54:98:d9:f6:3b:3d:b7:9d:
                    0b:b1:1e:ce:3e:66:fb:95:4d:1c:13:aa:0d:ba:40:
                    20:a3:60:54:61:30:7b:6e:37:69:20:43:d7:ae:b2:
                    52:5c:8a:40:85:2e:65:f4:d7:8a:c3:d8:0d:03:09:
                    f0:85:e4:9c:be:0d:35:93:ff:50:ba:b9:23:c7:38:
                    8e:55:a3:f2:ee:5a:a6:92:e7:dc:d2:08:67:48:43:
                    8e:89:d3:ce:58:31:ea:6e:9e:0d:7e:b7:c6:b9:10:
                    57:df:32:19:72:f1:0a:83:ca:e1:72:89:66:95:92:
                    e4:bf:f2:74:75:f5:bd:be:1b:4a:af:eb:32:42:0a:
                    8f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D7:71:1A:18:24:05:75:45:B2:8C:F4:BF:4C:DB:6D:4A:E9:4F:CC
            X509v3 Authority Key Identifier:
                keyid:07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/6CE66CFC630E11EEA9EDC20FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.217.68.0/23
                IPv6:
                  2401:40a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:a3:b8:73:79:63:c9:63:a9:d1:49:5e:cb:1c:f2:c3:39:e1:
         ff:2e:8e:af:d9:3d:59:ed:70:c6:1f:89:a4:0f:ee:97:40:6c:
         18:5c:06:2e:97:b9:55:33:5e:29:c4:8b:9c:03:52:2d:68:1b:
         cb:ff:c5:95:b3:e3:4e:8a:1c:e8:fc:8a:55:8a:de:df:ed:35:
         d5:b9:58:89:d3:80:7a:b0:19:6e:26:4c:60:85:5e:65:a1:69:
         91:26:e4:a2:9f:10:15:9f:aa:d7:5f:c5:fd:95:a0:17:e3:38:
         91:b4:6c:ba:38:ef:3a:8a:e0:08:d6:1c:e7:5f:97:a4:92:73:
         d7:03:52:67:75:60:03:4a:a8:c0:31:52:76:7e:5d:3c:93:86:
         d9:f7:5e:95:25:28:2a:8b:63:f2:ab:c9:4b:94:23:e3:72:4f:
         73:bb:f5:ba:63:28:ec:eb:e5:e8:43:14:81:0a:85:f4:1b:4b:
         93:d9:b1:f5:2e:f3:a7:8e:47:34:6d:ba:1f:d4:59:df:3a:e1:
         aa:fa:d6:03:46:a4:17:7e:68:74:37:5a:d0:a6:27:40:11:41:
         42:26:63:45:c3:4c:e7:ec:16:41:0c:ee:08:ef:55:2a:dd:c9:
         60:55:b0:93:02:92:de:7f:c2:46:06:3f:ca:12:88:22:0b:86:
         2a:c9:c7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:56 2024 by rpki-client on console-fra.rpki-client.org