Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/F865B8887CEB11ECA79BD83DC4F9AE02.roa
File:                     F865B8887CEB11ECA79BD83DC4F9AE02.roa (raw, json)
Hash identifier:          9AbsTY8cTY46TpPDuvc4IXAIWNpWgIpIVFjtcxPCVMI=
Subject key identifier:   66:28:F2:A9:0F:37:D2:73:FC:E5:5C:06:74:41:8D:A4:2A:D6:3A:89
Certificate issuer:       /CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4
Certificate serial:       0388
Authority key identifier: 97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/F865B8887CEB11ECA79BD83DC4F9AE02.roa
Signing time:             Thu 07 Nov 2024 00:33:15 +0000
ROA not before:           Thu 07 Nov 2024 00:33:15 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     136533
IP address blocks:        103.175.150.0/23 maxlen: 23
                          2400:1ae0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl
                          rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 904 (0x388)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4
        Validity
            Not Before: Nov  7 00:33:15 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=672c0acb-23d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:f1:d1:e0:3c:8d:1e:ff:d2:06:65:ee:0e:
                    7d:74:5f:3a:64:a2:dc:e8:5b:a2:ac:fb:61:14:f0:
                    7f:ce:8b:1d:68:51:5e:e8:ae:96:08:ad:52:72:20:
                    1c:23:f5:4c:57:87:44:c4:b7:39:f2:fb:51:93:f7:
                    c9:bd:8b:b7:63:6b:8f:87:34:ae:14:09:13:5d:fa:
                    98:91:54:ca:48:09:34:41:6a:00:08:ff:48:bb:fc:
                    f8:82:20:e4:c4:b8:bb:6c:34:2e:3d:97:ac:dd:81:
                    e6:03:74:37:08:9f:48:11:61:7b:95:61:20:5e:ed:
                    51:96:d4:ff:ae:53:00:30:b5:7f:de:b6:c9:f2:e1:
                    3c:b5:6f:e9:df:f9:dd:d7:5f:f2:bc:03:52:2d:51:
                    cf:48:ea:dd:f0:7e:04:5e:ac:ea:3b:c9:b2:a7:c9:
                    50:d5:36:9f:77:00:8f:05:57:99:60:c8:5b:be:f9:
                    91:05:e8:0b:ff:94:37:eb:d2:ea:a0:b8:9a:e0:93:
                    4d:c0:65:d3:ab:ae:45:87:0d:e5:fe:70:85:93:d5:
                    a1:8c:db:e3:d7:0a:13:8e:e1:e0:5d:43:19:81:a8:
                    e9:39:0f:f4:a4:d7:95:f8:cd:ea:aa:01:3a:26:a1:
                    63:a3:5b:a8:c1:c3:2e:e6:19:9b:05:f4:6b:fe:1f:
                    64:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:28:F2:A9:0F:37:D2:73:FC:E5:5C:06:74:41:8D:A4:2A:D6:3A:89
            X509v3 Authority Key Identifier:
                keyid:97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/F865B8887CEB11ECA79BD83DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.150.0/23
                IPv6:
                  2400:1ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:dc:4e:38:3b:39:66:02:8d:56:3d:99:fc:f8:e4:5f:89:30:
         88:a3:cc:c8:82:19:50:b4:c1:73:3e:3f:c9:51:5d:95:b7:45:
         fe:53:20:6e:8f:08:93:57:a0:4f:c8:e9:1c:db:53:96:66:4a:
         04:44:54:f4:2f:34:02:c1:b9:c9:29:89:57:a8:ef:d3:c0:09:
         3c:71:08:d3:31:83:74:2a:65:47:f9:bf:88:01:f6:96:9e:b2:
         0b:a1:f2:07:4f:4b:4b:5e:de:79:84:3f:9a:6c:d8:98:25:ba:
         8b:a1:00:3d:32:54:84:fb:eb:e8:db:98:79:74:80:51:de:c3:
         ad:9a:04:a3:07:ea:e5:c5:4c:89:0d:6a:1c:c0:64:4d:82:30:
         3a:c1:8e:52:ea:fc:e4:53:73:c7:9b:33:98:2f:a0:48:47:fc:
         a3:b0:f9:9c:2f:9a:7f:0b:dc:ac:b0:79:2b:fa:1d:6d:01:41:
         30:f4:a8:74:d9:dd:02:b4:84:34:0e:f1:1f:f1:70:11:0f:db:
         ab:19:b2:3c:ff:45:b4:b7:fb:74:86:36:b1:0b:95:dd:85:1c:
         f3:0f:41:d2:8e:4f:0e:fb:ad:0f:7d:81:5c:1f:23:0f:44:cc:
         72:87:a2:35:cd:75:45:31:8a:5d:6b:a4:3a:c1:3a:48:d4:71:
         e3:c2:5f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:28 2024 by rpki-client on console-ams.rpki-client.org