Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/81E66AB486DD11EAA5DCD466C4F9AE02.roa
File:                     81E66AB486DD11EAA5DCD466C4F9AE02.roa (raw, json)
Hash identifier:          cYf6mtgN0UIoBT+azcEJHdfuuj+dkzfTVcYBwa1vqp8=
Subject key identifier:   E5:0C:2D:44:9E:5F:41:24:7E:EC:CB:66:56:FE:B4:AA:8F:46:00:56
Certificate issuer:       /CN=A91DA252/serialNumber=28F18EC749EA91B5A3299749F2ABE2788A10C691
Certificate serial:       08C2
Authority key identifier: 28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/81E66AB486DD11EAA5DCD466C4F9AE02.roa
Signing time:             Thu 29 Feb 2024 21:39:31 +0000
ROA not before:           Thu 29 Feb 2024 21:39:31 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     136238
IP address blocks:        36.255.104.0/24 maxlen: 24
                          36.255.105.0/24 maxlen: 24
                          103.84.134.0/24 maxlen: 24
                          103.110.109.0/24 maxlen: 24
                          103.110.110.0/24 maxlen: 24
                          103.110.111.0/24 maxlen: 24
                          2001:df0:1f00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl
                          rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2242 (0x8c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA252/serialNumber=28F18EC749EA91B5A3299749F2ABE2788A10C691
        Validity
            Not Before: Feb 29 21:39:31 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65e0f993-8f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:90:06:02:3b:d5:f8:cb:fc:3c:bd:38:b5:d7:
                    f3:b5:28:df:1a:e2:2a:49:60:07:64:f5:8e:ff:7c:
                    de:8f:21:51:53:ab:6e:4b:a7:b2:f2:74:ce:03:34:
                    c8:b9:2d:e7:5a:7c:19:0f:c0:0a:04:56:88:6f:b3:
                    71:8f:11:0f:a3:91:98:13:03:bf:b5:1d:13:fc:fa:
                    d9:92:61:b0:73:8a:9b:55:c2:2f:c3:f8:bc:9e:0f:
                    3f:0a:49:83:1f:ea:aa:a1:e3:40:f4:fe:5f:a3:8d:
                    84:1c:5e:3b:8b:b0:34:77:5d:5d:a6:61:50:55:c4:
                    94:f8:74:83:f1:df:a9:eb:2a:b9:b6:d9:53:9e:61:
                    02:4a:69:f6:2e:b7:d7:26:2c:ae:09:41:d3:62:1d:
                    e6:93:78:50:35:9b:4b:27:17:2f:58:e9:4a:b6:9f:
                    c8:05:3b:22:d9:50:a2:02:1d:56:ee:61:87:c3:e1:
                    b1:7a:f7:e6:41:15:15:25:c2:53:86:21:16:b0:0f:
                    31:34:f5:7e:5f:2f:50:f8:75:ea:c7:1d:84:43:a7:
                    bf:2a:2d:53:21:5c:91:4d:04:c6:87:1a:b5:fe:ab:
                    29:e6:96:bf:a1:33:a1:cb:de:ce:19:ae:40:2a:ab:
                    a2:3c:d4:b8:1e:b1:37:40:d2:a1:ea:83:da:be:7a:
                    10:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0C:2D:44:9E:5F:41:24:7E:EC:CB:66:56:FE:B4:AA:8F:46:00:56
            X509v3 Authority Key Identifier:
                keyid:28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/81E66AB486DD11EAA5DCD466C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.255.104.0/23
                  103.84.134.0/24
                  103.110.109.0-103.110.111.255
                IPv6:
                  2001:df0:1f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:03:b8:1a:ea:68:ea:3c:6a:03:0f:7e:be:4d:72:f5:b7:9c:
         4e:c3:72:43:b9:cb:a3:10:da:05:ae:dd:26:4c:f1:e7:95:54:
         b2:b2:6a:2f:01:b5:5b:81:7a:c6:ac:b6:6e:57:64:5c:fd:ff:
         8b:72:29:a2:bd:04:f4:3d:41:c2:c5:de:d2:42:37:fe:7b:61:
         e7:87:2f:34:82:3b:73:4a:1d:60:0b:9e:46:38:c0:9b:b8:a6:
         11:b6:f1:76:ba:7b:8f:54:1e:30:ca:f7:f9:d2:f4:68:26:e5:
         2c:df:b8:db:ec:c4:db:65:32:ea:42:f8:a4:d7:36:2e:01:08:
         bc:8f:08:ca:18:0f:bd:5a:84:9d:05:29:d3:cb:ce:79:4c:e5:
         e2:13:14:fd:19:4c:fe:59:97:16:62:ec:b4:1d:cb:f8:45:ec:
         61:80:b7:c5:a5:22:9b:ae:6f:00:fe:d4:66:f3:ad:ee:60:d8:
         51:58:8d:7c:3b:a5:0e:fa:3b:ce:b1:9c:c4:99:dc:88:72:65:
         cd:d5:98:b1:fa:42:9e:ee:60:43:57:27:d7:70:1c:97:1c:dc:
         f9:79:33:71:39:dc:85:b5:54:1e:46:ef:e8:5d:6a:bc:49:85:
         37:3c:e4:22:16:d6:63:26:ce:66:c1:5b:e4:ed:f1:46:8a:f8:
         de:b8:51:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:41 2024 by rpki-client on console-ams.rpki-client.org