Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/35D9F1BE8A7C11E79774186BC4F9AE02.roa
File:                     35D9F1BE8A7C11E79774186BC4F9AE02.roa (raw, json)
Hash identifier:          JsSR5Xyiam1gqDW8LZ3p6vMD1Unh1jWG06vXX1Pt4OE=
Subject key identifier:   B1:87:44:38:34:CD:CE:9C:C2:C3:E0:65:F2:ED:15:02:36:13:72:26
Certificate issuer:       /CN=A91DB0C1/serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC
Certificate serial:       186D
Authority key identifier: C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/35D9F1BE8A7C11E79774186BC4F9AE02.roa
Signing time:             Wed 02 Oct 2024 16:54:20 +0000
ROA not before:           Wed 02 Oct 2024 16:54:20 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     136937
IP address blocks:        103.99.128.0/22 maxlen: 24
                          2401:aec0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.crl
                          rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6253 (0x186d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB0C1/serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC
        Validity
            Not Before: Oct  2 16:54:20 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66fd7abc-b301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c9:50:6b:94:70:84:eb:4c:39:b3:1b:34:f2:
                    30:75:5f:8e:9b:e6:88:ba:95:f7:df:b1:71:2f:64:
                    b4:3f:e1:15:a9:9b:ed:83:51:b4:d1:c5:a4:16:de:
                    7e:57:91:67:be:f9:3b:b7:64:09:d8:ac:56:05:ad:
                    74:40:d0:c9:5c:d3:67:b9:11:2d:d9:5f:70:e9:22:
                    79:34:47:fd:c9:e2:dd:d9:51:6d:e7:b9:6d:d4:67:
                    70:87:80:76:fa:75:56:74:16:0e:6d:0e:c0:74:81:
                    1f:3d:b4:e4:7a:2d:68:3a:16:af:12:0b:e6:c9:a4:
                    58:d2:ed:39:8c:7a:55:19:24:b3:85:ef:54:e6:25:
                    68:5a:96:48:6d:36:8f:af:ad:ab:52:64:01:a7:b9:
                    56:e8:88:cf:d9:47:e4:ae:3f:26:e7:d0:7a:06:70:
                    fe:ad:73:0a:7f:6f:3f:8c:bf:5a:f7:c0:7e:11:dc:
                    79:4f:7a:74:a6:33:10:b9:75:60:2e:22:d6:9e:1b:
                    0e:f0:4a:5a:3c:3d:b4:6c:ea:af:b8:cc:c8:08:b0:
                    2c:ae:3d:df:28:f0:20:ed:58:e0:5f:8a:68:12:49:
                    d2:fe:35:b2:48:29:99:16:4f:13:d7:fe:00:58:1f:
                    d9:7e:b7:39:6b:66:9c:2c:a2:36:87:21:8e:22:26:
                    a7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:87:44:38:34:CD:CE:9C:C2:C3:E0:65:F2:ED:15:02:36:13:72:26
            X509v3 Authority Key Identifier:
                keyid:C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/35D9F1BE8A7C11E79774186BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.128.0/22
                IPv6:
                  2401:aec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:01:50:62:98:15:f7:5e:4c:a2:de:15:90:db:3b:b5:b7:11:
         cc:eb:6f:1e:c9:e4:bd:de:79:4b:2c:b1:fe:5e:ce:40:e4:30:
         f7:45:f8:fa:a2:31:7b:7e:8c:73:57:84:27:bf:5a:d4:43:fa:
         e7:ca:db:e0:95:49:6a:75:0e:52:cb:31:4b:c7:c5:33:bc:3d:
         c0:ad:5e:b0:84:4d:b1:09:c1:1f:0d:9e:b1:c4:e9:db:88:a9:
         4a:b0:3b:e7:4b:6f:32:d8:35:47:fc:1f:e8:99:19:db:f1:0c:
         10:6d:e6:43:45:eb:7c:e9:e6:1b:78:0d:07:e5:cd:6a:8e:8d:
         62:10:20:b5:13:47:be:3b:3c:7d:51:e7:1e:44:11:fd:43:97:
         c4:13:0b:5c:03:4b:29:02:7d:51:6a:fd:5a:d0:d8:6d:cf:95:
         90:46:62:9c:b0:c4:f1:43:56:40:05:dc:a9:cc:5c:e0:a7:df:
         7f:7c:3e:10:60:05:ec:34:cc:74:05:0d:18:bb:fe:32:70:92:
         f9:c8:17:f9:06:3c:8d:58:01:55:4e:5d:e9:89:e2:c6:83:2e:
         fe:84:9d:12:1d:f9:9f:e6:69:06:9e:42:c0:64:f6:a8:e1:51:
         7e:18:17:6c:ae:41:96:68:ec:02:00:1d:bf:b4:90:b6:b6:ca:
         11:7c:ad:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:18 2024 by rpki-client on console-ams.rpki-client.org