Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/F396DA1468A211ED9525A86CC4F9AE02.roa
File:                     F396DA1468A211ED9525A86CC4F9AE02.roa (raw, json)
Hash identifier:          mfCo7xBHkX9UIyrOsrP0XEhPqQke0cTzgybKkz4msYM=
Subject key identifier:   65:33:C7:EE:6B:FC:E2:80:F0:76:BF:B0:BF:F9:BC:D1:32:61:97:A1
Certificate issuer:       /CN=A91DE1A3/serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900
Certificate serial:       016B
Authority key identifier: FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/F396DA1468A211ED9525A86CC4F9AE02.roa
Signing time:             Wed 23 Oct 2024 03:06:43 +0000
ROA not before:           Wed 23 Oct 2024 03:06:43 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     150330
IP address blocks:        103.6.250.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl
                          rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE1A3/serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900
        Validity
            Not Before: Oct 23 03:06:43 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67186842-66c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0e:47:81:5c:bf:8d:2b:18:b6:c6:6b:8a:0a:
                    06:b7:0a:42:86:c4:59:51:65:66:26:df:f2:29:76:
                    9d:dc:8b:ee:9a:34:49:dd:12:5d:ab:8b:1e:7c:76:
                    58:f7:bf:4b:41:46:77:29:1f:61:f1:af:5c:13:a1:
                    83:94:91:fc:fa:5d:25:89:2b:2d:4c:c0:9f:63:95:
                    1a:25:1c:e4:f5:c9:d2:cf:82:e2:7d:5e:e1:cb:6f:
                    77:4f:d3:0b:65:67:a0:20:47:72:8f:aa:9e:25:47:
                    ad:85:49:ec:1f:da:28:0d:4a:eb:e1:33:9c:96:3c:
                    42:75:b4:3d:73:16:90:3d:2f:2c:23:0c:81:92:8b:
                    01:d2:5b:39:df:69:bf:10:16:b6:87:0e:60:8a:e7:
                    db:51:53:1c:47:6f:7e:1f:2c:44:e5:09:77:6e:3d:
                    31:6c:aa:c3:87:ad:90:39:8d:e5:5b:5d:d4:c0:e5:
                    0b:cd:b5:79:1e:8a:1c:2c:84:ca:e8:df:cb:88:b2:
                    15:41:dc:17:c7:ac:90:d5:b5:63:ba:21:b0:22:70:
                    b3:f3:35:cd:7e:27:ce:1b:8e:48:2d:83:7b:bf:01:
                    6f:90:d8:ec:af:93:a7:03:93:22:61:e6:8a:cf:e3:
                    b5:42:d3:3a:fb:5a:d2:81:7c:00:24:56:7d:8e:07:
                    be:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:33:C7:EE:6B:FC:E2:80:F0:76:BF:B0:BF:F9:BC:D1:32:61:97:A1
            X509v3 Authority Key Identifier:
                keyid:FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/F396DA1468A211ED9525A86CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:ed:8f:72:b2:d7:8f:de:b0:b6:8b:e2:bf:26:09:34:81:70:
         5e:2b:5a:e6:0a:8c:55:81:47:65:21:db:7a:e1:3e:9c:ec:c5:
         53:ba:23:e5:a6:e3:6c:ea:78:aa:da:0a:ab:77:6a:68:c7:ec:
         0e:cc:a8:2b:66:f2:af:22:a5:17:74:7f:fa:8d:b6:67:70:d5:
         fe:30:d4:e2:b1:68:4f:c9:24:a9:3f:2f:2e:9b:6f:dc:d0:51:
         92:26:19:51:6d:2f:55:94:89:29:02:1e:ae:3b:b4:d0:1a:59:
         3c:cd:a1:61:7f:77:bd:24:42:f2:7c:98:4e:ee:f9:fe:8d:d0:
         0d:4f:d5:72:a0:33:47:b0:83:e3:27:23:61:ec:b8:f6:4d:21:
         15:77:8b:37:1c:b1:e1:84:dd:ef:56:53:5f:08:48:7d:e3:6c:
         a7:41:fd:4a:15:1c:59:61:db:49:90:24:51:1f:7f:93:b6:82:
         62:88:9a:dd:8a:ff:8e:d0:c0:7b:db:76:b4:2b:b6:3e:c3:8a:
         81:b9:d2:9c:42:f6:cb:0e:81:3b:57:5a:dd:f5:d6:b0:e5:4a:
         b8:51:6b:ef:d3:75:00:5d:a3:bc:b0:cd:0c:a3:fc:9c:1d:3e:
         37:5c:42:13:b3:99:46:70:ed:24:87:64:52:0e:5e:5a:9a:cc:
         ff:95:42:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:59 2024 by rpki-client on console-fra.rpki-client.org