Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/0EB22CD66BBE11EDBF717818C4F9AE02.roa
File:                     0EB22CD66BBE11EDBF717818C4F9AE02.roa (raw, json)
Hash identifier:          zCpY8nx1qxvRAvrVO7S1BXfjXPbBU6CC+eJhv6+dkZQ=
Subject key identifier:   09:E6:42:6D:89:99:A6:1F:7C:CF:A6:3D:AD:5F:08:FC:E4:2E:36:5A
Certificate issuer:       /CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Certificate serial:       1737
Authority key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/0EB22CD66BBE11EDBF717818C4F9AE02.roa
Signing time:             Tue 30 Jul 2024 17:14:16 +0000
ROA not before:           Tue 30 Jul 2024 17:14:16 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     132018
IP address blocks:        103.21.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl
                          rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5943 (0x1737)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
        Validity
            Not Before: Jul 30 17:14:16 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a91f68-7b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:44:d5:68:8d:03:07:cd:c1:f1:1b:94:3e:36:
                    f2:4f:58:5e:e0:dc:42:df:a1:8e:da:98:50:4b:01:
                    22:37:a7:4e:ad:c9:15:bf:4a:c2:ac:c3:6c:de:2d:
                    5a:fd:fa:2e:cc:1e:93:e8:37:74:42:38:42:87:de:
                    1c:58:09:03:d0:fa:84:22:03:7d:a2:23:5a:15:b5:
                    d8:47:44:30:0b:57:82:20:21:62:02:31:09:cb:bc:
                    63:2a:11:72:ee:3d:09:be:69:3a:b6:77:39:6b:21:
                    d2:2b:c7:63:6c:28:a2:a0:62:b4:44:99:df:e7:48:
                    4b:ce:e3:ca:1d:56:30:f2:60:88:58:87:10:9d:20:
                    92:66:c5:85:65:f5:50:77:56:23:15:85:e7:12:03:
                    ca:4f:6a:39:64:5e:24:6b:7e:f6:08:be:0d:39:18:
                    88:24:84:87:48:97:61:e1:b6:d6:07:50:35:e8:4d:
                    ae:18:f7:69:7c:7c:bf:c2:e6:61:3d:68:9a:93:cd:
                    ed:56:43:f4:de:9b:19:bc:8b:29:c4:64:5f:bc:0a:
                    ec:d4:5e:d8:bf:71:ab:4a:e6:4b:3a:51:da:cb:f4:
                    f3:84:a8:aa:72:6a:e4:c2:21:d3:e8:9c:93:22:4f:
                    98:d1:87:48:b5:43:69:2c:86:52:a3:4e:2e:c5:39:
                    1f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E6:42:6D:89:99:A6:1F:7C:CF:A6:3D:AD:5F:08:FC:E4:2E:36:5A
            X509v3 Authority Key Identifier:
                keyid:BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/0EB22CD66BBE11EDBF717818C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:10:f9:25:13:04:10:71:89:60:9b:c2:86:76:20:9a:3a:9d:
         b3:e9:1e:a9:d5:71:ef:c3:31:c3:ab:05:8e:27:7b:8f:43:5f:
         43:94:c5:00:46:45:20:ba:4e:9b:e0:63:af:72:87:87:bb:63:
         ac:95:12:56:dc:13:2c:33:3d:2a:c6:be:b8:0a:75:e4:bc:ef:
         09:ba:cc:d8:7e:86:83:71:c4:1e:1c:c9:b4:78:b7:90:aa:26:
         e7:98:a9:d9:6b:9d:c4:56:ff:cb:32:e4:69:f3:13:ec:5e:20:
         6a:3a:4a:91:8e:fe:73:23:8b:4b:fa:fa:57:14:6b:c1:f1:f1:
         86:d9:48:36:84:8c:fb:43:b0:c2:c9:df:92:cc:a8:68:cf:d2:
         ee:e5:0c:25:b4:8c:74:c3:e1:ea:c8:92:12:ea:5c:b1:e3:33:
         e5:af:7e:9f:73:a2:18:5e:18:ea:09:9a:57:28:e4:69:5a:50:
         13:83:f7:44:a8:84:5b:ae:a0:6b:f2:58:96:b0:6f:dd:31:51:
         da:11:11:0b:35:63:ce:a0:e2:ca:64:8e:85:35:bc:f3:f1:40:
         03:17:3e:07:5d:01:62:26:5e:dd:c1:40:c8:98:d5:59:19:ff:
         aa:ee:7f:87:fa:1f:6e:2c:72:66:4f:4e:69:ce:0f:47:83:90:
         c3:7a:41:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:19 2024 by rpki-client on console-ams.rpki-client.org