Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/A6C9934CA74111E88B3EAB2BC4F9AE02.roa
File:                     A6C9934CA74111E88B3EAB2BC4F9AE02.roa (raw, json)
Hash identifier:          YR3r/r5s57l7vc1QAVpusxxc4M0J/72ZS6UJiTG3pTc=
Subject key identifier:   13:E7:59:DE:6F:F4:8F:95:6B:13:AE:43:C5:F4:CC:DA:C0:EE:8F:A7
Certificate issuer:       /CN=A91DF8DB/serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4
Certificate serial:       12DA
Authority key identifier: 97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/A6C9934CA74111E88B3EAB2BC4F9AE02.roa
Signing time:             Wed 26 Jun 2024 17:47:21 +0000
ROA not before:           Wed 26 Jun 2024 17:47:21 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     136397
IP address blocks:        103.98.238.0/24 maxlen: 24
                          2001:df2:e700::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4826 (0x12da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF8DB/serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4
        Validity
            Not Before: Jun 26 17:47:21 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=667c5429-c40f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1f:63:83:79:6f:62:92:bc:f4:ac:2c:ef:ac:
                    08:f5:2d:05:e5:ba:1e:08:e1:87:97:17:3b:69:83:
                    ff:86:78:d3:aa:3c:2d:68:e8:22:6c:b4:1e:23:97:
                    ec:d7:b9:35:54:26:7b:48:cb:f8:46:2c:f5:df:e7:
                    7d:5b:2f:1e:7a:c2:09:26:e7:88:cb:c9:a5:4f:a3:
                    e3:ad:ce:33:58:c8:c6:6a:e1:ec:0e:a2:71:e9:32:
                    c7:fe:9b:24:25:bf:85:b5:f9:62:15:77:6e:d6:39:
                    da:0e:41:4a:87:1f:21:eb:8b:fd:af:62:44:3d:5e:
                    b8:2d:95:67:07:b5:e0:f2:06:f9:50:1f:e8:60:58:
                    4b:13:cc:55:75:8d:92:ae:bb:e1:6c:2f:2b:08:57:
                    5b:8f:50:e7:c2:a4:95:77:12:3c:e2:55:35:c6:33:
                    31:06:f9:6a:c0:b5:3c:61:85:15:9f:97:f5:08:dd:
                    ae:53:39:03:94:f4:d3:0b:70:e3:59:82:28:9c:91:
                    a6:e0:b9:69:16:00:e6:ab:fe:61:65:31:2c:64:1b:
                    c3:ba:f9:f8:4b:12:ef:5a:57:d5:9b:36:8d:e2:6a:
                    e3:fa:04:c4:ca:fa:95:c1:ff:c3:7a:4b:6e:b6:d1:
                    62:f5:c6:56:36:89:69:02:c4:01:79:34:a7:88:b3:
                    2e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E7:59:DE:6F:F4:8F:95:6B:13:AE:43:C5:F4:CC:DA:C0:EE:8F:A7
            X509v3 Authority Key Identifier:
                keyid:97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/A6C9934CA74111E88B3EAB2BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.238.0/24
                IPv6:
                  2001:df2:e700::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:dd:8f:35:1d:ca:cb:48:2c:f6:30:14:70:fa:3b:62:eb:18:
         36:82:8b:9c:10:47:af:ea:89:51:96:8e:64:f5:77:ca:05:1f:
         0c:5a:ce:ec:b8:5a:37:95:bf:09:65:16:f9:20:26:0c:51:a6:
         46:77:8f:c2:59:3f:33:d8:e6:3c:9b:50:a0:f3:30:aa:55:21:
         1d:ca:39:86:44:f2:f9:39:b0:54:1b:54:05:a2:3d:52:9c:ed:
         f8:c1:ba:c9:16:85:6b:e1:a2:3a:69:71:27:f7:0b:7c:84:ac:
         15:c7:14:ae:36:3a:00:02:90:62:0b:17:0f:47:d9:a4:fb:08:
         77:7e:83:2e:ae:1c:ca:4c:71:c1:e3:ed:a7:be:1c:bc:87:a6:
         52:89:bf:60:25:b4:7d:62:88:15:38:5e:7e:ce:08:bf:5f:3c:
         38:8f:90:49:81:94:c9:f9:71:11:b3:4d:5b:27:91:94:39:7b:
         25:57:62:62:ef:fd:e4:15:72:90:d1:80:c3:ea:2a:f1:af:d7:
         de:b2:2f:d3:11:f7:59:49:29:4d:df:cf:7b:ae:c5:fb:84:9b:
         78:87:f9:3d:ed:9a:c2:85:bd:33:46:5d:f5:09:8c:c1:20:05:
         6d:e8:a4:c8:14:ee:ab:0f:7c:4d:ea:4b:b3:28:87:b5:c7:fa:
         d2:1b:24:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:19 2024 by rpki-client on console-ams.rpki-client.org