Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/6EB41DC6EEC411EEA4BB703CC4F9AE02.roa
File:                     6EB41DC6EEC411EEA4BB703CC4F9AE02.roa (raw, json)
Hash identifier:          c5yq9NkafYG+YISs5ju4fCtlzg9QTimv6gOCIq37klQ=
Subject key identifier:   92:D2:EF:22:C1:56:A1:41:7D:10:09:A0:BE:5F:EC:28:44:C8:3A:03
Certificate issuer:       /CN=A91ED073/serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Certificate serial:       0107
Authority key identifier: 08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/6EB41DC6EEC411EEA4BB703CC4F9AE02.roa
Signing time:             Sat 30 Mar 2024 18:36:34 +0000
ROA not before:           Sat 30 Mar 2024 18:36:34 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     150417
IP address blocks:        103.37.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl
                          rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED073/serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
        Validity
            Not Before: Mar 30 18:36:34 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=66085bb1-4d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6c:b8:3d:9c:64:2b:7b:85:7b:bb:16:7c:38:
                    04:08:31:83:ca:21:06:02:fb:43:35:80:96:5c:72:
                    4d:18:27:d7:cf:12:da:2e:29:94:a1:a1:aa:70:fb:
                    ad:9b:5f:29:cc:ab:e4:50:7a:56:31:04:75:01:c0:
                    8b:df:b1:c8:96:fa:71:2d:26:e7:0f:c5:96:a6:bc:
                    b6:2b:30:ac:c1:2a:45:63:f5:4c:79:c0:69:db:5d:
                    73:bb:29:e5:64:99:98:66:eb:5d:02:87:7b:97:cb:
                    9e:30:82:9c:f9:12:9f:60:da:70:df:6e:00:e1:a2:
                    b2:e6:a0:14:0f:ec:eb:07:ca:d1:ea:a4:48:98:54:
                    7c:28:c6:33:17:57:98:90:bc:cd:9a:74:19:aa:02:
                    61:27:20:92:c9:c3:59:98:45:14:84:b7:ee:08:41:
                    b9:46:a7:0a:ff:34:e5:f8:84:c3:24:d6:a9:b1:a7:
                    ae:32:9f:7f:fd:41:48:81:f5:d9:37:13:09:66:cd:
                    e8:b0:d3:38:e7:fb:21:cd:ed:78:6b:6c:ad:44:ba:
                    d0:8d:4b:7b:27:e8:7b:6c:be:52:96:83:f4:da:b9:
                    31:07:97:68:99:20:81:73:78:37:99:cd:6d:eb:4a:
                    01:fd:53:64:93:d0:e4:eb:d7:1b:e2:a9:e3:cf:83:
                    89:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D2:EF:22:C1:56:A1:41:7D:10:09:A0:BE:5F:EC:28:44:C8:3A:03
            X509v3 Authority Key Identifier:
                keyid:08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/6EB41DC6EEC411EEA4BB703CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:3d:01:87:bb:1d:5a:bb:3a:7d:e9:cf:ec:b8:60:44:00:c0:
         e5:a2:91:7d:ff:0f:a3:b3:49:d6:a7:ec:49:b5:75:29:54:20:
         f6:61:57:09:f1:03:63:7c:f5:cc:d1:bb:4a:77:bf:a3:4c:12:
         5f:0f:07:57:a3:9f:03:60:cd:68:b5:52:2f:c7:cb:23:24:36:
         b4:bd:8e:82:cf:d8:3a:f9:30:83:80:2c:46:41:6d:81:a2:1d:
         b8:81:49:5f:44:4a:24:10:fb:30:0c:85:c3:17:a1:82:cd:73:
         0b:db:d7:92:09:f0:62:f1:f9:80:9d:4e:31:63:e1:86:bf:b7:
         9f:eb:db:02:57:00:4b:98:09:f7:2c:40:84:49:db:b3:2e:51:
         e3:5c:05:46:5d:08:ca:40:86:62:d5:db:c2:31:3e:0b:20:16:
         14:84:cc:38:fe:00:64:d7:56:ce:90:ca:52:b4:ed:0e:94:8d:
         9b:3d:47:fd:f1:30:f8:d6:e4:a4:1e:3a:53:5a:e7:5d:e0:2f:
         a6:7c:74:db:7e:fb:a6:dc:6a:b1:cd:06:74:db:59:23:5e:d8:
         76:b0:7c:38:7b:42:5d:c0:5a:71:fb:9d:3d:98:d7:c1:e5:0c:
         b3:af:66:4b:e0:ad:af:fc:5d:1b:4e:a3:10:f2:32:4b:83:8c:
         9d:19:e4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:58 2024 by rpki-client on console-ams.rpki-client.org