Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/EBFFB63C31A011EE90E4FA4CC4F9AE02.roa
File:                     EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (raw, json)
Hash identifier:          Nv01nCYkfEi4BegQpMB0JcVirBmYCnazBgt/JXP/hpo=
Subject key identifier:   93:E8:B8:C8:1E:E1:16:10:25:4C:1C:96:53:CA:1F:25:09:23:71:3B
Certificate issuer:       /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D
Certificate serial:       B8
Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/EBFFB63C31A011EE90E4FA4CC4F9AE02.roa
Signing time:             Wed 03 Jan 2024 05:46:37 +0000
ROA not before:           Wed 03 Jan 2024 05:46:37 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     63962
IP address blocks:        103.41.112.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl
                          rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 06:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D
        Validity
            Not Before: Jan  3 05:46:37 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6594f4bd-7ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f1:a3:ac:48:2b:a1:47:35:cf:ba:19:c1:3a:
                    ac:9e:1a:6e:4d:08:a8:b6:e0:af:04:20:64:1d:15:
                    60:96:09:88:c7:f2:c4:8a:5a:2f:83:61:92:13:84:
                    48:30:bc:f5:dd:be:4b:cf:37:f4:76:62:6b:cd:2d:
                    0c:47:a0:a6:1a:2d:16:1f:9f:90:2c:e6:cf:d3:50:
                    7a:5c:00:5c:e9:81:c9:12:d2:1b:5a:06:00:1b:52:
                    61:24:b7:21:3d:65:ba:e4:27:1a:44:de:5d:85:7d:
                    79:0f:7e:b3:ae:c0:86:02:f7:fd:8e:c8:84:9d:65:
                    a1:44:14:87:21:65:ee:07:46:90:ce:31:49:4c:73:
                    cb:9c:ce:61:9d:41:6a:ed:3f:5f:34:7e:f9:73:ef:
                    5b:bb:48:2d:b6:68:c2:b3:c6:86:80:56:55:b0:1f:
                    f7:1d:69:5a:e6:5f:2e:41:58:65:21:e6:7f:59:4f:
                    60:bf:a0:08:a1:f5:91:29:07:5e:b7:d9:64:67:b4:
                    80:e7:49:a9:37:18:a4:ce:27:fd:9f:51:8f:2f:9d:
                    de:83:0f:60:47:83:cc:83:55:3f:9a:c1:5a:95:72:
                    03:39:e5:e8:ea:28:cb:e0:87:17:a3:e2:a9:a0:63:
                    ec:33:e2:ee:a3:90:3c:ae:2f:b7:31:3d:aa:2f:b2:
                    bf:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E8:B8:C8:1E:E1:16:10:25:4C:1C:96:53:CA:1F:25:09:23:71:3B
            X509v3 Authority Key Identifier:
                keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/EBFFB63C31A011EE90E4FA4CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:2e:2a:56:a5:61:14:5c:c4:d4:5e:b5:6a:cb:8a:cd:15:24:
         4f:6b:d2:2f:12:f2:f8:81:e9:cd:ba:1b:f0:fc:1a:19:a2:41:
         5a:32:2e:e0:f3:3d:8e:2e:8b:ca:13:41:08:de:83:74:80:89:
         aa:3f:e6:04:f4:d8:62:16:15:c6:ca:28:50:08:7b:44:f9:2e:
         ae:d6:68:32:aa:16:8b:50:4d:89:23:de:2c:a8:15:46:ae:ae:
         04:34:64:c0:6b:ab:92:50:b3:ee:dc:b9:97:6c:14:2f:5c:c4:
         9a:b4:37:05:65:cd:d2:2d:88:1a:39:4b:c5:f5:63:81:54:c4:
         bd:9c:86:a5:b3:fd:5e:1d:d2:5c:72:72:3b:67:03:25:58:87:
         de:13:51:13:51:70:0a:8b:5e:d8:67:7f:bd:84:67:3d:6f:0a:
         5d:c6:21:26:e8:09:38:7c:b5:ca:22:35:03:f2:44:42:0c:c9:
         e4:f0:2b:2a:08:3f:92:59:b7:1b:b3:f7:19:c0:a0:50:bb:c8:
         be:f7:47:db:ce:86:f0:1e:57:cc:f7:b7:22:ce:de:e9:1e:15:
         ad:55:b4:14:fa:bd:90:f6:4a:15:b0:d0:a9:ff:ef:55:93:06:
         72:1f:0a:7b:0a:bb:15:59:10:0d:2f:1e:4c:d4:ad:25:e2:ad:
         cf:52:1e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 09:41:11 2024 by rpki-client on console-ams.rpki-client.org