Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/01003962C9DC11ED8D68375EC4F9AE02.roa
File:                     01003962C9DC11ED8D68375EC4F9AE02.roa (raw, json)
Hash identifier:          KSfw6IBecAIXXXtQTk/28sHhzeNjJPQPF3dORiab4B8=
Subject key identifier:   6B:5B:7E:49:1D:21:FA:58:93:C3:4A:69:68:32:68:16:7E:13:CC:FA
Certificate issuer:       /CN=A91F10DC/serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2
Certificate serial:       0139
Authority key identifier: 10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/01003962C9DC11ED8D68375EC4F9AE02.roa
Signing time:             Mon 11 Nov 2024 02:55:59 +0000
ROA not before:           Mon 11 Nov 2024 02:55:59 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     150343
IP address blocks:        103.68.105.0/24 maxlen: 24
                          2001:df1:5ac0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl
                          rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F10DC/serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2
        Validity
            Not Before: Nov 11 02:55:59 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6731723f-831d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:35:c0:70:69:27:3d:a3:4d:f0:2c:e9:17:ea:
                    b7:cd:c5:1d:25:42:a9:15:8f:1f:90:2e:76:03:d9:
                    df:95:b1:18:80:7a:fb:4f:b2:1b:d1:fa:22:3f:9a:
                    97:03:fb:b3:68:97:05:7b:a5:7d:dd:b3:fa:9b:41:
                    d5:58:48:8e:52:f0:93:f3:b7:13:75:fe:30:78:d8:
                    69:2d:ab:ff:7e:3b:6f:03:c3:41:a9:43:54:8b:96:
                    8a:eb:47:37:59:49:7b:a0:e9:94:c1:4f:f4:63:e0:
                    35:5b:57:4c:c1:b6:70:c5:f4:8f:9c:c8:31:57:54:
                    2b:8f:5c:df:a5:14:ef:3d:ea:88:9d:4c:9c:43:da:
                    81:17:3b:ab:f5:45:ae:4a:17:17:49:75:0f:0f:fd:
                    ca:b9:35:29:e6:58:fe:cb:3f:ff:a5:95:31:ec:de:
                    a2:58:86:bc:ae:31:d6:3e:2a:f3:bb:7a:ba:3a:68:
                    75:2d:d1:94:1d:76:8f:a8:66:85:0b:9f:fd:da:f8:
                    1b:ea:3b:fc:2a:cf:39:93:13:be:5b:d6:9f:07:cf:
                    e7:e7:9c:ba:fd:71:62:ab:ee:18:8a:2b:f1:fa:ea:
                    fe:0d:3f:96:38:af:b6:09:92:ee:07:12:27:63:f6:
                    1c:f1:3a:a6:0d:68:a8:e0:b5:0e:8e:02:62:fc:51:
                    da:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5B:7E:49:1D:21:FA:58:93:C3:4A:69:68:32:68:16:7E:13:CC:FA
            X509v3 Authority Key Identifier:
                keyid:10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/01003962C9DC11ED8D68375EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.105.0/24
                IPv6:
                  2001:df1:5ac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:a9:fa:73:cb:13:e6:52:14:6f:be:cd:36:f9:ff:94:63:f6:
         ab:40:2c:97:00:0d:00:76:92:9f:bf:9f:29:69:98:1c:43:20:
         8b:d3:26:01:65:7e:4f:31:f4:d6:bd:52:8d:ae:a4:a0:ae:58:
         0f:23:e3:90:b5:90:d2:34:a4:bc:40:8a:8c:ba:d7:75:0e:50:
         79:ec:91:d1:6f:ee:0e:46:b7:1e:5a:73:c9:8a:6e:d5:72:73:
         a5:d7:9c:88:fc:df:3d:f4:96:85:68:e5:d9:8a:17:89:f2:79:
         e5:8b:2a:ee:84:3d:b8:82:e1:f6:7a:58:97:5c:7e:82:94:39:
         b8:9a:26:df:b2:c2:6b:fb:ce:72:bc:66:2f:f6:00:7c:b5:69:
         58:44:f8:4c:85:bb:b1:dd:a1:87:fd:23:8e:40:09:ad:45:ba:
         6d:a3:38:97:22:1e:10:3b:0c:00:4d:bb:dd:fb:e1:fb:f0:e3:
         42:97:0a:79:61:b5:c3:62:8e:b9:f1:c4:8c:f7:c8:c5:63:1d:
         d0:a9:f5:c4:ca:a8:44:9e:9a:46:2c:0d:64:65:5f:99:4f:c9:
         c0:11:5d:66:35:dd:2e:b1:1e:99:1a:f3:16:a6:08:02:61:8b:
         fb:d4:e0:c1:71:fa:c2:32:b4:82:bd:56:a9:d4:47:c4:61:0a:
         dc:4c:e8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:00 2024 by rpki-client on console-fra.rpki-client.org