Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6F9ACE76CE7211EBAF46B61AC4F9AE02.roa
File:                     6F9ACE76CE7211EBAF46B61AC4F9AE02.roa (raw, json)
Hash identifier:          JPBTJ6fwr8mmKYI0rysv3RFDJmUHvWjg1nwosGPeiPE=
Subject key identifier:   E8:52:51:6C:28:2F:78:85:E8:79:91:FC:D1:B9:E5:03:F6:C7:BB:4A
Certificate issuer:       /CN=A91F6C39/serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8
Certificate serial:       04FF
Authority key identifier: EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6F9ACE76CE7211EBAF46B61AC4F9AE02.roa
Signing time:             Sat 29 Jun 2024 01:31:43 +0000
ROA not before:           Sat 29 Jun 2024 01:31:43 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     142134
IP address blocks:        103.166.186.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl
                          rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1279 (0x4ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6C39/serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8
        Validity
            Not Before: Jun 29 01:31:43 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=667f63ff-bf03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:a6:fd:db:88:ee:b3:ae:cc:3d:68:ca:66:
                    b3:f5:0f:c2:f7:c9:b3:69:28:6a:f2:a2:c2:b2:41:
                    69:5e:30:52:05:44:19:bd:ff:b6:ff:2f:97:41:6d:
                    6f:2b:14:ab:0d:ef:d4:ab:58:6c:12:ce:aa:78:0e:
                    cf:8a:ac:d1:ac:dd:b6:c2:9b:0c:ee:56:11:1c:cd:
                    12:d9:c5:90:77:5b:b1:95:6d:5b:3d:94:b9:e0:b9:
                    25:a6:6d:2d:be:ef:51:37:ab:59:e2:72:0a:00:75:
                    0e:cc:17:9a:c3:c8:d7:1d:8e:ec:67:80:01:be:9e:
                    d1:67:fe:2c:85:94:59:a7:85:d3:bc:cd:64:a1:a4:
                    7e:83:cd:46:02:0a:78:8f:c6:67:f2:c7:1e:97:63:
                    68:88:87:d7:69:c0:ce:bc:91:fb:92:1b:c3:fd:fe:
                    35:d6:c9:f5:82:4f:42:d4:40:74:04:f5:5e:f6:ce:
                    eb:4b:08:f8:77:af:29:7b:24:d8:53:6f:c8:df:fd:
                    d8:39:6d:b4:15:06:31:b1:36:97:fa:35:d9:57:2c:
                    0d:0c:c4:d6:a3:91:af:e0:6e:89:d4:f2:4c:d7:c1:
                    56:74:a9:71:cc:e1:34:0d:af:06:a9:68:cb:e8:2c:
                    e4:9d:0a:91:bb:4d:7a:55:60:6c:03:6b:a6:db:49:
                    ba:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:52:51:6C:28:2F:78:85:E8:79:91:FC:D1:B9:E5:03:F6:C7:BB:4A
            X509v3 Authority Key Identifier:
                keyid:EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6F9ACE76CE7211EBAF46B61AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:20:e4:10:21:7a:b7:f1:53:35:75:02:73:2e:7b:06:11:0c:
         a5:93:59:0b:d5:2a:8a:0f:80:1f:80:a4:c7:ac:bb:cd:79:e8:
         52:dc:e7:fe:6a:be:f7:e7:d1:c1:5b:4e:88:23:6b:51:68:8c:
         eb:b0:fd:ff:46:94:aa:f7:92:0d:4e:84:82:39:e5:78:78:f7:
         6d:88:fc:0d:c1:25:b8:fc:60:ee:c0:ec:ec:25:84:39:f4:2d:
         5e:b7:8b:39:73:b4:e6:04:15:2f:f3:c2:1b:40:a2:9e:5c:9b:
         dc:08:bd:62:52:79:be:07:2f:86:f5:5e:b1:03:70:8c:e7:2c:
         2e:dd:bc:f4:44:90:a3:30:bc:5d:db:1f:ae:9a:58:f9:7e:01:
         c9:4d:3f:33:62:56:5b:57:d5:86:64:3f:75:0d:3a:13:c7:de:
         7f:8b:bd:f1:93:7f:e8:dc:b1:71:6b:6d:b3:44:ef:59:22:22:
         81:35:fe:e2:b3:5b:24:22:6c:40:35:61:11:99:94:52:4c:d8:
         1f:ea:03:45:4a:e1:f2:e8:6a:e0:9a:43:6b:10:83:fe:13:5b:
         ea:fb:64:67:c7:86:2b:d2:ab:21:78:2e:7e:4b:ad:cf:a3:56:
         18:19:03:88:fb:b8:e3:b6:6f:d7:89:57:e9:b5:e8:a6:1e:d1:
         29:44:c8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:54 2024 by rpki-client on console-ams.rpki-client.org