Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/D1E8FCF6A87111EF96B74932C4F9AE02.roa
File:                     D1E8FCF6A87111EF96B74932C4F9AE02.roa (raw, json)
Hash identifier:          JWnEhAIVqLXpvMWq68FIyDTYmHTSTi/hyl875cr2fxU=
Subject key identifier:   BE:7B:3F:5B:6B:A2:EB:6F:EE:35:3F:4A:B9:76:50:7C:9C:A2:D4:F2
Certificate issuer:       /CN=A91F98D7/serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E
Certificate serial:       04
Authority key identifier: 26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/D1E8FCF6A87111EF96B74932C4F9AE02.roa
Signing time:             Fri 22 Nov 2024 02:46:17 +0000
ROA not before:           Fri 22 Nov 2024 02:46:17 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     140097
IP address blocks:        103.164.82.0/24 maxlen: 24
                          2001:df2:d480::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl
                          rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F98D7/serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E
        Validity
            Not Before: Nov 22 02:46:17 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=673ff079-88c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a8:46:47:3d:dc:9a:ae:00:62:b5:e2:06:58:
                    a3:9b:64:98:95:ad:84:5c:c5:50:19:9f:1d:14:a6:
                    46:49:72:50:1e:d0:34:71:f8:78:f7:07:38:7c:85:
                    23:29:19:3c:e4:d9:57:5a:26:26:a2:41:91:f6:37:
                    33:f5:35:70:c1:c6:fc:37:70:11:4d:47:e5:4b:66:
                    3e:99:8e:19:5c:60:07:71:10:8f:82:bb:ad:30:7b:
                    98:97:84:58:91:86:fb:28:04:64:c3:55:14:e5:68:
                    fb:32:25:d4:de:90:e2:d7:da:26:e2:00:a4:ba:54:
                    d2:8c:8d:1a:b3:c3:99:b9:71:90:3b:d2:dd:e9:f6:
                    d0:41:27:2b:24:94:65:16:71:56:f0:a8:c3:f9:da:
                    fc:98:89:49:2c:84:1b:b2:ea:20:30:55:58:f5:58:
                    fc:4a:0e:7a:2f:b6:e6:3e:ff:2a:0e:b5:af:46:17:
                    41:e1:72:c2:db:02:f9:10:5e:a9:61:7c:5e:d9:58:
                    d7:49:47:4d:50:f0:57:37:bd:43:a5:b9:5f:d3:71:
                    c5:43:53:88:66:d9:f7:f1:0b:74:d1:65:74:83:a7:
                    9f:08:95:40:1a:df:64:c9:4a:da:9f:d1:ab:2f:b4:
                    44:01:3b:ff:86:e6:49:e4:8e:d4:a4:7f:a7:fb:73:
                    41:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7B:3F:5B:6B:A2:EB:6F:EE:35:3F:4A:B9:76:50:7C:9C:A2:D4:F2
            X509v3 Authority Key Identifier:
                keyid:26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/D1E8FCF6A87111EF96B74932C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.82.0/24
                IPv6:
                  2001:df2:d480::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:6d:56:28:18:b0:1a:73:d0:54:ff:57:ec:a7:38:3d:46:58:
         88:46:54:67:17:3e:e3:01:61:88:04:40:8d:ee:40:ce:6e:40:
         f4:fb:e7:b2:dd:5f:c7:9a:86:61:45:ef:5a:9b:9c:ed:b1:1c:
         52:1a:a8:e2:4b:27:1b:1e:d4:74:84:83:a6:4e:7e:20:aa:71:
         cc:29:86:9e:70:c6:7e:6a:6d:54:26:5c:8c:3d:6c:ef:4a:1d:
         62:0a:f4:4f:ce:bf:1a:c4:52:41:1f:36:38:cf:5a:f3:6d:83:
         5a:46:05:e6:0d:35:e9:88:09:ba:a0:00:a8:e0:4e:f9:97:2e:
         6f:48:d9:c4:8d:39:c4:59:5a:f1:f0:89:75:d4:25:4d:ee:c1:
         c3:28:30:fb:70:a9:47:b2:96:f6:40:48:25:cb:f0:83:cf:bb:
         9c:3e:3e:72:91:a7:ac:b2:54:5e:bd:7f:0a:0b:37:98:0c:e5:
         db:1b:07:15:6e:6e:37:4f:d7:85:38:45:34:bf:5c:2a:6f:95:
         10:db:b1:90:21:7f:ce:46:1b:36:f3:c7:8a:73:f6:ac:8e:c7:
         30:15:7a:2c:7c:61:41:04:38:23:08:d1:93:d5:aa:48:56:85:
         c7:f1:d0:ca:d9:78:88:9a:05:c3:47:6a:70:20:9f:66:90:94:
         e2:72:57:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:45:06 2024 by rpki-client on console-ams.rpki-client.org