Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6F46908C2D3411ED92165562C4F9AE02.roa
File:                     6F46908C2D3411ED92165562C4F9AE02.roa (raw, json)
Hash identifier:          q8DktJHLL6HIxH3T7EfJQLu7FIon7noJlUsqAjUVxI4=
Subject key identifier:   DC:51:4B:81:2E:B3:38:A2:82:F5:58:66:4D:C1:92:E0:D7:3B:B4:A0
Certificate issuer:       /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
Certificate serial:       C7
Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6F46908C2D3411ED92165562C4F9AE02.roa
Signing time:             Fri 07 Jul 2023 03:42:37 +0000
ROA not before:           Fri 07 Jul 2023 03:42:37 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        103.10.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl
                          rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
        Validity
            Not Before: Jul  7 03:42:37 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64a789ad-7eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:09:90:17:0a:5d:fa:5b:15:88:4d:d3:2c:1c:
                    e7:c3:af:40:af:35:be:c7:6d:7c:ad:09:fa:63:95:
                    60:14:4d:a7:47:70:91:e7:e6:ba:9d:fb:14:d5:8b:
                    99:ef:31:22:07:bc:5e:31:38:f2:1b:92:42:12:45:
                    03:44:f0:35:30:43:43:21:a0:be:40:95:72:d5:14:
                    15:5b:31:46:aa:b2:99:6f:7d:85:9e:cf:ed:15:5f:
                    10:11:07:f7:23:6a:87:a8:69:10:fb:b4:3d:05:86:
                    5c:95:db:46:ef:b4:38:3f:84:02:02:ab:91:96:98:
                    6c:ae:a3:eb:ce:23:8f:ec:e9:e7:bc:eb:bc:8c:20:
                    56:4c:1a:4d:70:a7:bb:54:6d:8a:47:0a:3a:78:4c:
                    53:1b:80:17:78:23:4c:56:3a:0b:1a:a1:e0:c0:e7:
                    46:b5:a2:d6:f7:d9:d6:f5:ef:c1:c6:b4:cd:6d:2a:
                    e2:1b:2a:71:36:ac:6f:0c:6a:6c:31:8c:db:84:80:
                    a6:96:de:56:c6:e8:2a:0f:33:bb:80:92:d7:ad:21:
                    0a:30:f7:8e:57:70:45:b6:3d:0f:31:ef:f1:f8:8d:
                    e9:f7:df:4b:e2:07:7b:4f:14:5c:93:7c:7e:1f:50:
                    21:72:58:51:b3:8b:d4:50:91:f3:67:10:c6:52:80:
                    b7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:51:4B:81:2E:B3:38:A2:82:F5:58:66:4D:C1:92:E0:D7:3B:B4:A0
            X509v3 Authority Key Identifier:
                keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6F46908C2D3411ED92165562C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:23:f7:f1:96:d9:fe:57:69:94:ff:6e:b1:b1:41:6d:5e:ce:
         e5:dc:4a:13:39:a1:2b:2d:08:01:64:88:96:dd:5d:88:23:ee:
         ec:92:b2:c1:79:62:54:f1:2d:1e:69:38:6d:36:1a:37:dd:18:
         57:37:48:3c:02:28:ee:5b:f1:29:2b:2f:40:80:22:7c:e0:70:
         0e:04:d1:a8:ec:89:8b:0b:9a:24:49:e7:71:16:87:16:20:e6:
         21:48:d4:10:e4:86:bd:a7:22:d6:21:db:3c:90:d9:8b:95:21:
         c4:01:d0:ac:92:e6:f4:d5:b6:c9:b4:82:97:2f:85:97:9f:3a:
         a1:03:6f:86:44:2f:4e:91:4f:7e:3f:97:38:f6:6e:09:2e:8b:
         10:4b:69:37:ef:b3:60:e3:89:5f:02:d4:00:d0:93:93:67:2a:
         41:df:9c:b9:59:cb:be:a5:87:6a:d6:a6:00:fc:69:14:89:42:
         8f:0e:5d:05:d9:2f:f7:64:1d:68:e7:15:e6:1c:29:ba:d5:e2:
         90:f9:d0:e8:c9:4b:20:c6:19:b3:7d:b5:5e:51:f0:af:9c:d3:
         0b:6d:c5:74:4a:a3:17:51:54:14:7d:c9:19:bf:55:60:01:46:
         0b:1b:c1:c6:76:97:f1:81:b2:84:8b:3d:fd:fe:78:24:02:90:
         a3:15:af:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:32 2024 by rpki-client on console-ams.rpki-client.org