Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa
File:                     F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (raw, json)
Hash identifier:          FpiXZKAhTjkDCch/pIRU9MHgJD8fPUreDGZSqo9JNCY=
Subject key identifier:   62:C2:83:F8:F0:47:55:B9:4F:02:EC:65:39:82:37:6A:33:B7:4D:DF
Certificate issuer:       /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
Certificate serial:       04DA
Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa
Signing time:             Wed 03 Jul 2024 01:02:33 +0000
ROA not before:           Wed 03 Jul 2024 01:02:33 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     142558
IP address blocks:        103.169.100.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1242 (0x4da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
        Validity
            Not Before: Jul  3 01:02:33 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6684a329-b18c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5d:8f:d3:d7:23:58:6f:d5:37:66:63:3b:4b:
                    fa:63:06:6a:3d:01:36:b8:fe:1c:51:44:6e:3c:75:
                    1e:d1:a7:02:3a:89:b3:f3:cb:fb:ec:5c:8e:6d:a4:
                    1b:aa:ec:6c:e5:88:ab:88:2a:7e:16:f9:25:f7:7d:
                    62:52:c1:17:e4:a3:90:f5:bc:a8:7b:60:1f:d2:06:
                    c9:a7:d9:cc:6f:2e:7d:d3:e4:45:f1:cf:7d:66:6c:
                    fc:5b:33:89:1a:7f:3c:c6:ed:b4:55:92:e5:e8:a7:
                    15:03:f8:4e:e8:eb:1a:b9:fe:c9:2a:37:12:ab:27:
                    00:a7:c3:79:f2:b1:aa:c4:fb:e5:7d:8e:ff:2a:30:
                    f1:1d:87:17:7d:e4:a2:18:14:ae:b7:8f:04:c1:d9:
                    bb:60:cc:6c:f9:ae:1d:68:24:d8:6d:05:5e:2e:3f:
                    91:e9:80:c5:86:c3:6f:df:28:39:51:2f:bc:0e:77:
                    e3:a4:f1:80:b5:6a:c1:05:9c:a5:f7:c3:50:76:7c:
                    eb:e7:49:a8:f0:21:aa:18:9f:26:b4:2c:a3:f2:db:
                    22:06:16:19:e9:78:35:b5:66:d6:de:cb:f8:d5:fb:
                    b6:2a:7e:ab:9c:a8:8a:06:1d:6a:51:3a:40:73:73:
                    dd:58:03:a9:e5:b8:48:46:92:af:e8:c5:89:4a:71:
                    1e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C2:83:F8:F0:47:55:B9:4F:02:EC:65:39:82:37:6A:33:B7:4D:DF
            X509v3 Authority Key Identifier:
                keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:e8:2f:11:fb:97:87:86:77:0d:bd:4e:ce:ce:6d:63:bb:65:
         40:14:64:91:68:37:da:57:26:d1:c7:f7:53:ac:64:62:e9:2b:
         2c:a1:5f:b1:4f:9a:92:84:89:ca:1c:1d:be:69:a7:f7:20:80:
         08:c5:8c:b4:f9:86:c8:b5:83:0b:75:c3:79:41:84:0a:c6:f4:
         b9:51:1c:53:01:c6:59:5c:82:40:dc:b2:7a:e2:a4:dd:30:45:
         ec:a0:7a:9b:1d:ac:e4:4a:a2:c6:9b:65:24:dd:42:6c:e7:b4:
         21:82:f0:7e:fd:c4:90:a8:4d:3b:4c:1a:20:8b:8b:8b:36:e5:
         73:b3:a7:47:bb:08:23:65:dd:40:f9:16:87:6e:0a:64:0d:36:
         14:6e:db:66:9c:9a:48:c8:51:28:83:40:37:e4:08:d4:26:9f:
         8c:22:84:92:87:db:54:6a:11:84:bc:1a:8c:f6:5c:fa:d0:90:
         b3:33:ca:39:42:c8:a7:7c:22:5f:85:d0:b0:e8:ba:f6:c3:d4:
         d8:a6:f0:b6:6a:c9:07:b3:99:2e:da:29:8b:70:0d:78:1a:68:
         32:9c:73:ea:ca:3a:d8:9a:53:7b:ec:d4:60:52:56:e0:94:19:
         8a:e6:c0:23:05:3b:4e:34:e0:02:8f:ca:71:0c:72:f0:50:d0:
         9d:4b:56:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:31 2024 by rpki-client on console-fra.rpki-client.org