Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/54FEFAA2ED4C11EC821F3D84C4F9AE02.roa
File:                     54FEFAA2ED4C11EC821F3D84C4F9AE02.roa (raw, json)
Hash identifier:          rj+UC+zA9sE5Q8EazPPN8LHfCTVfMALfkukIKXKN97M=
Subject key identifier:   8A:C8:B8:0A:24:CE:35:EC:D5:EF:20:5A:A9:57:D9:E5:70:1C:BE:A4
Certificate issuer:       /CN=A91149E6/serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF
Certificate serial:       022D
Authority key identifier: 81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/54FEFAA2ED4C11EC821F3D84C4F9AE02.roa
Signing time:             Sun 21 Jul 2024 02:54:28 +0000
ROA not before:           Sun 21 Jul 2024 02:54:28 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     149856
IP address blocks:        103.188.248.0/24 maxlen: 24
                          2001:df0:c9c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl
                          rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:13:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91149E6/serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF
        Validity
            Not Before: Jul 21 02:54:28 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=669c7864-c954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c9:c9:c5:c5:f2:98:4f:5c:fe:2b:55:ad:4c:
                    86:96:0c:f4:1f:ce:03:ea:8d:23:74:b2:5b:10:f2:
                    c7:ca:58:6b:94:e2:97:09:fd:2b:a7:e4:ee:66:f1:
                    a1:c4:9f:c7:2d:d9:69:8a:08:b8:61:d0:26:bf:dc:
                    1d:d8:bb:7e:58:b6:9c:b2:46:98:ca:45:77:5b:44:
                    2c:37:a3:ea:25:ab:45:a9:3c:c4:17:2e:5c:45:06:
                    e1:7c:0d:f2:23:1b:13:25:e5:ee:65:a3:ad:c6:a7:
                    02:1c:de:a4:4a:b6:8a:e8:ce:76:73:5b:a7:a7:f2:
                    71:94:79:67:fb:58:1a:88:87:8c:97:0e:eb:c7:85:
                    09:45:eb:ed:4e:ab:62:7d:09:40:dc:fc:11:49:ea:
                    41:55:4e:98:3e:d8:69:24:21:e2:32:8c:96:87:91:
                    20:1a:44:ec:f1:c6:c4:83:a2:50:40:18:1e:33:3d:
                    63:cf:05:7e:75:1e:d8:e1:cc:90:12:0e:f9:de:9e:
                    1d:90:33:69:3c:5d:17:12:a7:ec:3e:71:3d:33:cc:
                    4d:07:95:c7:da:07:3b:b0:de:fe:40:83:4e:d3:08:
                    23:6a:bb:9f:f4:22:b0:b9:06:22:7f:1b:c1:1b:b5:
                    34:94:bc:21:2a:94:1a:bd:a5:16:bf:e7:7c:cd:20:
                    bc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C8:B8:0A:24:CE:35:EC:D5:EF:20:5A:A9:57:D9:E5:70:1C:BE:A4
            X509v3 Authority Key Identifier:
                keyid:81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/54FEFAA2ED4C11EC821F3D84C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.248.0/24
                IPv6:
                  2001:df0:c9c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:0a:4b:82:3a:34:c8:6d:ce:e0:f7:84:74:4e:6a:e0:7a:eb:
         00:ff:2e:6b:11:81:54:97:d0:24:ef:4d:ea:18:c1:b0:bc:cc:
         f5:10:94:b9:bb:2d:59:21:85:65:20:4d:4a:34:f4:93:f8:11:
         89:ab:db:0a:30:38:c4:81:bd:a1:7a:1c:5b:60:85:e1:34:e6:
         e8:11:a2:29:5f:6c:5b:7c:93:16:38:39:27:d0:69:d2:2f:68:
         b3:f3:6b:02:b8:af:c4:46:b5:2a:79:6a:90:85:b6:41:42:c6:
         e7:b4:5f:a5:36:1f:79:d0:2e:df:44:cc:a1:0d:d9:9d:13:28:
         e4:a0:b7:4c:3a:d0:ae:4e:50:f5:47:2c:8a:d6:31:4d:95:f5:
         2f:d1:ea:ec:94:54:c4:96:9c:67:8d:a1:5b:e9:98:16:af:f4:
         06:61:60:0c:c9:78:97:b0:73:2d:cc:4b:2c:68:2c:66:3e:80:
         66:48:6d:6a:73:4b:cf:44:8b:ef:91:4a:68:7a:39:94:56:30:
         8e:d3:cf:ff:f1:85:4f:b3:e8:59:5d:c8:78:b5:85:70:c4:58:
         3e:64:cd:8c:18:18:15:5a:2d:fb:4e:de:e0:70:ae:fc:af:bb:
         f4:4b:79:8c:63:1f:79:0e:df:0f:23:5c:c4:d7:e7:d6:45:6b:
         9c:55:e8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:32 2024 by rpki-client on console-ams.rpki-client.org