Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/6FA4F9C44D8511EFA6073432C4F9AE02.roa
File:                     6FA4F9C44D8511EFA6073432C4F9AE02.roa (raw, json)
Hash identifier:          DuiwpTOQ+46YBE83w0bBmQr9D587PUkTi9Qcefln7w8=
Subject key identifier:   24:85:5F:4F:25:FD:74:41:9A:68:47:AD:6A:9C:03:A6:86:30:F8:60
Certificate issuer:       /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Certificate serial:       07FF
Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/6FA4F9C44D8511EFA6073432C4F9AE02.roa
Signing time:             Mon 29 Jul 2024 08:34:57 +0000
ROA not before:           Mon 29 Jul 2024 08:34:57 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     15830
IP address blocks:        103.6.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
                          rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2047 (0x7ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91169FB
        Validity
            Not Before: Jul 29 08:34:57 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66a75431-8a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ce:34:f2:3e:4f:7d:f1:b8:20:e2:91:bc:68:
                    46:c4:e2:af:34:09:45:40:98:97:2d:96:fa:fb:95:
                    0f:ec:19:76:de:38:ee:03:20:45:fa:a0:14:5d:14:
                    3f:52:ab:f0:1e:7b:1b:eb:80:59:43:8e:63:c7:ed:
                    d3:76:66:01:02:9e:05:a4:c0:5b:b3:2b:9d:f3:4a:
                    ba:e3:4d:c2:8f:be:e6:bd:e1:4b:e4:ba:a4:99:72:
                    d9:1a:6b:c3:9d:ef:a8:c9:53:c8:7e:26:58:b3:de:
                    f1:ff:38:c8:3f:db:91:1e:6d:33:1d:21:3e:f7:74:
                    53:54:fb:6f:19:2f:1e:81:e4:54:04:3b:80:ca:b1:
                    99:64:1f:10:dd:f7:f8:ca:16:c4:11:8a:b3:52:68:
                    e8:0c:b1:5c:43:d6:6b:9e:ad:9d:b3:33:7c:83:5b:
                    23:e2:0e:2a:a0:8e:64:67:4a:9f:d0:82:a7:42:fc:
                    dd:40:97:35:66:3e:f3:50:39:ca:03:ef:39:3d:6b:
                    85:cf:27:7f:3f:5f:4b:61:cd:d6:70:ae:25:2c:2d:
                    bc:8b:89:b5:8e:68:a5:ce:45:2e:5b:39:d1:46:8e:
                    29:2f:d5:22:a9:04:64:60:65:27:02:ea:f9:ff:ce:
                    5a:55:e1:5d:3a:0e:d8:cc:ee:20:b1:6a:21:a4:64:
                    f6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:85:5F:4F:25:FD:74:41:9A:68:47:AD:6A:9C:03:A6:86:30:F8:60
            X509v3 Authority Key Identifier:
                keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/6FA4F9C44D8511EFA6073432C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:97:02:a7:1a:7b:2c:0c:c6:f4:1e:a0:67:b8:a4:ce:3d:0f:
         43:a7:5f:d2:d8:86:b6:21:5e:ba:4f:e2:41:cd:f8:1c:a9:ac:
         b9:ce:50:c4:df:e0:9b:83:c4:86:61:1f:2e:40:1f:c7:04:c9:
         84:74:a0:6f:50:81:c3:29:9e:c1:cf:a5:8f:b4:51:30:ab:23:
         44:9f:1c:f9:42:78:e7:09:7e:bc:3a:9e:9a:ab:fc:c3:30:ed:
         a8:f9:c6:4d:00:9f:f1:ee:5d:e0:01:44:c4:15:49:db:99:be:
         17:62:67:c3:42:77:d7:65:4b:02:c6:95:67:40:1e:c2:8f:0e:
         a0:d0:fa:2f:55:5f:9f:cd:fa:1a:92:15:13:72:57:c0:6c:23:
         a0:d6:de:9a:05:a9:48:fc:7f:1a:b7:84:11:dc:15:29:01:73:
         6c:2b:93:e3:78:93:60:b7:3a:4b:c2:65:ee:a6:3b:a0:e6:7a:
         17:df:e1:cd:7c:a2:1c:c0:40:7b:17:c6:f6:5b:42:a0:35:ac:
         7e:be:f7:74:bb:cc:01:46:3e:60:0e:85:fe:1d:3c:31:a0:20:
         60:9c:9b:eb:59:8c:c1:11:50:9a:af:80:88:b0:0e:62:ce:2d:
         14:a1:7c:fd:e0:df:3d:40:57:86:98:d3:98:ae:ea:58:ce:d3:
         bf:0c:e7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:23 2025 by rpki-client