Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/F2F0E3FE882E11EFB58CD069C4F9AE02.roa
File:                     F2F0E3FE882E11EFB58CD069C4F9AE02.roa (raw, json)
Hash identifier:          xhTjRYAmVfOwQQSsGsr7HfgpLZrnPmaYeWIc+EpYBdU=
Subject key identifier:   6C:5A:A1:03:47:A9:E7:7E:70:87:BA:4C:B3:11:C9:8C:CA:A9:5B:45
Certificate issuer:       /CN=A91643F8/serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3
Certificate serial:       0E
Authority key identifier: 6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/F2F0E3FE882E11EFB58CD069C4F9AE02.roa
Signing time:             Sat 12 Oct 2024 00:14:30 +0000
ROA not before:           Sat 12 Oct 2024 00:14:30 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     140499
IP address blocks:        103.151.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl
                          rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91643F8/serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3
        Validity
            Not Before: Oct 12 00:14:30 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6709bf65-3d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:23:c9:c2:f4:6e:cb:d0:a2:a9:26:23:66:85:
                    f7:99:5c:4d:80:ba:ce:a2:ee:6c:09:fe:48:d8:33:
                    f3:70:2e:9f:6f:ec:91:95:6e:34:b3:e7:10:a6:35:
                    3e:c1:c5:c3:92:a9:d3:36:bf:85:bf:ce:18:fe:b0:
                    c4:55:58:e6:6e:c9:55:96:c6:c4:b8:88:99:57:7a:
                    f0:e8:66:bb:bc:5b:39:bc:04:fd:ce:0b:3f:94:1e:
                    ed:38:ff:0e:20:ab:47:49:fc:6b:6d:dc:ed:b9:7e:
                    9a:6e:4d:3c:a0:40:ac:e9:dd:7e:b7:a8:78:df:9c:
                    22:0c:81:8a:a7:00:78:eb:b8:a9:51:ec:19:1a:f2:
                    5c:bd:9b:e8:31:a7:b4:ca:87:61:6a:87:a9:c7:98:
                    45:94:9a:8a:2b:4f:66:91:39:23:be:9e:0f:b1:9f:
                    2d:f9:74:05:b8:f3:a0:d2:77:01:9d:09:9d:51:d0:
                    d9:a3:d3:75:e5:f4:0c:a0:85:94:27:8c:28:0d:b6:
                    ce:4c:2d:35:1b:97:33:92:0d:1f:18:12:5b:40:fd:
                    81:8f:1d:2d:6e:19:da:f1:b3:a2:50:d7:3f:15:94:
                    79:b6:ea:0d:e5:ee:89:4d:6f:68:56:48:38:82:cb:
                    aa:ea:24:64:53:1f:74:e3:0b:97:7b:81:01:f2:36:
                    e7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5A:A1:03:47:A9:E7:7E:70:87:BA:4C:B3:11:C9:8C:CA:A9:5B:45
            X509v3 Authority Key Identifier:
                keyid:6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/F2F0E3FE882E11EFB58CD069C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:2d:09:52:26:11:14:f0:b9:b3:bf:55:c6:65:ca:04:c9:57:
         4a:7c:78:39:d4:f0:f9:b6:63:61:c2:f4:45:75:eb:4b:83:0c:
         f7:59:ae:b9:da:b4:41:3d:62:db:f0:ab:49:4a:bb:e0:fc:02:
         24:0a:3c:f5:63:cd:2b:71:33:6d:af:8c:79:a5:90:33:3a:e9:
         a2:6a:1a:b6:d8:9e:c2:b0:0c:c2:13:aa:27:77:e2:92:7b:c2:
         50:ce:32:d5:31:e9:d1:28:08:f3:d7:6e:e8:36:8d:33:95:b5:
         8d:2d:ef:76:52:dc:ff:5c:f6:a7:30:12:6f:2f:bb:49:24:ea:
         d7:fd:03:73:9e:6f:a5:c5:b0:88:47:60:fe:f1:a7:da:e2:89:
         c4:18:2a:26:4c:25:82:b9:c9:2a:70:2e:c1:c2:0e:2d:b5:e8:
         ec:86:a8:84:cf:bd:b0:e2:9b:3c:41:00:ac:96:39:16:31:1e:
         4b:fa:b8:60:ca:cb:05:8b:2e:74:b2:b9:cc:43:28:80:05:a3:
         f0:ec:54:8d:3d:bb:4b:a2:98:5e:2b:53:38:5d:74:80:5a:09:
         e2:9d:4c:82:f3:3f:d9:37:b1:62:65:f9:36:34:5a:e1:77:36:
         25:be:27:9c:3b:30:fc:41:df:57:c8:73:20:10:d7:8e:c3:3a:
         be:9a:e6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:16 2024 by rpki-client on console-fra.rpki-client.org