Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F6D9C45E7B1811EF82C90D2AC4F9AE02.roa
File:                     F6D9C45E7B1811EF82C90D2AC4F9AE02.roa (raw, json)
Hash identifier:          AfBe49D3Yjx5Xz+auV8iqKW+ThAbYjOi5aUSfgO+bI8=
Subject key identifier:   E9:13:93:51:89:23:ED:09:3C:D2:AD:BC:CC:D4:0C:4C:A1:10:9C:A8
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       3521
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F6D9C45E7B1811EF82C90D2AC4F9AE02.roa
Signing time:             Wed 25 Sep 2024 08:34:22 +0000
ROA not before:           Wed 25 Sep 2024 08:34:22 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     138003
IP address blocks:        203.209.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13601 (0x3521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Sep 25 08:34:22 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66f3cb0e-ec20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:f4:ab:95:b2:4b:11:69:4f:42:a9:a7:1c:
                    43:d2:af:10:34:d3:02:34:e4:83:f6:9d:f7:d8:5a:
                    de:ae:a2:fb:d3:ee:da:eb:ff:ce:29:87:fb:2c:80:
                    b2:36:30:e4:4d:b1:5c:07:ac:42:ca:54:33:bf:89:
                    7f:1e:44:28:a0:a6:d7:a7:0d:ff:aa:a5:10:fa:2e:
                    39:29:d0:d7:fc:0e:e7:a9:34:00:91:c2:8f:64:28:
                    60:19:dd:7f:de:c3:fd:b5:9d:2f:63:0d:63:5e:54:
                    73:9a:d2:8c:ee:00:fb:9d:51:bc:22:6e:89:25:bc:
                    5f:46:16:b1:f7:fa:2e:c3:3f:3e:b0:94:36:20:45:
                    7e:19:64:9d:a4:7a:2f:1c:f4:36:f6:ef:0d:3a:44:
                    63:fa:f7:f3:3c:52:c1:3d:3b:71:00:ea:b2:22:13:
                    fd:f1:d5:fa:c6:3d:08:62:7d:cd:56:bc:55:3c:17:
                    fd:b4:38:f1:87:24:8d:e9:71:e4:25:ac:43:54:a8:
                    a1:8f:c6:7b:82:4d:61:88:62:0b:4e:fd:f9:54:8f:
                    07:94:26:b5:02:55:79:eb:34:bf:fe:97:ae:01:65:
                    d4:b4:67:6f:42:f4:58:cb:42:7e:31:1c:d3:78:f2:
                    e7:e1:eb:4c:be:5c:44:6d:3d:b7:fc:0a:1b:c3:9d:
                    17:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:13:93:51:89:23:ED:09:3C:D2:AD:BC:CC:D4:0C:4C:A1:10:9C:A8
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F6D9C45E7B1811EF82C90D2AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.209.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:52:57:4f:43:4f:8e:6f:71:51:7d:15:ed:f7:ae:62:9e:7b:
         83:0b:88:8d:4d:75:b0:df:d5:f7:ca:0e:1f:b1:90:05:79:6b:
         14:61:28:a5:e1:00:7c:94:8b:84:f4:60:10:de:e6:cc:d1:f3:
         e1:cf:6e:2b:83:ad:fc:30:e0:89:93:e4:6b:cc:5b:c9:76:f5:
         bf:a6:20:16:65:73:0f:e8:18:3e:d0:47:68:c8:d1:71:a7:75:
         4c:81:f2:2e:ac:5d:d4:cb:d1:82:c9:f0:f6:2e:e4:64:da:ea:
         a2:8f:9f:49:8f:21:23:bf:c5:66:2b:38:e8:f9:b0:68:4e:1e:
         06:50:0d:d0:e0:dc:de:97:bd:fe:15:2a:96:32:2f:0e:0e:12:
         21:32:39:41:bf:17:21:f8:61:97:13:48:e8:38:28:96:dd:e3:
         9a:24:97:19:94:26:6b:3b:96:69:06:41:7b:3f:dc:f5:ce:75:
         01:69:fd:7c:c8:81:3f:70:2a:13:8e:dc:08:80:4a:0f:fe:06:
         98:3a:b9:76:f7:2a:dc:37:8e:33:a7:49:63:16:70:9a:12:a3:
         40:1f:87:e3:34:d3:dc:62:9e:b7:22:c8:ef:1a:81:d8:a7:91:
         f1:15:72:42:0a:fd:52:8b:6a:b1:6b:05:a1:b3:33:56:44:73:
         24:77:a9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:25:37 2024 by rpki-client on console-fra.rpki-client.org