Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/269D906E0C1D11EF87936F72C4F9AE02.roa
File:                     269D906E0C1D11EF87936F72C4F9AE02.roa (raw, json)
Hash identifier:          TkvEA48hkZdfXv9N6AC+PYtqjUdjJ0lc4V/6xa2JEy4=
Subject key identifier:   8E:9C:76:22:6E:B5:6C:57:40:45:AB:0B:F7:9C:05:1E:4A:26:5C:0F
Certificate issuer:       /CN=A91846F6/serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC
Certificate serial:       79
Authority key identifier: 8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/269D906E0C1D11EF87936F72C4F9AE02.roa
Signing time:             Fri 01 Nov 2024 05:48:35 +0000
ROA not before:           Fri 01 Nov 2024 05:48:35 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     3491
IP address blocks:        103.215.40.0/22 maxlen: 24
                          144.48.216.0/22 maxlen: 24
                          223.255.240.0/22 maxlen: 24
                          2001:df0:a300::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl
                          rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91846F6/serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC
        Validity
            Not Before: Nov  1 05:48:35 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=67246bb3-7bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6f:ae:33:19:23:b3:6b:14:1a:0f:f6:fb:28:
                    3d:d2:22:c9:4e:b8:f1:3b:1d:af:40:55:fe:7e:85:
                    32:a2:73:a6:31:77:f1:42:80:2b:cc:a1:df:38:4f:
                    94:1e:30:cc:a5:85:c0:a0:87:b0:5f:0f:d9:40:2c:
                    4e:ea:48:89:5c:d1:db:34:f9:18:ed:16:6d:ef:a1:
                    82:c4:f1:32:bf:2f:d6:c7:b7:ea:1f:90:63:38:be:
                    a3:9b:e7:dd:ee:20:7a:ec:65:72:74:95:ae:03:97:
                    64:3e:ab:1c:d7:bb:32:0a:3a:1e:ea:01:e4:d9:f1:
                    ed:86:70:8f:5b:fa:05:5d:fb:b7:6d:bf:c6:77:6c:
                    09:e4:4a:62:fa:57:7f:35:08:9d:8e:52:cd:ea:73:
                    ea:3b:c6:94:1b:67:7e:19:70:c7:09:02:f0:56:99:
                    58:73:44:8e:88:14:5f:52:1d:3a:28:72:65:45:f4:
                    4a:57:2f:30:bd:9f:43:69:21:a9:97:e3:66:5d:8d:
                    2b:c2:d5:2a:35:3f:4e:4c:94:8f:b0:77:78:75:a8:
                    8f:2a:e0:fe:d7:35:05:f1:b4:a2:8a:6a:d7:e5:5d:
                    b3:0c:98:5e:87:7f:ce:ec:36:04:ce:b8:f7:77:28:
                    58:e3:1c:2b:ae:b2:61:b7:b9:a7:4c:b3:7a:ba:d4:
                    41:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9C:76:22:6E:B5:6C:57:40:45:AB:0B:F7:9C:05:1E:4A:26:5C:0F
            X509v3 Authority Key Identifier:
                keyid:8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/269D906E0C1D11EF87936F72C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.40.0/22
                  144.48.216.0/22
                  223.255.240.0/22
                IPv6:
                  2001:df0:a300::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:6f:60:0f:67:4d:81:b2:5d:96:72:fb:82:24:2e:08:35:66:
         06:25:18:1f:0a:d6:9d:81:37:8f:7d:ca:12:51:b2:41:02:e1:
         ad:38:49:c6:32:99:d4:1f:2a:1c:11:a0:92:d9:dc:d7:a4:67:
         2a:5c:41:e6:db:f5:fd:52:b2:1a:76:2c:1a:1a:58:12:c5:d9:
         9c:96:ba:c9:82:99:19:5c:f0:43:01:3b:d8:44:51:10:f5:5b:
         70:a9:18:44:41:02:1e:bf:69:da:36:87:2e:8e:87:a8:ea:b8:
         22:a3:32:2d:70:a4:59:4c:e9:d3:5c:e9:61:41:ac:c7:64:9f:
         d5:ad:12:4f:bf:19:0f:81:ad:ea:a7:e7:87:d3:ea:2c:13:99:
         15:3a:72:67:46:f2:e0:a5:b0:b0:07:6d:99:a3:70:16:91:dd:
         d4:35:76:47:70:c1:c4:c2:6c:6b:44:3d:ba:38:67:f7:32:46:
         26:93:da:eb:f1:46:3f:63:34:f0:df:03:0c:6c:b4:70:12:c5:
         ba:0d:1a:f0:12:6d:40:c9:d0:b8:4c:bb:80:65:69:15:e5:48:
         91:cf:7e:df:01:dc:c1:fe:26:4a:52:79:ca:7f:c6:0c:f7:02:
         b3:81:f2:d8:1e:7c:a3:23:20:ab:94:39:9f:f5:87:5a:e7:0f:
         46:91:ad:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:27 2024 by rpki-client on console-fra.rpki-client.org