Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/46E49D1CE79811EEA89C5E56C4F9AE02.roa
File:                     46E49D1CE79811EEA89C5E56C4F9AE02.roa (raw, json)
Hash identifier:          P3RI+iahMSOMEtdBfrZDu8ZMcvFxJp6/7cmLyR0Owr8=
Subject key identifier:   C3:74:CF:17:E0:E1:5E:9D:23:C5:0E:BE:A6:42:6D:F8:77:1E:72:BE
Certificate issuer:       /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Certificate serial:       DD
Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/46E49D1CE79811EEA89C5E56C4F9AE02.roa
Signing time:             Wed 25 Sep 2024 04:18:50 +0000
ROA not before:           Wed 25 Sep 2024 04:18:50 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     135365
IP address blocks:        103.253.176.0/24 maxlen: 24
                          2401:25e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
        Validity
            Not Before: Sep 25 04:18:50 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66f38f2a-6014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:1d:68:21:17:48:13:02:a6:b1:9d:57:15:
                    51:cd:37:45:64:1a:bf:71:c1:8a:87:3a:88:ed:46:
                    54:9a:06:93:da:bd:90:21:8d:58:52:9e:45:d3:85:
                    2f:ca:ed:a1:55:d7:be:ee:8d:a3:2b:df:95:cf:1e:
                    9c:a6:8a:16:b3:ab:fb:f1:cd:a9:10:06:f1:cc:fe:
                    93:a1:c5:1a:57:9b:b6:28:2b:e1:97:7f:d0:a1:8b:
                    b7:cb:82:28:a1:e2:bb:67:a0:f1:14:aa:37:1d:83:
                    2a:6c:b1:8e:e3:0d:16:bd:81:d0:ce:48:f2:14:9d:
                    49:30:7b:a1:07:60:d4:79:ca:15:45:92:35:f7:ad:
                    49:b6:52:97:02:10:68:2e:59:a0:44:cc:12:63:30:
                    07:e8:51:b6:b0:1a:e7:fc:64:af:0c:4d:59:55:1d:
                    2c:e7:d7:43:22:b5:bd:53:fd:c9:75:e9:6a:ad:49:
                    4d:a5:59:c6:b3:7c:48:2c:c2:1e:7f:48:ac:95:7e:
                    03:53:d9:28:3f:03:7a:1e:81:50:6c:86:68:45:f1:
                    f0:70:68:cf:c7:4f:c7:24:7b:8a:c7:40:d5:e5:3d:
                    66:32:10:c1:53:04:4b:5d:51:43:a3:0b:b1:67:1e:
                    45:6e:76:d3:d9:f5:78:85:cc:8b:51:83:df:3e:14:
                    19:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:74:CF:17:E0:E1:5E:9D:23:C5:0E:BE:A6:42:6D:F8:77:1E:72:BE
            X509v3 Authority Key Identifier:
                keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/46E49D1CE79811EEA89C5E56C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.253.176.0/24
                IPv6:
                  2401:25e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:73:ac:99:98:a6:82:2d:7b:a4:10:71:9b:ac:56:8b:46:a6:
         03:27:2f:ab:57:ff:f0:c9:b4:d7:15:46:37:89:af:e6:e4:f0:
         0e:1e:c6:c5:cc:06:98:77:e7:8d:21:7d:0e:dd:1c:70:e2:01:
         35:09:0f:17:3a:78:3e:64:4d:a9:37:df:12:6d:b6:05:3a:45:
         00:ae:b4:6c:62:1a:00:6b:99:23:46:e2:bb:26:06:cb:43:7c:
         b6:8c:24:85:ab:85:ac:2d:d7:53:48:b7:16:56:b4:bd:2e:81:
         59:c5:08:8a:af:13:5d:0b:a0:d1:cf:0a:c8:bd:5f:e5:a5:23:
         4f:f1:56:28:2e:d8:bc:8f:b8:2c:8e:bf:23:f6:ed:57:36:cc:
         71:00:a2:dd:c1:15:6f:aa:06:b9:e4:2c:1e:a5:53:0d:7f:66:
         ce:70:f0:a4:19:54:84:d5:b2:6f:d6:3e:88:66:fd:56:76:1e:
         a2:5e:cc:4e:06:98:e1:af:99:41:55:2b:da:3a:61:b7:88:63:
         59:65:95:2a:e0:5c:6b:11:4d:74:0a:c1:b0:8b:9a:e9:a7:57:
         07:bf:2b:08:43:31:8f:f4:6e:0b:01:7e:87:9e:4b:be:e1:4b:
         75:ee:d6:ea:73:d0:84:6a:fe:27:96:74:f7:69:4a:6e:35:9e:
         fd:58:48:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:11 2024 by rpki-client on console-ams.rpki-client.org