Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/6E6A801066CB11EFA513A684C4F9AE02.roa
File:                     6E6A801066CB11EFA513A684C4F9AE02.roa (raw, json)
Hash identifier:          vXar9bKA8CImjVKWhu4MzK44EuwvcZRevRawwazNHWQ=
Subject key identifier:   AE:03:37:26:01:1D:03:A1:22:A7:EA:0C:4C:F6:E5:DC:81:92:17:0D
Certificate issuer:       /CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
Certificate serial:       058A
Authority key identifier: 19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/6E6A801066CB11EFA513A684C4F9AE02.roa
Signing time:             Fri 30 Aug 2024 12:28:59 +0000
ROA not before:           Fri 30 Aug 2024 12:28:59 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     138197
IP address blocks:        103.166.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl
                          rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418 (0x58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
        Validity
            Not Before: Aug 30 12:28:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66d1bb0b-d7f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:75:12:93:8c:9d:20:51:05:f1:3d:9d:da:
                    5b:bf:be:d6:42:9f:37:cd:7f:b8:1d:e7:0e:c8:e6:
                    b9:1f:95:a8:ad:b7:0c:45:93:0a:d3:96:e0:d9:61:
                    47:97:ff:24:10:99:ff:8c:17:b1:44:9e:57:bc:a9:
                    f1:fe:4c:d4:d3:99:c5:d6:2d:d7:a5:c2:0a:20:a9:
                    57:43:7c:12:97:06:f7:d4:fb:82:9a:ab:30:d9:75:
                    95:b2:38:b6:37:40:15:c1:3d:1a:86:b7:88:2d:58:
                    c2:0d:8e:ef:0a:f8:d9:18:38:a8:ca:da:17:9b:9d:
                    88:fa:9a:f1:c4:eb:3e:26:55:4f:91:83:19:74:c5:
                    f4:6c:f4:01:0d:f8:bb:81:7a:16:dc:2c:1f:9e:dd:
                    c0:7b:af:54:d4:91:f7:85:e6:a1:5b:3b:ea:36:07:
                    04:5e:20:be:c2:16:81:0e:11:91:e6:06:49:dd:72:
                    c5:c3:50:2b:08:c2:ee:45:bd:bc:91:c1:a1:4d:a9:
                    59:a8:5d:d3:6c:e1:f8:24:9d:43:85:f7:00:98:a7:
                    02:d7:e4:c9:93:63:ec:90:15:3d:e8:6c:ad:0f:cd:
                    b8:18:d0:df:5b:5c:ef:82:0a:f4:9e:b7:ff:69:ff:
                    ab:a4:43:b4:6a:db:ca:0e:18:bf:26:9a:a2:bc:66:
                    c1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:03:37:26:01:1D:03:A1:22:A7:EA:0C:4C:F6:E5:DC:81:92:17:0D
            X509v3 Authority Key Identifier:
                keyid:19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/6E6A801066CB11EFA513A684C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:e0:da:c3:43:62:26:22:f6:1f:51:97:81:e6:56:f3:08:a8:
         0e:4e:e3:08:61:cc:d9:e0:29:2c:a3:08:f8:ac:2e:54:04:bf:
         6e:2b:b2:b1:c9:69:be:0e:b1:4d:d6:de:5a:c4:f6:68:ab:00:
         76:58:8e:c6:a4:0a:0b:1c:52:3d:92:ae:02:25:66:81:a2:0a:
         69:25:7b:95:bd:d7:1a:52:32:d7:61:8c:df:83:37:d4:ac:0b:
         a0:27:9e:89:be:11:97:52:ea:2e:8e:7d:4f:55:d9:be:a8:e2:
         eb:eb:be:01:00:4d:42:27:cc:29:a7:82:85:26:31:f0:b8:09:
         26:42:a6:d5:ae:29:a5:97:b3:c3:5c:b7:64:75:39:5e:ee:e4:
         ff:ab:05:2c:ca:f3:fa:95:c3:b2:01:1a:8f:5b:f9:cc:e3:1c:
         8a:10:33:64:90:8c:32:b8:b3:83:ef:31:95:0d:63:93:f9:a9:
         8e:3d:84:ce:37:f6:d1:6f:b7:42:d8:8a:bb:f9:88:a2:25:9b:
         50:6d:fe:bb:3e:7c:67:15:fa:d9:83:76:00:9e:e4:36:cb:38:
         2a:77:ed:a7:8a:68:aa:11:9c:99:68:db:6d:f8:21:12:b5:71:
         63:c4:cc:67:02:09:a4:74:81:90:cf:ad:51:06:c8:ba:63:22:
         a8:35:83:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:31 2024 by rpki-client on console-fra.rpki-client.org