Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/86F9CBCC2AB711EF996EC819C4F9AE02.roa
File:                     86F9CBCC2AB711EF996EC819C4F9AE02.roa (raw, json)
Hash identifier:          dEaYlEkH9R7ZFvmgUUxoyfXOgBDXEq+zy0JoQWINyBs=
Subject key identifier:   A6:D8:1F:72:8C:CC:28:EE:3B:2E:F0:52:65:BC:EC:3C:7E:63:2E:27
Certificate issuer:       /CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC
Certificate serial:       06
Authority key identifier: ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/86F9CBCC2AB711EF996EC819C4F9AE02.roa
Signing time:             Sat 15 Jun 2024 01:36:26 +0000
ROA not before:           Sat 15 Jun 2024 01:36:26 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     149299
IP address blocks:        103.25.10.0/23 maxlen: 23
                          103.25.10.0/24 maxlen: 24
                          103.25.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl
                          rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Oct 2024 04:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC
        Validity
            Not Before: Jun 15 01:36:26 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=666cf01a-2271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3b:85:4a:c2:dc:24:0f:2d:ca:6d:9b:89:bb:
                    d7:0e:1a:f2:a6:61:8a:65:74:9b:6e:4d:6c:84:95:
                    75:4f:3f:64:b6:49:d2:e6:19:12:8b:40:ef:10:48:
                    95:78:15:12:be:ce:5d:ae:60:80:81:13:7d:60:41:
                    b1:dc:a0:21:01:64:87:44:b7:6c:c1:88:72:95:20:
                    74:d0:69:7f:3f:2c:91:bd:a1:d2:a0:bf:f8:17:58:
                    2c:ce:82:8f:85:35:35:6b:3e:8f:ee:cb:18:77:9c:
                    58:fe:c2:3c:51:8d:21:16:12:73:ee:1a:9e:ae:0b:
                    44:ea:ea:a9:ee:5e:18:d7:b3:e5:c0:26:48:23:31:
                    f9:d7:26:37:ee:a7:b2:a3:32:dc:96:13:6e:ca:8b:
                    b0:eb:52:38:dc:6f:09:33:ef:af:aa:53:6d:4f:7f:
                    42:cf:f3:76:e6:b5:fb:3f:a6:5b:8b:07:92:98:54:
                    5b:71:60:eb:22:72:66:92:0b:67:dd:99:62:86:6b:
                    7d:b3:0a:12:b4:a2:87:72:22:1c:3d:a1:bd:03:b1:
                    8a:e6:c3:84:37:39:a2:61:5c:b0:55:f7:37:bc:80:
                    76:c3:03:c8:3e:a4:f2:ba:51:47:d0:a0:f2:e5:e9:
                    c4:f0:e3:ea:46:9a:ee:15:b2:d5:a5:98:3b:8b:c8:
                    80:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D8:1F:72:8C:CC:28:EE:3B:2E:F0:52:65:BC:EC:3C:7E:63:2E:27
            X509v3 Authority Key Identifier:
                keyid:ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/86F9CBCC2AB711EF996EC819C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:bd:96:3e:51:cb:31:27:5d:48:4d:3c:b5:fe:21:39:08:7e:
         bc:41:25:fb:59:da:e7:a9:ac:f2:dc:f8:4f:95:6d:11:de:21:
         1e:19:a5:15:78:ca:c7:4f:62:82:bc:25:e7:9c:20:51:5d:4c:
         b9:06:62:25:76:32:57:8d:5d:23:c0:97:b1:38:e9:cb:61:bb:
         a8:de:b1:2b:b0:df:db:2a:90:c7:a6:2d:05:27:fc:c9:4d:96:
         e3:47:38:a3:53:4d:d0:10:7e:bb:33:f9:70:8e:49:a5:a7:91:
         6f:4e:25:ce:96:d9:c9:24:37:b5:39:fd:d8:f1:e9:3f:ad:22:
         76:e9:d6:17:05:40:f4:20:0a:d4:77:6f:30:4e:74:3b:54:d0:
         0b:7e:55:45:29:6c:59:e1:8f:ed:0c:ba:18:61:19:5b:26:7a:
         06:0f:e6:bc:4e:2a:c4:73:2b:4b:11:d6:80:a3:ed:09:21:96:
         dc:33:0a:b0:d5:9a:33:15:f0:db:bf:e5:cc:96:3c:d4:fe:07:
         ca:14:dc:4c:30:99:8b:97:aa:f6:65:4f:a7:27:e3:d0:c9:44:
         86:df:46:f3:f9:e3:74:14:f6:e0:e6:b5:cd:a5:a2:ff:3d:db:
         31:fa:dc:d2:83:b3:e2:54:31:0d:2f:91:44:ab:aa:2c:a4:e7:
         bd:60:76:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 06:46:18 2024 by rpki-client on console-fra.rpki-client.org