Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/A231B9362CEA11EC8F99F486C4F9AE02.roa
File:                     A231B9362CEA11EC8F99F486C4F9AE02.roa (raw, json)
Hash identifier:          8LKcnydJB5oW4TBJzLAGx/1DAq+7TANc8tWAErbpeDg=
Subject key identifier:   FD:11:36:EE:D0:47:5E:EB:50:95:04:E3:CE:DC:6F:34:B7:34:AB:F4
Certificate issuer:       /CN=A91A13C2/serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA
Certificate serial:       0456
Authority key identifier: EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/A231B9362CEA11EC8F99F486C4F9AE02.roa
Signing time:             Tue 12 Nov 2024 23:52:44 +0000
ROA not before:           Tue 12 Nov 2024 23:52:44 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     140944
IP address blocks:        103.153.162.0/23 maxlen: 23
                          2407:6dc0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl
                          rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1110 (0x456)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A13C2/serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA
        Validity
            Not Before: Nov 12 23:52:44 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=6733ea4c-96a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:52:ff:0d:88:39:24:62:74:87:a6:1a:3b:b3:
                    27:af:71:e3:a7:e6:91:64:39:71:25:1f:bb:e6:c4:
                    99:87:b5:85:6e:97:5b:ff:a0:9b:a8:63:0b:e8:aa:
                    66:d6:55:fd:ed:38:8e:ac:b2:a3:7e:34:14:34:f4:
                    f6:32:7f:c3:76:b1:b1:b7:2f:1f:43:e4:6d:bc:8f:
                    df:38:7c:9b:87:e7:f3:1f:55:89:d1:35:be:73:e9:
                    fd:50:01:8c:67:35:17:0e:1b:08:be:4e:e4:2f:b1:
                    39:c8:d8:59:47:61:35:99:1c:e7:85:42:48:96:77:
                    94:d5:e1:3a:1d:c4:d9:06:a8:6a:f9:fa:36:8f:45:
                    c5:ca:31:88:25:18:ec:cc:4c:74:7e:f0:3e:df:29:
                    db:dc:91:ed:bc:42:9e:81:1d:9d:22:98:48:91:b4:
                    2f:93:9a:38:d4:c0:28:b7:0e:b7:ae:69:1c:cc:df:
                    fe:7a:0e:36:19:50:36:31:70:f4:04:d7:7e:e8:0b:
                    33:55:1f:e5:75:40:43:de:22:06:e4:9c:7c:4a:51:
                    79:78:5e:ea:86:b8:fe:1d:32:ca:47:99:fc:18:27:
                    c4:9a:50:04:16:ac:1c:4b:5f:ed:4a:85:ab:30:7b:
                    0f:48:55:03:5a:0b:4c:23:3f:7a:99:0b:03:f5:a9:
                    bf:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:11:36:EE:D0:47:5E:EB:50:95:04:E3:CE:DC:6F:34:B7:34:AB:F4
            X509v3 Authority Key Identifier:
                keyid:EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/A231B9362CEA11EC8F99F486C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.162.0/23
                IPv6:
                  2407:6dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:5d:7a:21:e2:85:a8:e6:68:e5:56:00:19:c7:43:28:32:d9:
         75:e6:e0:d7:dd:9a:c1:d0:6e:53:46:4a:ac:58:5c:0b:b2:e6:
         6d:58:e2:49:f1:d4:19:99:2e:d9:5b:57:30:18:51:05:7e:e8:
         2f:1c:dc:75:c5:22:d2:ae:1a:f5:82:46:f3:90:65:fc:8d:3c:
         53:fd:00:a3:d9:98:b1:6c:19:6e:24:64:de:51:7a:6a:7f:40:
         e3:1d:f4:e5:1b:96:7c:0b:7f:fe:64:42:4a:2c:4a:2e:c6:b7:
         17:dd:95:41:27:53:53:9d:73:6f:39:26:cc:79:ac:95:4b:0a:
         cd:80:74:2b:5f:24:3c:bb:d1:d7:bb:c9:eb:1b:5d:74:84:17:
         37:b5:af:0b:a4:27:df:e5:c3:ec:ac:2e:29:40:cf:d9:76:dd:
         81:50:b9:70:73:7a:7b:a2:9d:53:45:50:98:db:fc:32:e6:17:
         94:73:db:96:0e:34:c6:b5:81:a9:92:da:85:71:3d:99:49:71:
         9b:ba:9a:18:9f:b7:e9:9b:2a:b4:bc:0f:d4:5a:9e:1a:bc:ec:
         c5:5f:24:6b:11:83:e8:b1:22:32:c7:d8:42:ce:c8:72:3b:00:
         24:1c:65:e3:96:da:59:03:5b:13:3f:af:26:23:c9:70:ba:f9:
         c9:d1:ca:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:56 2024 by rpki-client on console-fra.rpki-client.org