Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/369F08805B9B11EFA3A8CD42C4F9AE02.roa
File:                     369F08805B9B11EFA3A8CD42C4F9AE02.roa (raw, json)
Hash identifier:          Gli5OQCk4vyOjqdnpdaCTjn5fToHVdIhE2QY52pSZqg=
Subject key identifier:   1B:3E:B7:96:5E:BF:D9:ED:AE:E2:23:0B:49:90:98:E3:6B:E0:A5:FA
Certificate issuer:       /CN=A91A1FF1/serialNumber=263A55146E3172CFD8F00A6BB17BCB0EC20915C6
Certificate serial:       02
Authority key identifier: 26:3A:55:14:6E:31:72:CF:D8:F0:0A:6B:B1:7B:CB:0E:C2:09:15:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/369F08805B9B11EFA3A8CD42C4F9AE02.roa
Signing time:             Fri 16 Aug 2024 06:46:07 +0000
ROA not before:           Fri 16 Aug 2024 06:46:07 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     26658
IP address blocks:        103.21.8.0/22 maxlen: 22
                          111.92.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl
                          rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1FF1/serialNumber=263A55146E3172CFD8F00A6BB17BCB0EC20915C6
        Validity
            Not Before: Aug 16 06:46:07 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=66bef5ae-9b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:23:62:1e:8e:30:96:b1:a6:96:3d:69:51:
                    d5:13:17:0f:16:d4:a6:6b:b2:91:80:d0:21:a1:ce:
                    db:16:1a:06:b7:62:0b:87:f2:9b:d5:8f:e1:23:51:
                    fe:7d:83:bd:46:4c:71:56:45:e4:ee:d1:f8:74:7d:
                    35:eb:77:e6:0e:73:b1:db:c3:03:f2:fc:b3:ea:39:
                    57:fb:43:8c:95:da:4a:07:92:b9:98:fe:57:b8:6c:
                    e7:a4:66:f8:40:5c:e6:86:2f:8e:91:9e:d1:39:1e:
                    0f:4f:e3:0e:5f:77:c8:e6:4f:da:9c:e0:90:39:bb:
                    8c:b2:77:95:59:9d:22:76:e4:69:04:05:3e:2c:3e:
                    94:f1:42:d7:a9:bf:f9:f4:23:48:34:21:f5:3e:a7:
                    93:f7:dc:ee:4e:85:c9:2a:47:19:36:be:2b:8c:64:
                    d0:67:99:e9:41:d8:1e:36:7c:eb:4d:7a:22:7a:05:
                    84:c9:f6:b9:fa:b6:2f:81:db:cd:db:65:76:57:b7:
                    2f:d7:a7:6f:50:c2:26:19:66:31:72:eb:f6:0a:4b:
                    cc:db:45:ec:96:9d:87:53:cd:6d:63:f4:de:65:9c:
                    01:ac:47:b1:1f:d2:e3:c4:81:81:77:75:b8:f9:1b:
                    67:5a:d0:aa:28:9e:a5:0a:c6:a1:8a:b7:b6:82:5a:
                    a6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3E:B7:96:5E:BF:D9:ED:AE:E2:23:0B:49:90:98:E3:6B:E0:A5:FA
            X509v3 Authority Key Identifier:
                keyid:26:3A:55:14:6E:31:72:CF:D8:F0:0A:6B:B1:7B:CB:0E:C2:09:15:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/369F08805B9B11EFA3A8CD42C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.8.0/22
                  111.92.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:6d:ee:a0:21:5a:0f:6b:86:3c:be:b1:90:46:db:fd:5b:af:
         7c:9f:14:07:52:a5:6a:37:3b:9c:03:de:89:23:a1:db:d4:f0:
         91:70:ce:ff:95:9d:4b:fe:6b:a7:7a:46:f2:0d:39:2e:cf:b6:
         d0:82:0d:45:01:a6:97:27:44:3c:9c:db:6a:c7:c3:fb:66:63:
         0c:64:4a:90:e4:b4:79:1a:fc:96:43:37:54:31:d3:72:56:f9:
         95:64:af:a6:82:5d:86:d1:b6:b2:7d:ae:9d:86:1e:11:03:f2:
         b1:91:e5:cb:04:a4:2d:eb:06:ea:01:6d:d3:15:c6:32:70:5b:
         86:0f:45:86:ea:34:d0:9b:d6:e5:36:3b:0d:1e:5b:97:4c:66:
         59:3d:3c:7e:e0:3c:21:bc:bc:e6:0b:89:8c:46:8c:66:6a:8e:
         18:ae:3e:6c:59:65:26:1f:a8:15:0c:18:4f:62:75:43:d5:e7:
         9e:4d:7d:79:c1:7a:02:65:65:f0:db:b8:16:38:1c:7b:92:c3:
         64:bf:82:1b:4e:d3:21:9f:18:81:44:12:0b:d4:67:02:fa:3a:
         82:09:f7:d2:d4:7c:82:3b:9d:c8:bf:cb:3a:f8:5b:2a:95:9e:
         46:d3:bd:d8:c0:3f:65:59:f6:68:39:7e:70:b9:1a:1a:2a:64:
         b7:28:f8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:47 2024 by rpki-client on console-fra.rpki-client.org