Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/0C2902B4FC3D11ECAD619C35C4F9AE02.roa
File:                     0C2902B4FC3D11ECAD619C35C4F9AE02.roa (raw, json)
Hash identifier:          hVypcOVVHiw3xkPQvZdEii5XB06efgTyPBfdlHWp4xo=
Subject key identifier:   A7:D2:12:65:0A:B2:D5:A7:0B:71:AA:4E:67:3B:0F:64:2E:74:30:72
Certificate issuer:       /CN=A91A40AE/serialNumber=4BDD5606CEE3838731B276EB5AE2740955E6E835
Certificate serial:       01FA
Authority key identifier: 4B:DD:56:06:CE:E3:83:87:31:B2:76:EB:5A:E2:74:09:55:E6:E8:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/0C2902B4FC3D11ECAD619C35C4F9AE02.roa
Signing time:             Thu 27 Jun 2024 03:44:46 +0000
ROA not before:           Thu 27 Jun 2024 03:44:46 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     137853
IP address blocks:        103.115.172.0/22 maxlen: 24
                          2402:eb40::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl
                          rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506 (0x1fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A40AE/serialNumber=4BDD5606CEE3838731B276EB5AE2740955E6E835
        Validity
            Not Before: Jun 27 03:44:46 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=667ce02e-d953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:e5:d0:b6:85:77:19:5f:5a:8a:e5:a6:bb:
                    11:32:f4:7f:da:9c:71:ec:f7:5d:04:2a:38:4d:89:
                    66:51:ef:28:c6:8b:f4:29:ac:19:95:4a:bc:98:c9:
                    64:b0:bc:a3:ce:9f:e6:ce:8d:98:85:50:e3:52:b3:
                    b4:87:a3:9d:96:cb:58:2f:95:14:71:74:4d:40:76:
                    9c:67:36:1a:fb:8c:0d:d4:46:d7:b8:78:4a:92:83:
                    02:f6:0b:08:e6:c1:df:31:c7:1c:9b:01:23:43:da:
                    d8:76:7c:09:64:ba:10:0d:82:90:77:e0:ea:0c:85:
                    5d:19:92:43:df:b3:5e:9b:05:ce:b5:26:e8:a3:04:
                    9e:ed:25:e2:44:47:ef:c6:db:bf:20:61:d3:d1:0b:
                    62:22:42:3c:b4:f5:74:8f:cb:9b:ba:e2:2c:36:10:
                    0b:76:ff:2a:96:da:00:bd:c2:88:cc:c1:ee:2b:0a:
                    a3:0c:7e:35:44:15:a3:17:b4:88:e1:4d:a5:5b:d8:
                    1a:b0:2e:e0:5b:4d:69:45:5e:59:29:95:58:37:de:
                    de:a0:bd:93:fb:b1:4e:2a:d6:55:c9:f3:b2:4d:f3:
                    60:20:b8:dd:d5:32:8c:4d:24:41:5f:f8:05:a4:53:
                    e7:30:2d:17:85:6c:3b:52:e3:31:e8:cd:06:bb:cb:
                    89:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D2:12:65:0A:B2:D5:A7:0B:71:AA:4E:67:3B:0F:64:2E:74:30:72
            X509v3 Authority Key Identifier:
                keyid:4B:DD:56:06:CE:E3:83:87:31:B2:76:EB:5A:E2:74:09:55:E6:E8:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/0C2902B4FC3D11ECAD619C35C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.172.0/22
                IPv6:
                  2402:eb40::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:39:08:05:9d:6a:4d:18:39:28:8e:8e:66:05:a9:14:2b:e3:
         12:8d:c8:31:cf:21:e0:81:01:12:49:97:a1:15:b4:a3:48:e6:
         32:51:3d:3b:de:c7:4b:77:0a:c5:0c:63:7a:9a:69:1d:ef:a3:
         c0:1d:e5:75:49:91:29:dc:c7:23:5f:31:a8:4b:22:77:e0:43:
         73:6e:ba:2d:bb:47:f5:5c:54:d1:bb:2a:e5:08:10:38:76:de:
         9e:60:ee:02:43:c6:83:2e:62:83:f6:e2:a2:d6:e8:e3:e4:a4:
         7f:dd:ad:11:2b:b6:4c:f4:29:a3:88:0d:ec:81:67:86:4d:74:
         ae:62:70:f1:d5:0c:09:56:3c:16:b7:44:63:fd:85:84:32:a8:
         c1:be:de:5d:83:67:d4:9b:2b:a8:28:5b:eb:e9:8a:39:5c:a2:
         a0:6d:0c:f4:62:01:31:8e:02:30:46:0f:5e:f2:2f:60:14:fc:
         27:89:95:c5:f8:1f:b1:56:17:36:51:31:5e:e5:a9:1c:94:70:
         64:07:64:47:85:c0:36:c2:bb:eb:3b:7c:ff:c4:60:74:65:29:
         70:ea:fe:1f:39:db:2f:19:01:8b:98:3c:35:a0:55:5c:d7:bb:
         5b:62:a9:78:5e:3b:49:65:03:ab:44:fc:18:3d:a0:48:ee:0f:
         56:c8:26:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:46 2024 by rpki-client on console-ams.rpki-client.org