Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2561D00063DE11EC8CB33722C4F9AE02.roa
File:                     2561D00063DE11EC8CB33722C4F9AE02.roa (raw, json)
Hash identifier:          kWY228kKhwfNAaLn0WzhFXEm2JcRjYrrckQhxupmUj8=
Subject key identifier:   9D:3F:B9:17:88:91:47:AB:9F:65:2A:F6:67:CC:24:4B:ED:12:69:D0
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4651
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2561D00063DE11EC8CB33722C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:35:55 +0000
ROA not before:           Thu 05 Sep 2024 03:35:55 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     38736
IP address blocks:        203.119.60.0/22 maxlen: 24
                          2001:dc8:1000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18001 (0x4651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:35:55 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d9271a-875c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fb:9d:17:d9:53:e1:5f:ac:61:21:74:f3:7a:
                    9c:7e:dd:f2:0f:74:6b:8c:44:58:e3:c0:c4:df:9c:
                    ba:3a:5a:e8:14:a1:c1:3c:66:6e:fe:e9:04:e8:07:
                    ad:12:f1:c5:b4:33:c0:13:b0:ec:4d:f6:7f:b0:3d:
                    59:7d:8b:c3:3b:9b:2b:f5:de:bb:2d:86:7e:df:c9:
                    12:a9:33:a8:46:00:12:ae:af:5b:35:c3:2e:d3:42:
                    79:f7:21:ae:a9:54:e3:b6:6b:a9:79:4c:d9:be:fc:
                    e7:0a:bc:39:a8:c2:83:f8:86:3d:1a:8d:7b:fc:e8:
                    29:eb:73:72:4e:7a:f0:6e:46:33:35:d6:28:a0:e8:
                    b0:64:3f:f2:cf:38:32:7e:d2:79:22:ac:c1:ca:86:
                    e2:6d:c4:56:82:b6:9b:d6:da:48:23:fb:0e:3f:49:
                    b0:d9:79:34:e3:95:94:10:30:66:62:65:86:e5:bb:
                    e6:a0:50:c3:b3:6b:7b:d3:cb:5f:84:7d:47:3c:d4:
                    3e:37:84:6a:a9:5a:b0:e3:33:95:5f:70:fb:de:de:
                    66:62:d1:0a:4e:86:0b:e3:b7:65:df:f5:82:8b:5e:
                    bb:a8:aa:96:79:a7:34:2a:19:05:24:86:94:b7:05:
                    6e:1b:a7:23:6c:23:92:d8:75:73:d1:2a:bc:ce:64:
                    47:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3F:B9:17:88:91:47:AB:9F:65:2A:F6:67:CC:24:4B:ED:12:69:D0
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2561D00063DE11EC8CB33722C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.60.0/22
                IPv6:
                  2001:dc8:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:ef:ce:5b:92:d2:86:a6:a8:48:ed:a0:86:06:a5:3a:fe:fd:
         9b:16:6a:f6:50:b9:8e:8c:76:35:fe:2e:ed:f4:a8:7f:c0:94:
         54:7b:df:36:43:70:f3:5f:b7:5a:fb:b7:85:c1:3a:62:92:c9:
         40:24:7b:53:7e:76:d3:9b:2f:be:f7:d5:6e:c8:a6:36:12:fd:
         50:ad:31:4c:ca:51:b2:9f:ea:d6:6f:6d:e0:51:0e:68:78:4a:
         52:7a:a1:e3:32:05:40:5c:2b:e5:7f:26:26:b3:f4:a8:df:12:
         09:3b:4f:5b:f8:3d:e6:a4:09:b6:50:83:07:d0:4e:85:73:48:
         34:37:8a:bf:60:a4:e2:d2:8b:62:df:2b:84:1d:52:b8:6e:cd:
         15:33:ef:3c:06:f5:64:f9:08:0e:21:0f:5d:4e:7c:cf:88:9b:
         f2:98:3f:f3:bb:23:96:f6:aa:c7:85:39:c3:73:db:d1:05:ee:
         62:7f:f3:38:da:78:c0:f5:69:44:92:95:f6:47:22:90:98:39:
         a8:fd:65:de:07:92:fe:da:f7:ec:51:db:a7:77:66:cb:2f:18:
         16:e5:fa:60:af:b3:e3:14:5f:6b:cb:c9:e3:db:14:2e:46:b5:
         5e:c1:e2:09:78:5e:24:84:0e:75:6c:4b:fe:85:b6:7e:85:5e:
         ba:c5:9f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org