Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/93345262B1A211EC9DDE9259C4F9AE02.roa
File:                     93345262B1A211EC9DDE9259C4F9AE02.roa (raw, json)
Hash identifier:          0G0qP0pKq4V9JTl3MYwMywISjxHCJBjQmRpyv0pGYOA=
Subject key identifier:   D8:BC:C7:09:A0:7A:3F:A5:B9:C6:1B:42:21:A0:19:D8:CC:31:70:C8
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       457E
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/93345262B1A211EC9DDE9259C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:32:52 +0000
ROA not before:           Thu 05 Sep 2024 03:32:52 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     135964
IP address blocks:        103.82.204.0/23 maxlen: 24
                          103.136.114.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17790 (0x457e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:32:52 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d92664-d8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:5c:13:df:48:93:7a:85:10:00:31:16:3d:
                    33:d6:c0:37:fb:47:34:14:53:1c:bb:c7:db:de:7b:
                    d0:0b:0d:b2:17:a5:83:69:21:b8:62:5f:6a:ce:25:
                    ee:17:8b:36:cf:75:9d:6d:52:99:b4:56:9b:07:c6:
                    d9:08:24:7e:76:6a:39:19:1b:91:60:3d:d8:fa:48:
                    e2:b3:74:93:6a:86:d0:df:18:9d:54:a0:0c:5b:47:
                    c1:be:35:0c:e0:0d:ce:6a:e7:4c:9a:8c:7d:be:85:
                    c7:6e:68:f2:01:64:dc:13:7c:ad:a0:05:47:7e:5c:
                    48:74:70:12:1f:5d:24:26:e5:37:9c:17:64:3d:28:
                    fb:04:f5:e2:4f:fa:59:4e:12:9d:8e:ec:50:1e:3f:
                    58:77:c6:5e:24:e9:2e:53:77:2f:45:14:ea:e5:5c:
                    1e:e5:9e:e6:f5:4d:42:18:55:9f:6e:50:be:fc:56:
                    bd:7b:66:6e:07:d3:a0:09:f1:08:71:ac:be:57:d7:
                    bd:24:0d:9c:c8:b3:2c:f6:0c:df:df:72:af:09:d5:
                    bf:c1:1c:26:34:cb:63:9a:48:36:66:37:9a:5a:c5:
                    70:c8:13:d2:18:dc:90:1b:88:62:02:2c:41:8a:81:
                    79:1e:3c:48:72:9f:fe:27:f3:28:bf:43:4d:c9:1b:
                    11:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BC:C7:09:A0:7A:3F:A5:B9:C6:1B:42:21:A0:19:D8:CC:31:70:C8
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/93345262B1A211EC9DDE9259C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.204.0/23
                  103.136.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:85:ae:e6:00:e6:73:a9:ee:74:ab:c5:63:33:db:06:9a:72:
         e1:75:7f:3f:19:e5:07:89:57:1e:82:c9:d3:47:81:ab:9b:d6:
         af:ca:d3:1c:bd:19:dd:10:57:04:f1:30:0f:a9:3f:60:b5:c8:
         90:a2:4a:f9:84:87:b7:65:e9:3e:f1:fb:14:1e:2d:02:9f:73:
         d6:4c:58:f5:1d:cf:35:42:8e:20:a5:cb:95:7b:90:2c:af:61:
         6d:de:0a:a6:ac:77:8b:96:b0:d5:82:05:cf:77:eb:22:e1:42:
         fe:06:42:b1:18:e0:01:6b:0d:ff:71:03:0e:2d:f7:1a:3b:b1:
         a3:14:49:cc:ee:ff:94:a7:42:0e:7a:ce:1e:e0:36:ba:e4:63:
         be:6c:f7:fe:a5:00:f5:08:a1:a9:44:c7:17:af:87:9e:d7:e2:
         55:1c:6c:dc:a7:5b:56:6a:15:a1:71:de:ad:a8:7e:c0:34:6c:
         0a:22:aa:b4:43:97:f0:d8:c3:fb:80:f5:7a:9e:b0:9b:83:df:
         91:a0:10:22:73:ae:ed:88:e8:1d:19:67:0d:23:4d:61:8f:94:
         b2:97:70:e7:b0:1b:77:9b:f1:1f:7a:f7:75:e8:02:29:6f:e4:
         85:5b:9c:80:6e:5f:62:f2:1c:ee:f3:72:67:99:8e:07:ab:1c:
         64:34:3c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org