Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/94BB642EAC2D11ECBBCB2721C4F9AE02.roa
File:                     94BB642EAC2D11ECBBCB2721C4F9AE02.roa (raw, json)
Hash identifier:          RagovTlxACFbNr+zJLkm/iefHIIzoDdsR4NWYdUZOx0=
Subject key identifier:   B5:F3:D1:52:59:B0:F4:FC:BF:02:36:E9:F3:9D:C7:1B:A8:D3:8F:06
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4684
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/94BB642EAC2D11ECBBCB2721C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:36:39 +0000
ROA not before:           Thu 05 Sep 2024 03:36:39 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     63751
IP address blocks:        103.221.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18052 (0x4684)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:36:39 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d92746-caf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:00:07:ee:1a:c7:18:63:a8:66:42:6b:46:8c:
                    da:b7:c8:bc:da:06:6f:01:a1:b2:be:9f:48:e3:36:
                    ca:bf:dc:07:82:28:a3:39:51:48:c6:9c:84:24:7c:
                    c7:5d:82:8b:2f:1f:f3:8b:91:a7:7c:00:d6:fa:ee:
                    6d:09:99:30:20:86:b0:e2:1a:8c:04:d4:68:1c:d5:
                    80:6d:17:0e:fa:c3:70:61:f5:29:6c:17:3a:28:5f:
                    43:8a:d7:cd:86:c2:0f:5a:0d:1b:03:5e:8c:24:81:
                    7d:c7:f2:0d:ef:ba:2d:50:8a:73:fa:5d:8b:a7:cd:
                    18:28:b2:63:9d:3d:53:1f:f0:59:5b:fb:8e:e8:5e:
                    e0:07:d6:fd:6a:64:16:ca:b4:1c:c9:12:53:5f:df:
                    fa:8d:3f:57:88:b1:77:27:c0:62:8c:68:d3:60:5f:
                    0b:c3:54:0e:05:06:0b:37:f1:30:8e:ab:a0:f8:15:
                    14:b6:48:b8:d1:dd:ba:19:d3:49:03:2f:e9:1a:bb:
                    4e:2f:a4:7e:5c:3a:aa:47:61:e9:b1:6e:f1:7a:94:
                    bc:ba:f6:1a:59:2a:69:37:f2:b9:d0:b9:30:8e:c2:
                    58:96:0e:8c:7b:f8:c5:c9:e7:f2:4a:68:97:79:f3:
                    f4:59:a8:46:6c:92:06:79:d3:83:c9:75:60:90:c7:
                    78:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F3:D1:52:59:B0:F4:FC:BF:02:36:E9:F3:9D:C7:1B:A8:D3:8F:06
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/94BB642EAC2D11ECBBCB2721C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.221.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:ab:07:ba:04:fa:48:b4:c5:16:a1:16:7c:c9:58:1f:f9:42:
         9d:58:d2:f6:31:5b:88:26:bf:b7:11:62:14:08:61:98:d2:7e:
         5c:01:20:2a:36:ae:9a:15:d7:36:55:02:55:ed:26:fd:ac:c0:
         fd:8b:69:34:d1:10:01:49:05:9b:44:06:9f:91:d7:c8:17:62:
         02:ad:59:ae:54:70:9d:06:56:3e:85:e4:6a:fd:d7:f8:28:2f:
         41:4e:db:c0:17:e0:82:e8:ea:0b:7d:e9:d3:df:69:53:1b:a5:
         a0:ad:78:61:81:c5:b6:16:8f:5c:02:57:f7:04:e4:31:2c:be:
         43:45:cc:96:5c:db:db:ed:e0:93:89:00:6c:76:12:8c:e0:73:
         cf:70:45:cb:1f:19:0f:3e:92:2d:1a:6d:f9:1c:eb:75:75:c3:
         63:3e:1b:79:4d:f1:3d:0f:95:10:1c:3d:d6:92:5b:36:0b:34:
         b1:75:88:e3:3d:ee:11:4e:45:4b:40:0f:2a:5f:3f:c9:50:44:
         20:98:cc:c1:13:8a:8d:95:2c:b9:37:e9:2a:04:5b:8d:57:e7:
         57:69:50:89:c0:f3:da:98:eb:c6:6b:31:a6:ab:9d:b0:f5:29:
         b0:db:3f:01:d6:f2:9a:6b:1e:25:63:e2:f5:55:4e:e6:04:d8:
         e3:26:89:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org