Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9F6AA75820CE11ECAEA9140DC4F9AE02.roa
File:                     9F6AA75820CE11ECAEA9140DC4F9AE02.roa (raw, json)
Hash identifier:          fk7OZGBpXOEZyFxXcUzc4nVsLWOl2jhNA7RelPIs4+c=
Subject key identifier:   38:3E:95:4C:FB:65:E0:DD:95:14:A0:F7:BA:3B:F8:EB:CD:41:A8:57
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4560
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9F6AA75820CE11ECAEA9140DC4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:32:26 +0000
ROA not before:           Thu 05 Sep 2024 03:32:26 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     135908
IP address blocks:        103.82.196.0/22 maxlen: 24
                          2001:df6:2200::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17760 (0x4560)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:32:26 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d9264a-7a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b3:f3:df:ee:37:55:b4:2e:27:72:03:a8:18:
                    bc:e2:06:6e:8f:ef:47:4c:16:c4:7f:3a:07:b7:4d:
                    11:57:a2:6e:57:a4:a5:4d:96:90:0b:82:b6:2a:7f:
                    13:50:04:72:35:60:59:e2:95:b5:01:9e:0f:6d:c9:
                    b3:0d:47:80:13:2d:9b:ea:76:c1:3e:ac:32:5a:e6:
                    c0:a5:5f:bd:b5:e0:e3:ce:ae:4c:c3:48:50:8f:e5:
                    04:aa:28:d5:56:64:5a:32:e8:a3:12:70:2b:bb:0a:
                    7a:1c:42:91:48:9c:95:49:a4:49:4f:cf:96:2d:c0:
                    e5:cb:0f:76:a6:00:18:fd:cd:61:cb:c9:0a:f7:81:
                    71:e8:0e:68:1b:68:6f:e0:b4:9c:78:66:05:50:68:
                    02:ed:49:7f:76:6f:89:24:58:65:4e:8b:de:d0:03:
                    8b:d4:60:d4:56:34:97:3b:57:b8:d0:23:bf:3e:3e:
                    e7:92:6e:12:be:e0:c5:9a:c2:a0:b3:5b:ca:0b:5c:
                    7b:29:50:27:6a:48:7b:4a:7c:d1:f2:0d:db:5c:80:
                    61:54:63:d2:b0:3f:48:22:a0:e9:19:87:49:a2:93:
                    28:49:f2:85:1a:56:35:d4:6c:b2:d8:e0:a2:8c:ea:
                    14:ba:d1:65:90:66:91:ee:14:6f:c2:98:e2:2c:97:
                    65:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3E:95:4C:FB:65:E0:DD:95:14:A0:F7:BA:3B:F8:EB:CD:41:A8:57
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9F6AA75820CE11ECAEA9140DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.196.0/22
                IPv6:
                  2001:df6:2200::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:ca:49:a2:cd:40:6b:1b:7d:1d:5f:c5:8c:53:8e:fa:87:87:
         d9:f0:9e:c6:8a:f5:1b:de:1f:c3:93:3f:57:4b:f7:d6:1c:fc:
         6e:2e:9b:04:c1:1b:6c:ab:d8:f3:e1:c7:a1:c6:b9:93:5b:de:
         82:d5:b9:34:36:03:dd:2c:66:a5:d8:a4:95:3a:ea:8c:c1:40:
         a8:2d:78:77:24:b6:8f:7a:c8:1f:58:23:71:a1:3a:ed:02:ed:
         e4:0a:4c:34:e7:f5:89:f8:37:ca:5c:b1:94:c2:48:23:c4:fe:
         35:ca:a6:81:72:a8:77:0d:88:30:a1:9a:4e:1c:5e:9b:2d:af:
         7e:4b:53:17:4c:80:27:53:f6:40:16:86:59:61:0b:d3:25:9d:
         8d:e0:0c:89:06:4e:98:81:7d:8c:5d:38:41:69:c0:3f:03:e4:
         f2:36:2f:58:f1:f6:c0:21:6c:3e:d9:92:fa:f5:41:a0:0c:26:
         b8:a4:b5:d9:98:25:98:33:9c:4b:de:01:da:e5:b4:55:a6:06:
         87:4e:15:a7:3d:39:4c:9d:ed:5f:b6:2e:77:47:5e:1b:29:24:
         a1:1b:d7:76:41:f7:61:a1:0c:82:4f:35:f3:d3:04:3e:4a:d0:
         f3:b1:40:f5:34:43:ce:fc:28:18:5f:2a:de:18:12:5d:3e:08:
         3a:61:c6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:33 2024 by rpki-client on console-ams.rpki-client.org