Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9FE1EC3A655D11ED8378684BC4F9AE02.roa
File:                     9FE1EC3A655D11ED8378684BC4F9AE02.roa (raw, json)
Hash identifier:          or81d9QGpw9qxBhYiQjGxYLwaeuECFJP8y3VA8AcIMk=
Subject key identifier:   46:5D:48:0D:05:8A:C7:6E:09:12:99:14:41:AA:DD:06:07:C6:FF:BE
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4689
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9FE1EC3A655D11ED8378684BC4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:36:43 +0000
ROA not before:           Thu 05 Sep 2024 03:36:43 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     63758
IP address blocks:        103.74.112.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18057 (0x4689)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:36:43 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d9274b-8e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4d:10:13:5e:37:a6:26:40:87:c6:51:31:0d:
                    cd:27:50:8e:58:40:41:f5:d4:dc:04:62:37:fc:3d:
                    27:f4:98:88:a5:65:e9:a8:9f:8e:d6:9b:c3:93:6a:
                    89:b0:1d:67:3b:75:d7:6d:e0:bf:7f:3a:02:9c:0d:
                    51:79:ca:99:44:cd:bf:0b:16:a0:7a:8b:ea:e8:77:
                    dc:70:82:3a:0f:1b:42:70:c4:df:21:68:0a:57:d7:
                    75:1a:91:e9:f7:f3:f1:e0:41:08:3f:37:3f:ef:35:
                    96:52:6a:63:86:fe:c7:ca:db:0a:de:2b:d4:03:d8:
                    97:23:02:13:23:74:92:68:16:81:45:06:f1:fc:44:
                    9b:cf:ff:de:4a:36:2c:bd:96:9b:40:3a:65:5d:e6:
                    fc:41:1f:ce:67:69:9d:b9:0a:66:de:c5:a9:84:ef:
                    89:9a:2b:15:89:cc:f4:a0:a9:5e:4c:c5:9e:c3:ae:
                    b3:0d:22:85:39:46:13:ed:b1:6f:70:4c:21:b1:07:
                    75:43:a1:02:78:64:c2:15:b3:46:6f:cc:01:76:77:
                    d5:c2:e8:2e:87:77:0e:9c:a6:02:13:38:51:60:8b:
                    95:0b:2b:62:01:f4:d8:25:12:98:34:7c:67:91:b2:
                    c6:60:64:8e:10:46:21:38:1c:e5:cb:10:9f:88:fe:
                    a0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5D:48:0D:05:8A:C7:6E:09:12:99:14:41:AA:DD:06:07:C6:FF:BE
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9FE1EC3A655D11ED8378684BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:b1:27:12:1e:61:8c:ef:37:ab:b6:51:ba:76:6b:fa:5f:a4:
         91:2f:d4:c3:07:8c:70:f7:95:05:bd:23:4c:f3:87:d2:82:be:
         1a:a5:df:d8:e2:25:dd:99:d1:72:ee:33:1a:93:01:80:7d:16:
         9c:d4:e6:2e:63:f4:67:4b:9f:49:69:d1:29:7d:d8:c5:42:6f:
         76:c2:ef:67:17:4e:5c:ae:1b:a6:d1:79:e7:10:88:ad:77:e9:
         fc:35:ae:8e:ca:33:7d:fd:65:e6:93:b9:5e:a9:9c:e2:45:1d:
         52:76:93:17:63:7c:cd:f8:d8:49:9f:be:ef:c4:f3:08:7a:a5:
         63:c4:85:85:ed:75:b4:b7:74:cb:7b:86:09:7b:3f:22:22:9f:
         a9:f8:78:ab:76:2b:25:d2:5e:55:73:3e:50:59:80:96:ab:03:
         bf:45:b8:37:ea:f5:27:61:cd:85:03:92:63:66:02:4a:8e:46:
         28:ad:08:e3:0f:f5:6f:0d:20:15:a4:cf:34:94:e9:0e:3e:db:
         12:ab:48:c5:db:e3:59:b1:0d:a1:a4:fd:b7:98:f7:e1:10:0d:
         3e:99:eb:1f:75:04:e4:5d:26:c1:94:ee:be:b5:7f:97:09:b9:
         a8:55:bd:3b:1c:2c:18:be:c6:ac:60:d9:35:2d:07:1f:5f:99:
         da:85:4c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:33 2024 by rpki-client on console-ams.rpki-client.org