Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B6F4D1E27B1F11EFB3EE8B49C4F9AE02.roa
File:                     B6F4D1E27B1F11EFB3EE8B49C4F9AE02.roa (raw, json)
Hash identifier:          QLLbo32bhu2A/uNIFBeq01xoepLM5rzTyOBrrRnq054=
Subject key identifier:   19:7C:E8:42:C9:6C:E2:ED:B1:B7:C9:A8:24:41:00:1D:3C:C7:D2:D8
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       46FF
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B6F4D1E27B1F11EFB3EE8B49C4F9AE02.roa
Signing time:             Wed 25 Sep 2024 09:23:24 +0000
ROA not before:           Wed 25 Sep 2024 09:23:24 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     149085
IP address blocks:        103.184.124.0/23 maxlen: 24
                          2400:6760::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18175 (0x46ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 25 09:23:24 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66f3d68b-0256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c1:33:fe:66:74:bc:09:b0:87:77:db:c6:52:
                    65:91:7d:f3:66:4a:a7:49:44:b2:38:6b:42:24:aa:
                    b1:f5:3e:9d:b9:d8:07:9e:94:4e:dc:dd:99:65:e6:
                    8e:2b:89:0b:ef:97:93:2d:34:73:67:71:51:1e:13:
                    e7:6e:fd:69:e7:f2:44:84:40:5b:61:fe:d7:2b:33:
                    fe:ad:5c:75:31:58:84:af:4d:38:d5:cd:fc:a7:89:
                    12:74:a6:2f:8b:50:25:ce:7e:42:fb:44:e9:de:2e:
                    31:33:65:b5:0b:d9:9c:f2:0a:35:38:0d:65:af:ee:
                    fa:b4:c7:d0:f1:b7:f7:47:66:b9:3b:3e:1f:44:43:
                    01:22:de:9a:50:78:cf:ae:49:e6:0d:e8:23:ce:49:
                    09:b9:77:8d:78:c0:55:c1:23:d1:0e:42:da:f6:4b:
                    34:b1:ca:1e:28:3d:dd:ba:b6:1f:07:5f:5f:e0:a2:
                    ae:0f:7c:61:51:33:e6:99:09:9e:10:ed:5f:b3:eb:
                    08:32:17:80:6e:86:52:ac:43:86:13:2a:c9:52:65:
                    d2:63:4d:a2:b1:d2:0f:27:31:32:de:94:0e:fd:e3:
                    52:79:03:15:e5:68:9d:f0:23:5c:60:70:2e:84:95:
                    e6:78:03:d1:cd:a8:85:2a:3b:ff:14:3f:a1:ff:d2:
                    31:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7C:E8:42:C9:6C:E2:ED:B1:B7:C9:A8:24:41:00:1D:3C:C7:D2:D8
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B6F4D1E27B1F11EFB3EE8B49C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.124.0/23
                IPv6:
                  2400:6760::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:6f:f3:82:ed:65:57:d7:af:b1:5b:2a:9c:12:23:60:2b:8b:
         81:a0:a6:f2:07:ab:dd:ee:a0:f9:35:74:21:0c:29:fb:81:b1:
         8c:17:de:21:ef:bd:8b:b6:a3:5d:fb:a2:4d:9e:08:f7:00:b9:
         58:be:f9:84:00:7f:60:ee:a4:43:81:37:9a:39:3c:b9:53:ca:
         7b:1b:3d:c2:6a:92:23:10:8f:12:4a:4e:21:2f:54:c0:14:2b:
         e4:31:9e:34:b0:87:10:65:d8:70:31:3e:cf:ad:0a:92:06:c9:
         2b:d3:75:e5:61:70:bf:a7:76:94:80:55:36:71:6a:ce:17:7f:
         34:d9:51:28:6c:6a:a5:49:fd:18:17:0e:18:75:f7:49:c6:51:
         7c:73:97:54:91:f1:7a:20:33:2f:7e:1f:74:1e:a5:94:11:b1:
         18:75:c5:2d:60:28:46:2b:b2:cf:df:a3:45:4e:4e:d8:13:36:
         b0:61:27:31:39:f7:3b:ab:bf:f8:0a:3a:2e:db:33:3c:cb:6a:
         d1:2c:c8:bf:f3:41:82:98:3f:af:9b:7c:bf:2e:6e:15:1f:b1:
         59:bf:6b:1f:06:5a:5f:33:78:28:0d:d4:67:84:23:c5:75:4e:
         eb:6b:85:0f:71:63:71:e0:8f:8a:52:74:95:46:7d:4f:5b:54:
         e2:9d:37:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:33 2024 by rpki-client on console-ams.rpki-client.org