Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBDD8CBC8F5711EEBEA97C2DC4F9AE02.roa
File:                     BBDD8CBC8F5711EEBEA97C2DC4F9AE02.roa (raw, json)
Hash identifier:          u50eitfUCOaeRuTR/jYWQ0NMq+8RcCSDyaN9gUyzyFs=
Subject key identifier:   F0:8D:3E:A2:DA:10:CC:B0:E2:E9:D0:38:0B:E5:E3:B6:E0:71:8C:40
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       45B7
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBDD8CBC8F5711EEBEA97C2DC4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:33:42 +0000
ROA not before:           Thu 05 Sep 2024 03:33:42 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     149068
IP address blocks:        103.72.96.0/22 maxlen: 24
                          2001:df0:1b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17847 (0x45b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:33:42 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d92696-67af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d9:b5:f0:34:c0:ec:a7:3a:e7:f9:a4:b3:1e:
                    e8:97:89:71:2b:5d:f9:18:38:0c:ca:e0:9d:8a:c2:
                    16:5c:aa:c0:ae:35:35:dd:1e:7b:ba:cd:79:37:f0:
                    21:be:04:b6:92:81:11:55:01:c6:48:6c:69:59:27:
                    f8:c4:50:13:01:ba:89:31:9e:5f:c3:14:e5:ac:c3:
                    cb:ec:50:7b:2d:5d:1b:3d:1c:c3:72:22:d9:61:00:
                    8e:19:23:99:d4:11:03:00:08:1d:69:e7:ec:79:c2:
                    7c:25:a4:93:3a:7c:a8:26:18:7e:29:2c:8d:bd:ca:
                    d5:34:4c:53:af:bb:e1:a7:67:b8:09:e3:1a:4b:a1:
                    17:b8:f9:d3:9c:c2:bb:31:7c:c7:47:ee:4e:bb:95:
                    c1:0a:da:f6:24:00:dd:71:17:a0:3f:ca:55:22:62:
                    32:20:08:20:5b:14:a2:f4:41:ce:21:a8:db:c3:fd:
                    bb:31:27:b9:5f:f2:54:a9:39:ca:1a:57:a8:22:32:
                    43:35:36:ad:51:c1:e8:54:21:7a:e9:99:8f:d7:a5:
                    6d:2b:a6:fc:8c:09:92:6e:42:d7:d8:75:98:29:41:
                    b9:98:7a:fa:62:48:b8:a5:49:2c:48:b1:32:49:12:
                    88:cb:76:ba:cf:51:1b:5f:d4:46:4f:ad:8a:59:ed:
                    f9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8D:3E:A2:DA:10:CC:B0:E2:E9:D0:38:0B:E5:E3:B6:E0:71:8C:40
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBDD8CBC8F5711EEBEA97C2DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.96.0/22
                IPv6:
                  2001:df0:1b::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:1b:77:22:06:d4:12:04:ef:30:3f:18:f6:1e:b8:e8:ad:45:
         f8:5a:48:79:25:43:24:9c:f1:88:72:73:b3:61:d4:a7:9c:a7:
         ed:04:9f:e9:ff:ca:a2:20:23:2a:e5:7d:d3:58:c6:bf:5f:64:
         5d:65:56:7b:bf:8a:88:64:ed:36:49:bf:22:f3:9b:18:87:22:
         44:e4:3d:70:8b:f3:82:39:83:bf:bf:32:34:e6:e8:f4:d4:c8:
         f4:92:6b:f9:c9:0e:c1:89:b7:3b:53:ea:32:03:23:83:d5:a3:
         32:a5:67:1c:74:b0:ad:91:1c:82:c1:cf:51:6e:7e:87:55:4a:
         de:d6:c3:ae:b8:fb:98:09:d7:4d:3a:6f:52:61:4e:fe:db:df:
         73:1b:34:48:f3:d3:f3:0a:c7:e8:dc:43:c4:c9:60:6e:55:0c:
         c7:aa:df:81:22:67:4b:a3:2c:b2:16:f1:88:a1:f9:51:83:1c:
         32:25:ae:04:31:53:c7:d0:e5:18:db:50:d6:79:c6:a6:fb:45:
         a3:59:11:e6:ac:92:4e:f5:e7:15:72:93:26:bf:ce:db:8b:df:
         03:1d:44:f3:bd:5d:99:d7:07:81:dd:0a:0f:bc:d6:07:7a:63:
         9d:0c:69:42:20:e8:d4:c5:19:0f:93:b9:74:75:8c:5f:88:50:
         3c:da:ab:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:33 2024 by rpki-client on console-ams.rpki-client.org