Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FE469BA68FEB11EC818F190FC4F9AE02.roa
File:                     FE469BA68FEB11EC818F190FC4F9AE02.roa (raw, json)
Hash identifier:          9wxeawWjiSYvr1gTTY86BGq/vlv1BUt+hPb0Ex/RoZg=
Subject key identifier:   64:66:D5:40:0F:A5:8A:9D:99:C2:13:72:D4:43:D0:9C:98:82:BF:14
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4549
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FE469BA68FEB11EC818F190FC4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:32:07 +0000
ROA not before:           Thu 05 Sep 2024 03:32:07 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     131406
IP address blocks:        45.119.76.0/22 maxlen: 24
                          103.255.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17737 (0x4549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:32:07 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d92637-977c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dd:e6:42:86:1b:a8:51:24:8b:6f:d9:6b:6d:
                    9a:c3:a1:30:ee:8f:d2:a9:10:9d:07:af:33:fa:d5:
                    29:a9:5f:14:79:66:d6:e9:17:0b:6d:14:bc:49:be:
                    6a:77:61:5a:2f:0e:de:5b:20:f9:81:64:ef:c3:c6:
                    6b:3e:fc:00:d4:0a:a3:c9:74:0a:5e:e7:a6:f4:b2:
                    e2:ae:25:0c:86:89:56:a4:58:82:78:d8:ed:c5:3a:
                    68:34:5c:74:ca:e5:fe:25:ac:00:28:11:f6:d1:be:
                    55:21:f6:40:14:08:16:c2:4b:34:05:7d:64:67:3a:
                    32:62:77:87:77:28:d4:fd:23:26:4a:4c:b7:00:42:
                    bc:7e:8b:5c:a8:5b:17:32:6c:66:da:83:22:4a:a6:
                    84:81:cc:fd:98:04:87:2e:b2:ec:8d:79:ca:ee:5e:
                    88:af:6c:25:57:c4:59:18:e1:52:f7:09:2d:4d:b5:
                    01:3f:20:8e:30:cd:44:06:05:c4:cc:b5:f0:d0:1b:
                    1d:75:cd:29:b4:11:6f:77:36:2d:b7:42:d5:69:7c:
                    7a:66:8b:1d:ae:87:ee:6a:52:2d:8b:c0:a0:17:29:
                    c6:e4:70:b4:b1:02:73:47:9f:5b:49:b1:d4:7b:68:
                    00:74:84:97:cc:a1:8e:f8:ae:db:24:a0:cc:4f:df:
                    97:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:66:D5:40:0F:A5:8A:9D:99:C2:13:72:D4:43:D0:9C:98:82:BF:14
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FE469BA68FEB11EC818F190FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.119.76.0/22
                  103.255.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:73:7e:a8:2c:12:43:f0:69:3e:65:41:c4:57:21:ce:76:71:
         fb:9c:91:be:8b:fe:49:1a:70:a9:66:b6:11:37:53:8d:9e:f6:
         fc:16:31:53:0e:d5:2d:45:90:be:83:16:1f:41:b9:1d:27:73:
         0e:b6:3a:b6:47:4d:87:45:1e:c1:b9:0d:1e:29:a9:4d:86:5c:
         0e:64:5a:6b:16:ef:b2:79:eb:b9:cb:3b:c3:08:be:a8:70:76:
         34:a4:48:c0:04:9f:a3:4c:32:2a:2e:50:ed:a9:d4:f0:70:e1:
         cf:54:97:6c:3a:60:71:71:66:17:f7:f9:3b:75:9a:72:6a:d1:
         a0:c6:c7:d9:f9:fb:67:03:7a:fb:1d:ed:c2:39:be:c3:dc:58:
         c8:de:e5:e0:c7:dc:75:e3:38:40:7b:98:b9:0b:98:45:98:4b:
         96:9a:4c:d9:58:2a:78:63:9d:06:40:41:b6:d5:dc:e5:29:2d:
         30:ad:bb:1e:19:a5:10:11:07:da:ef:a0:0e:01:89:a5:93:62:
         e7:3a:54:b2:00:d2:4c:4a:e9:be:a9:b8:2e:78:ce:33:fe:6a:
         aa:92:eb:65:17:f6:7f:85:9f:bf:42:8c:c3:8a:67:0f:85:ee:
         ed:5a:20:ac:ad:bd:cc:0f:3d:bc:99:ff:90:06:0b:40:fd:b3:
         16:78:7c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:33 2024 by rpki-client on console-ams.rpki-client.org