Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/D2093EF4EC6E11EEAEF9610BC4F9AE02.roa
File:                     D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (raw, json)
Hash identifier:          G4Dla87V8rtQVoFrowa7K0BJ1dHwJVBSq0/2lBCHVpo=
Subject key identifier:   C8:0D:7F:58:F1:38:BF:FF:8F:58:8A:1B:E6:7F:A0:C8:C7:0E:3E:0C
Certificate issuer:       /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial:       BB
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/D2093EF4EC6E11EEAEF9610BC4F9AE02.roa
Signing time:             Wed 03 Jul 2024 06:07:30 +0000
ROA not before:           Wed 03 Jul 2024 06:07:30 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     138995
IP address blocks:        103.112.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
        Validity
            Not Before: Jul  3 06:07:30 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6684eaa2-d15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:32:be:08:ea:c9:5e:ee:05:85:b2:db:cf:1d:
                    da:e5:70:3c:ec:71:53:ff:e9:83:95:2f:0d:c6:7d:
                    ef:40:1e:e6:61:b5:82:9d:c8:c9:ad:e3:db:7e:f6:
                    d8:25:39:be:dc:a8:60:dd:54:ac:42:8d:b1:34:e6:
                    d9:bd:06:33:c0:43:c6:52:a1:5f:98:de:54:86:4a:
                    14:07:ad:d2:4f:04:71:0d:b4:e0:68:9e:01:2c:fa:
                    f0:8f:02:21:10:7e:53:9d:aa:06:d9:7a:a3:81:f3:
                    34:87:fc:57:d3:3f:96:da:16:9b:ff:03:0d:09:c6:
                    bd:59:71:85:9e:6e:02:df:39:d4:38:ab:f7:ca:9d:
                    d5:c9:c4:2e:b6:18:aa:5e:c8:08:3e:f5:be:ac:d3:
                    ff:7d:72:32:77:64:2f:18:34:86:9e:19:61:4b:c8:
                    6e:d0:2e:3f:80:3a:8c:50:4f:86:a3:26:06:40:79:
                    95:8e:72:5f:dd:28:ea:20:30:eb:08:15:0e:fb:73:
                    4f:60:3f:be:76:e6:5c:13:47:19:b3:df:85:2b:1a:
                    6a:20:14:b9:f0:58:f6:6d:54:4f:e6:a5:93:5d:31:
                    3a:3c:b1:d3:f8:a0:a1:ab:4c:61:c2:38:4f:bd:f9:
                    4f:d9:06:5e:92:b7:a6:ab:cf:95:76:c6:a6:37:f2:
                    d0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0D:7F:58:F1:38:BF:FF:8F:58:8A:1B:E6:7F:A0:C8:C7:0E:3E:0C
            X509v3 Authority Key Identifier:
                keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/D2093EF4EC6E11EEAEF9610BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         fa:15:6d:72:cd:5a:0c:e8:65:c3:54:3e:22:7d:31:3a:60:7a:
         42:89:39:e7:a2:53:7f:44:ce:c0:91:df:1b:29:bd:f7:ee:50:
         ac:13:13:e2:1e:01:80:a4:d1:37:63:f0:72:77:43:3e:e5:3e:
         89:69:ef:4f:4c:d7:5f:44:c6:ad:63:02:61:08:38:37:bd:51:
         da:35:68:6d:95:78:d2:8c:2d:ee:11:86:a0:7e:17:07:7b:46:
         e1:c8:53:11:53:2c:18:d8:d4:55:ab:48:21:ed:90:9b:b8:ed:
         c2:0c:ad:95:8b:d5:90:bf:d2:b5:6b:88:ef:8d:d2:c6:be:84:
         4c:f9:66:02:5e:78:6b:30:a0:a8:12:8f:b5:fa:e7:1a:1b:7c:
         6a:5d:37:88:61:ab:ca:15:49:a1:f3:f6:71:b9:3b:44:a6:c4:
         97:1f:ad:52:15:50:c0:c7:c9:de:0e:51:d0:43:10:1c:c0:cd:
         53:02:6e:6c:79:64:35:4c:e0:53:a9:4f:c0:ca:f6:94:ae:fd:
         02:93:07:51:f9:d7:4c:e6:d8:d9:c7:86:62:a7:7d:80:dc:ac:
         ae:17:e1:9f:f9:d8:55:e0:fb:76:8f:b5:16:47:0c:b5:00:9c:
         47:3e:fb:c7:71:a5:f3:ec:04:5f:e9:45:64:89:c5:a9:5e:5c:
         e9:72:04:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:06:02 2024 by rpki-client on console-fra.rpki-client.org