Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/84B6E12A312911EEBE440C7FC4F9AE02.roa
File:                     84B6E12A312911EEBE440C7FC4F9AE02.roa (raw, json)
Hash identifier:          AUIJbzRiqiEOfaNjWrdJt9yS/V8oDNTxfEJH1gokT3E=
Subject key identifier:   D0:98:EE:FD:2E:E5:BA:68:69:26:D7:12:58:39:56:D2:CD:34:A6:F2
Certificate issuer:       /CN=A91ADF12/serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A
Certificate serial:       0A6C
Authority key identifier: 6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/84B6E12A312911EEBE440C7FC4F9AE02.roa
Signing time:             Fri 20 Oct 2023 19:47:50 +0000
ROA not before:           Fri 20 Oct 2023 19:47:50 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     149994
IP address blocks:        103.142.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl
                          rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 20:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2668 (0xa6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADF12/serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A
        Validity
            Not Before: Oct 20 19:47:50 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6532d965-f9d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ac:59:df:a7:bb:69:7f:db:a4:5e:5e:0d:9f:
                    e5:8a:5a:95:fd:a0:b2:1d:26:59:f9:f9:f5:51:b1:
                    40:9a:8f:b7:c2:b7:16:ba:05:b6:a3:5b:25:54:85:
                    12:9c:76:ea:8c:a4:aa:9c:10:28:d1:cc:11:a7:3d:
                    4d:cd:a9:17:ff:ae:3f:73:d1:27:bd:08:c3:d4:1b:
                    4a:fe:10:da:c4:8f:21:7a:6c:f7:93:81:f0:0a:5f:
                    59:46:bd:60:cc:ef:69:fb:e2:df:54:70:b0:db:96:
                    ec:34:e4:43:01:64:8e:a6:8f:d6:e4:2e:24:a3:18:
                    68:b0:2f:79:b9:8c:0b:ad:08:a8:fa:31:75:19:fd:
                    48:f1:b3:41:19:0d:aa:99:ca:ec:13:34:9b:ba:b5:
                    cc:dc:f4:30:eb:b4:39:05:41:11:e2:f5:47:18:40:
                    41:33:ad:d9:9d:35:0d:9b:94:73:c1:7f:99:39:a9:
                    85:7b:7a:ab:8d:0e:3d:f6:38:8c:b5:38:df:cb:fd:
                    2a:49:32:63:fa:12:a6:00:62:dd:3e:65:e6:14:29:
                    64:17:70:2b:e7:69:e2:7e:0e:b4:d3:68:05:c3:83:
                    ac:69:06:dc:77:ad:c5:74:f2:f0:9e:f6:f4:d9:a0:
                    c1:65:99:9c:4c:26:67:ad:51:dd:27:ee:e7:68:3c:
                    76:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:98:EE:FD:2E:E5:BA:68:69:26:D7:12:58:39:56:D2:CD:34:A6:F2
            X509v3 Authority Key Identifier:
                keyid:6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/84B6E12A312911EEBE440C7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:50:6a:09:19:c9:58:d0:0f:5a:9f:5c:45:5c:45:e1:67:5b:
         39:68:fd:17:4b:db:b0:78:59:58:78:21:68:b1:59:89:6b:b6:
         69:c8:e6:a4:96:4f:e4:eb:90:08:a5:03:58:04:08:ed:0b:c4:
         39:ec:80:a9:9d:1b:b5:c1:96:c6:10:a4:a2:0f:77:1b:d4:07:
         d5:84:57:6f:77:22:ac:2d:c3:e7:86:a3:49:a3:b8:ed:d1:c7:
         6b:69:45:dc:0f:c7:f3:fe:e0:3e:8a:a0:03:77:b2:55:eb:6b:
         3b:e3:64:21:dc:56:1a:cf:b8:df:a8:02:e5:05:ec:e3:ca:44:
         0a:43:d4:75:5c:fa:58:11:8b:94:dc:eb:6d:30:c6:b7:f3:88:
         f2:1c:f8:7b:1c:9a:b5:f7:b4:2c:cb:4f:ea:4c:c4:ec:19:79:
         df:19:d0:71:5a:3c:16:73:58:01:ce:55:ab:ec:07:4b:79:31:
         15:15:43:fd:30:1b:99:eb:4d:1b:d6:d0:cb:61:93:c4:00:66:
         15:95:f2:0b:7c:3b:ce:cd:17:a7:38:c3:0d:54:2b:ab:2d:98:
         08:8e:8c:c6:02:e4:79:90:ed:3e:93:24:62:ec:e9:e5:46:a8:
         bc:79:a1:74:50:f3:94:11:1e:48:e7:be:3e:c7:46:ba:a4:1e:
         87:0f:39:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:13:26 2024 by rpki-client on console-ams.rpki-client.org