Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/4D38774A86E611EF9D6F5581C4F9AE02.roa
File:                     4D38774A86E611EF9D6F5581C4F9AE02.roa (raw, json)
Hash identifier:          7ioLjk8VeJvEHBuoWRfrT57B74IDRpNgRa9+NJtrnGo=
Subject key identifier:   DF:76:90:C4:42:A3:6E:90:88:30:93:02:15:F3:92:FA:E6:BD:A6:BC
Certificate issuer:       /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Certificate serial:       055B
Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/4D38774A86E611EF9D6F5581C4F9AE02.roa
Signing time:             Thu 10 Oct 2024 09:01:57 +0000
ROA not before:           Thu 10 Oct 2024 09:01:57 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     132139
IP address blocks:        103.101.206.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
                          rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1371 (0x55b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
        Validity
            Not Before: Oct 10 09:01:57 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67079805-ddf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5b:37:0a:8c:3c:e2:e1:1b:43:26:0a:bf:65:
                    a2:af:5b:e6:9c:10:b3:1f:2e:28:ec:3d:5e:1d:4c:
                    76:c3:fd:99:c5:f8:d0:4d:a2:f4:0e:7c:f4:02:41:
                    ea:d5:85:ea:c9:b0:e7:e2:69:1c:20:71:3a:c2:b2:
                    99:22:14:1d:16:64:fa:24:9a:34:6a:6d:af:fe:71:
                    53:c2:a6:da:af:6f:a0:42:29:cf:14:5f:4e:07:42:
                    de:e9:77:e7:13:d8:e2:d5:16:44:1c:80:2a:12:6a:
                    4a:23:6e:fa:bb:f5:7d:a3:23:2f:7e:a7:33:c8:93:
                    36:5e:84:95:f0:6a:1c:5c:9b:e8:0f:22:a6:f5:73:
                    42:fc:e9:ed:0c:07:17:cb:cd:74:34:a6:74:14:88:
                    68:f2:de:3b:5b:53:47:97:3a:b5:4e:13:60:8c:1f:
                    ae:be:a0:91:90:dc:f9:42:5a:1d:55:c2:ce:63:3c:
                    f5:b7:57:e2:7f:94:7b:af:ba:7a:cc:e6:c4:f3:86:
                    d6:08:43:1d:b9:b0:53:f9:cb:bb:25:d7:e3:6a:fa:
                    e8:1f:61:85:6e:d5:2a:03:01:8d:ac:6a:aa:04:7d:
                    e8:ca:93:79:98:db:08:ce:16:38:8d:e4:fc:31:71:
                    3c:4f:b3:7b:de:f1:01:32:13:b6:4a:8c:fa:7c:b6:
                    13:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:76:90:C4:42:A3:6E:90:88:30:93:02:15:F3:92:FA:E6:BD:A6:BC
            X509v3 Authority Key Identifier:
                keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/4D38774A86E611EF9D6F5581C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:31:45:26:00:04:5f:45:dc:76:59:7b:50:a3:91:21:54:05:
         d3:21:49:e9:a1:75:17:e2:6b:70:4b:e0:41:d3:34:7c:8b:0b:
         be:b5:92:41:24:4f:d5:dc:97:4a:db:08:5e:7e:8d:21:3d:7b:
         ed:93:4d:1f:b1:97:6e:ab:9a:ff:64:cb:c7:25:98:91:c9:a9:
         f2:af:60:89:09:16:a6:91:ee:aa:80:9f:e3:6c:10:ce:38:02:
         f5:5f:08:5b:23:b9:d9:65:83:f3:19:bc:df:00:7a:03:fa:08:
         28:18:5b:5f:6c:ad:21:cf:5f:c5:bb:e2:43:ca:cc:c5:3e:34:
         20:5c:30:fd:00:c2:dd:ca:c4:e4:a8:55:96:f9:77:67:bf:a5:
         11:6c:00:ba:ef:e4:d3:c2:a2:af:01:44:5c:8b:8a:67:a0:48:
         96:7e:9b:29:9b:1c:c8:6f:83:a9:ec:60:49:90:07:74:43:6f:
         3e:e8:2b:b8:c2:87:c3:80:2e:c3:4a:1f:7b:b5:fa:5d:2f:44:
         7f:72:10:8f:87:cb:93:34:83:66:31:ae:42:cf:dd:94:01:39:
         d8:16:b3:91:fb:62:2d:ec:b7:df:b5:ac:b9:1c:6f:35:9e:f2:
         69:4d:d7:f1:d7:36:46:4c:c7:1c:6e:1a:74:16:b3:94:b6:11:
         3c:fd:07:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:55:50 2024 by rpki-client on console-ams.rpki-client.org