Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/6569BF24997F11ECA6C7F481C4F9AE02.roa
File:                     6569BF24997F11ECA6C7F481C4F9AE02.roa (raw, json)
Hash identifier:          ihZ46zaKKgYFbsQZJpUcfwGNcLq0WYivOzEHAfXlcfs=
Subject key identifier:   8A:C0:6F:F1:F0:6C:AF:D2:08:78:52:AE:1D:BD:B5:44:01:00:18:61
Certificate issuer:       /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
Certificate serial:       093D
Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/6569BF24997F11ECA6C7F481C4F9AE02.roa
Signing time:             Tue 22 Oct 2024 20:29:33 +0000
ROA not before:           Tue 22 Oct 2024 20:29:33 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     139009
IP address blocks:        103.74.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl
                          rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2365 (0x93d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
        Validity
            Not Before: Oct 22 20:29:33 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67180b2d-0cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:33:5f:94:27:57:b6:94:b6:b7:e0:b5:0a:f8:
                    80:32:01:00:69:97:23:9d:37:32:a6:5b:fe:97:0c:
                    2d:1a:22:01:24:35:f7:ef:17:02:86:10:a0:60:fa:
                    cc:6c:ec:77:34:c4:3b:6f:4d:9b:00:b3:df:a4:7d:
                    5c:15:b8:2e:1c:8d:26:cd:8a:39:bb:ad:db:75:a8:
                    5a:c8:fc:af:69:7a:ab:5e:93:10:cc:fb:e0:59:98:
                    8e:8d:e9:57:2f:c3:15:cf:1c:e1:f8:9a:a0:3c:bf:
                    5f:b2:e2:6f:8d:3e:f1:ff:17:6e:5d:ad:0e:4f:90:
                    f4:9c:68:84:f9:eb:4d:02:88:49:a9:63:ad:e1:ed:
                    4d:10:94:7e:cf:bb:6f:2c:5c:2c:5c:5d:51:44:ff:
                    80:98:df:54:69:b1:1d:8a:0f:bc:d2:19:e3:a4:a5:
                    eb:3e:b3:67:a8:19:8f:af:a0:8e:dc:6e:72:4b:14:
                    ba:08:a5:c2:b2:ca:18:9e:9c:79:2f:43:e1:ad:d5:
                    c0:72:26:50:13:62:a4:c3:b0:36:a6:7f:5f:03:5a:
                    e9:bc:2e:f6:23:d5:ac:15:51:cf:0e:4e:f9:c5:09:
                    98:c3:ad:ac:1c:f7:9a:82:14:00:d8:0f:94:fd:9d:
                    e1:3b:65:84:97:2d:65:ae:03:15:80:98:ba:91:86:
                    61:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C0:6F:F1:F0:6C:AF:D2:08:78:52:AE:1D:BD:B5:44:01:00:18:61
            X509v3 Authority Key Identifier:
                keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/6569BF24997F11ECA6C7F481C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:59:4a:fc:ea:8a:d3:e6:bd:ba:4b:82:f0:32:e4:19:29:b8:
         30:f9:8c:e1:6e:37:98:72:80:c7:48:f1:47:2c:e2:06:14:83:
         fe:28:13:26:9d:ba:3c:c4:65:b8:90:38:c0:5e:ec:01:33:da:
         90:bd:5f:8b:85:1c:08:32:14:95:da:25:25:1d:6c:67:a0:6f:
         51:09:0b:24:83:b1:d2:59:98:03:af:be:9d:0b:70:b7:d8:a9:
         a4:41:db:1b:05:8d:e4:c7:cf:8f:75:f2:c2:3f:19:0e:35:3d:
         69:98:d9:d4:d9:45:55:12:88:ac:d7:98:22:71:94:f8:c5:24:
         7a:08:56:68:09:b0:55:af:d9:88:bb:69:fd:84:5c:43:35:f5:
         56:6d:f3:6e:7f:b3:bf:76:1c:76:97:1b:86:dd:8d:b2:16:d0:
         3d:32:d3:6e:26:25:59:1f:27:86:6d:bc:4c:38:71:33:0e:e5:
         84:0b:f7:3d:fa:cb:23:3d:d2:85:7b:db:6e:57:05:79:b2:3a:
         d5:75:6d:f2:f3:36:65:34:e2:10:ff:51:5f:c6:7d:ef:db:43:
         9d:1c:68:72:b0:75:42:d3:e3:d2:dd:a2:f0:4e:4a:c3:33:2e:
         c1:1d:b9:34:78:88:9d:c1:b2:ad:95:e8:c7:38:88:7e:27:28:
         25:4b:41:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:32 2024 by rpki-client on console-fra.rpki-client.org