Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/9056CDF6A6D211EDA1D2862BC4F9AE02.roa
File:                     9056CDF6A6D211EDA1D2862BC4F9AE02.roa (raw, json)
Hash identifier:          l25nuyCLbxX8YszYNp7Lh0hCVKg/XaMvp8JSklUBmx4=
Subject key identifier:   23:E6:87:5E:BB:87:2C:EA:E1:52:AE:80:C5:B1:FE:65:CF:05:E2:9A
Certificate issuer:       /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
Certificate serial:       05E9
Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/9056CDF6A6D211EDA1D2862BC4F9AE02.roa
Signing time:             Sun 15 Sep 2024 01:12:32 +0000
ROA not before:           Sun 15 Sep 2024 01:12:32 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     139471
IP address blocks:        103.99.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl
                          rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1513 (0x5e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
        Validity
            Not Before: Sep 15 01:12:32 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66e63480-e7bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:25:eb:33:80:e7:9b:04:3e:af:a8:d2:da:bd:
                    df:1f:64:c2:8d:5c:f1:59:e8:b7:3a:66:ab:9f:49:
                    44:ae:66:05:5f:78:82:02:e1:7e:11:98:a4:4d:1f:
                    18:ac:9b:60:6f:e6:3f:c3:42:b7:e3:6d:42:d6:d5:
                    a2:16:be:26:da:ce:42:23:41:d9:66:43:77:04:89:
                    39:cd:33:82:76:81:5a:09:8d:30:65:5e:c1:0f:18:
                    06:5d:c6:02:99:d4:bb:60:d8:f2:2c:5b:ec:f7:73:
                    90:6d:02:63:b0:cd:d7:28:6c:31:a4:bd:14:a2:0a:
                    9b:e4:d1:7d:9e:f9:61:7f:19:fd:79:52:ec:c0:c8:
                    d4:e2:a8:2d:44:9d:12:3a:9d:cc:0e:4c:22:89:87:
                    fa:1a:bb:40:93:55:4f:fc:e2:01:29:bf:68:19:96:
                    b5:8b:d5:fd:80:e5:65:a9:4d:e7:f9:ac:59:bf:ae:
                    54:95:c2:20:f3:1f:48:75:84:a5:96:1e:05:eb:52:
                    44:20:d8:11:48:ca:c7:01:22:65:c9:26:42:5c:67:
                    6c:56:aa:a3:0d:b7:d1:00:8d:2d:a8:cf:69:d2:8e:
                    b3:90:bb:91:b8:2a:04:80:66:d9:85:3d:e9:29:03:
                    76:86:ab:b2:34:a6:98:d0:4d:b4:ef:ec:1c:f9:81:
                    93:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E6:87:5E:BB:87:2C:EA:E1:52:AE:80:C5:B1:FE:65:CF:05:E2:9A
            X509v3 Authority Key Identifier:
                keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/9056CDF6A6D211EDA1D2862BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:70:a3:d1:4c:fd:66:15:83:46:ad:b5:ff:3d:e8:f0:3b:c7:
         b7:94:3a:1c:c8:2f:f1:ff:43:63:d7:f1:a1:02:64:8c:a9:42:
         3b:d0:a6:2a:c5:2a:77:c3:0a:b8:a2:b4:01:a7:55:a7:80:b0:
         3c:78:1c:da:94:2b:8b:de:cd:e7:9f:cc:e1:0b:6c:a6:33:1b:
         7e:f5:2a:f3:a6:15:cf:07:80:65:c3:e5:69:07:56:57:60:a9:
         de:65:c8:07:81:6b:50:5f:c4:ff:d8:23:1a:1a:61:3b:1e:dc:
         93:3c:a3:c7:4a:fe:3b:1c:ee:3f:32:7c:d6:fe:d9:c9:6c:d9:
         79:cf:af:f9:3d:19:80:7d:65:e9:c6:d6:4b:12:3a:ac:f0:6e:
         c1:0a:6f:d9:1c:70:4f:ea:94:fc:29:e4:12:8e:7d:05:d9:00:
         05:39:56:e6:7c:4d:eb:e2:4d:ca:27:da:6c:97:72:59:90:ab:
         18:11:b2:ea:00:26:89:8b:d2:3c:e6:c0:a7:db:bf:e8:fa:6d:
         2c:ab:55:3b:00:57:af:fa:ef:a9:0c:d3:d1:ae:40:97:c9:52:
         f4:69:23:97:60:28:4f:65:3c:2f:ea:bc:2d:20:e8:8d:0d:aa:
         fa:69:3a:81:8a:91:3a:4d:98:8e:98:59:bd:b0:ec:87:23:57:
         36:df:9a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:07:58 2024 by rpki-client on console-ams.rpki-client.org