Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa
File:                     92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa (raw, json)
Hash identifier:          T0vLNfEgBch3bsiblE/evabl1DzjIixOq/fxALt/2Ao=
Subject key identifier:   EC:CF:1B:C4:5F:1D:43:C4:B7:21:20:3B:B2:D0:55:5B:4C:CD:1E:E7
Certificate issuer:       /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
Certificate serial:       33FB
Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa
Signing time:             Tue 03 Sep 2024 10:30:17 +0000
ROA not before:           Tue 03 Sep 2024 10:30:17 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     56258
IP address blocks:        103.28.93.0/24 maxlen: 24
                          103.28.94.0/24 maxlen: 24
                          103.28.95.0/24 maxlen: 24
                          103.28.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl
                          rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13307 (0x33fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
        Validity
            Not Before: Sep  3 10:30:17 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=66d6e538-2d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d0:4f:4b:80:e8:ba:50:89:58:a7:aa:cb:4c:
                    5d:28:16:58:79:5a:8f:88:77:df:4d:b4:f1:d0:1e:
                    2a:70:e5:ce:be:35:0c:3f:d1:77:3f:73:33:1e:fc:
                    b5:17:44:1d:7b:4e:92:1e:43:5d:d6:50:8d:b6:fd:
                    db:1f:df:ae:aa:65:1c:ba:e7:75:c1:e8:12:2a:0d:
                    f7:47:42:d3:8b:81:53:fe:fd:79:67:41:20:4e:6e:
                    19:cc:0c:32:0f:9c:6f:d4:11:9e:25:fb:0e:4e:c4:
                    ad:14:61:07:2c:ff:0e:11:b5:3a:cc:99:a0:c4:32:
                    2a:44:5f:b5:10:bb:71:6e:f7:00:6a:79:af:75:fd:
                    9c:33:cb:2c:d1:b8:22:6b:60:f7:6f:81:b5:a7:99:
                    c0:c4:56:ae:e3:a8:8d:9f:77:79:1a:54:3a:ad:3d:
                    2d:e7:5c:26:b2:0d:8b:12:1d:83:6a:bd:23:3d:a0:
                    00:4e:2e:46:f9:20:6b:f9:e3:7d:c0:db:0a:64:34:
                    a3:e0:56:f6:ae:fe:c4:ea:e2:8c:c7:4b:93:23:de:
                    bf:92:1b:c6:b4:6a:10:f8:21:aa:f4:c2:8f:23:7d:
                    85:3d:6d:03:8a:25:40:d3:42:3c:10:37:55:48:e0:
                    18:c6:9d:90:bc:6f:e3:11:58:86:7e:db:f8:88:8a:
                    95:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CF:1B:C4:5F:1D:43:C4:B7:21:20:3B:B2:D0:55:5B:4C:CD:1E:E7
            X509v3 Authority Key Identifier:
                keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.93.0-103.28.95.255
                  103.28.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:75:1f:a2:0d:e6:d0:76:ef:b6:c5:ef:f2:31:6c:9e:08:b2:
         1e:53:65:6a:5f:40:15:cf:e2:13:16:85:e3:ca:39:c7:12:c9:
         cb:0e:fa:2b:fe:ee:8b:01:97:ba:3a:bf:b8:28:72:3d:a1:bf:
         8b:fd:89:2d:7b:34:c0:71:74:a0:96:ad:e3:65:ee:8a:6a:1e:
         fb:6f:82:c6:ce:ec:05:3c:0d:29:ad:c0:d0:bc:e9:e6:18:f4:
         ca:aa:22:cc:75:7c:32:91:f1:5e:98:c7:3b:f7:4b:4d:42:bf:
         8b:a7:45:d4:70:b1:a9:e4:e0:30:ef:38:f8:d2:1d:b1:bd:6d:
         cb:45:cf:0c:80:10:1b:c9:ba:02:e6:71:2c:db:0b:6b:8d:2e:
         0d:80:3a:4c:5b:6a:bd:20:16:03:c8:84:68:19:59:2c:f8:e0:
         f9:d5:42:af:fc:72:59:9a:a2:7b:10:b0:b0:9e:fd:f6:10:75:
         f4:d1:a1:06:bd:1a:22:96:00:70:fb:01:76:f1:5f:42:c1:07:
         48:33:eb:f1:9b:6d:9a:5e:53:6d:a1:62:17:a5:ce:a6:9a:8a:
         bf:5b:fe:91:90:13:d8:57:8b:f0:40:ea:86:91:e5:53:2d:88:
         0c:0d:dc:11:c2:90:e2:60:d0:a5:3d:4e:0c:5e:33:73:b3:8a:
         e0:95:8f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:56:19 2024 by rpki-client on console-fra.rpki-client.org