Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/4DAE4D285BA111EFB0EA6762C4F9AE02.roa
File:                     4DAE4D285BA111EFB0EA6762C4F9AE02.roa (raw, json)
Hash identifier:          QksoSQ9jMmemj98hDslE2nRWQrvkkYqF2CX6YbV85U4=
Subject key identifier:   BF:C0:92:EE:91:A2:36:CD:17:DC:6F:52:5A:CF:FB:97:07:01:55:DE
Certificate issuer:       /CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Certificate serial:       28
Authority key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/4DAE4D285BA111EFB0EA6762C4F9AE02.roa
Signing time:             Wed 23 Oct 2024 06:40:50 +0000
ROA not before:           Wed 23 Oct 2024 06:40:50 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     26658
IP address blocks:        103.75.240.0/22 maxlen: 22
                          116.206.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
                          rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
        Validity
            Not Before: Oct 23 06:40:50 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67189a71-7866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:59:22:b4:08:0d:7d:e2:fd:c3:3d:1a:62:59:
                    2e:a0:c2:b4:42:0d:e5:4b:d1:66:e2:f1:3e:4f:f7:
                    aa:b2:42:ae:a8:71:1d:a3:bf:42:97:63:33:f4:20:
                    c1:56:80:d2:e4:6a:14:6c:4c:ef:f8:56:30:c0:cf:
                    24:f3:0d:e9:ca:f3:8e:af:cf:8d:b5:9a:82:a2:d1:
                    50:21:d3:81:ad:14:d4:94:c6:b9:cc:c2:01:e6:50:
                    9c:f2:3a:32:e6:55:f9:7d:d2:ce:85:ce:44:24:1c:
                    ab:19:26:d9:02:4c:d8:c8:c3:ee:4b:b1:c0:29:54:
                    f8:64:0d:f2:20:fd:97:6f:82:d6:55:0f:71:0b:90:
                    c2:88:8b:1a:45:cc:c2:83:09:64:fd:e7:c2:d7:8d:
                    e1:a2:6b:87:e2:d3:9d:5e:e1:fc:05:80:7e:4a:9a:
                    1b:29:52:17:a0:e9:20:86:bf:a6:a2:6a:b0:d7:54:
                    de:72:3e:70:eb:0e:83:9d:33:05:6e:0c:a8:30:47:
                    6b:b9:f9:0e:2e:8f:b7:d9:e3:c1:71:24:f0:ae:72:
                    2e:b4:5a:ec:f6:bc:31:f6:c0:80:04:43:ee:8e:41:
                    4b:5d:05:3b:19:84:02:21:5f:9b:90:e4:f0:5b:b3:
                    16:9a:6a:07:bd:79:78:2a:d5:b8:10:2e:08:59:4e:
                    ee:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C0:92:EE:91:A2:36:CD:17:DC:6F:52:5A:CF:FB:97:07:01:55:DE
            X509v3 Authority Key Identifier:
                keyid:BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/4DAE4D285BA111EFB0EA6762C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.240.0/22
                  116.206.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:92:b1:fe:75:3c:94:bc:1c:6f:f0:1a:46:ba:c6:86:56:41:
         c5:77:ee:87:d4:19:27:03:04:bc:11:a6:71:74:54:d1:65:05:
         3c:f8:38:ce:6c:fc:84:a5:e3:39:7d:56:75:62:f5:a9:30:a4:
         66:09:10:d4:5c:47:3b:32:69:a0:f3:21:f5:a7:43:f2:fd:f6:
         c8:19:75:ef:9c:10:bc:28:ad:e6:11:38:66:28:d2:0d:12:6e:
         54:13:85:9d:d2:43:21:be:d6:d3:80:25:35:e9:8c:d7:a1:ab:
         4a:17:51:81:47:1b:2b:25:d3:13:03:7c:91:d4:54:ed:7c:bf:
         30:75:56:bb:c4:8f:ef:f0:c7:37:cd:ab:49:18:ac:04:7f:15:
         a8:0b:d5:9e:d1:c8:9d:79:92:77:cb:76:7c:89:74:ab:22:b1:
         8f:1c:85:0a:66:b0:25:20:19:42:34:8b:07:4d:cf:e0:59:e0:
         f2:60:cb:31:f7:79:27:f1:8b:02:b5:43:5d:97:c8:a1:b2:15:
         c5:bf:c8:38:58:05:2b:5f:11:18:c3:2c:84:a4:c3:d4:63:a3:
         7e:ca:64:b3:54:e8:85:8d:00:9e:d5:77:d2:f1:98:5d:e6:e4:
         10:74:02:17:29:29:9a:ea:0a:e0:fd:52:2f:62:49:70:cd:8c:
         16:7f:ae:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:48 2024 by rpki-client on console-fra.rpki-client.org