Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/6105460E653411EB98060C17C4F9AE02.roa
File:                     6105460E653411EB98060C17C4F9AE02.roa (raw, json)
Hash identifier:          C+Ri2Pq/dG4qO75rS+IDa+PhN4WzVRuwKeSvXcwxS/o=
Subject key identifier:   14:C1:B3:4C:DA:4E:82:30:62:24:01:4E:EC:8F:E0:BD:50:50:C4:99
Certificate issuer:       /CN=A91B927E/serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A
Certificate serial:       05D3
Authority key identifier: 2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/6105460E653411EB98060C17C4F9AE02.roa
Signing time:             Thu 16 Nov 2023 20:58:18 +0000
ROA not before:           Thu 16 Nov 2023 20:58:18 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     137385
IP address blocks:        103.122.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl
                          rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Oct 2024 14:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1491 (0x5d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B927E/serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A
        Validity
            Not Before: Nov 16 20:58:18 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6556826a-2bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:33:49:b1:34:ff:f2:e7:ef:80:0e:53:3b:87:
                    af:62:b0:f9:5c:17:b7:aa:a2:85:78:c2:9e:16:83:
                    31:15:e4:52:cb:77:77:40:06:0c:b9:30:f4:75:56:
                    06:4f:93:b3:84:cf:aa:a6:f9:d4:33:7b:86:0f:31:
                    bb:d1:44:44:0a:9a:72:75:3a:f9:17:53:c6:24:04:
                    6c:e9:de:cf:a2:03:b4:d9:d2:f8:52:e2:6f:a2:fe:
                    ed:14:aa:4b:52:c2:bc:30:3c:8a:18:41:28:f6:a7:
                    be:4f:92:5a:20:dc:58:85:49:7c:81:ff:51:4f:64:
                    b7:f5:ae:82:a1:87:dc:66:5f:f7:b9:43:65:f9:92:
                    32:05:c7:cf:fc:b5:8c:b7:3d:6a:9f:31:ac:2a:e8:
                    04:6f:19:f0:ec:8c:4b:eb:9c:32:7e:ba:68:a2:9e:
                    ce:40:74:f6:95:11:1b:c8:8f:f5:83:b0:7c:28:cf:
                    f0:c5:c3:c7:da:d1:59:a7:ab:78:8b:bc:78:b4:5f:
                    cd:54:6c:ae:18:5d:c1:dc:98:16:35:be:6e:e4:2c:
                    c2:97:d0:b4:82:03:64:57:72:10:d4:4f:81:6e:35:
                    13:34:34:8f:cb:29:a1:5e:e0:18:63:fe:cd:db:e4:
                    d3:6f:e9:47:4c:2b:7d:03:c1:41:0f:7c:0d:43:60:
                    d9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C1:B3:4C:DA:4E:82:30:62:24:01:4E:EC:8F:E0:BD:50:50:C4:99
            X509v3 Authority Key Identifier:
                keyid:2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/6105460E653411EB98060C17C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:e0:bc:a4:bc:02:2d:21:29:ec:f8:f2:f1:1b:3f:ba:9f:89:
         f8:0e:5b:5d:84:cf:76:e9:99:35:8c:eb:ce:8b:1b:e3:e9:5e:
         3a:63:ac:dc:00:ab:c0:21:78:d5:d1:2c:f1:bd:6a:ec:ff:1f:
         d1:20:79:6d:31:f5:a5:25:a9:dc:6c:d1:23:80:b4:e7:8a:39:
         37:53:be:4b:dd:99:9f:dd:f6:53:ea:9d:19:7c:bc:e2:44:12:
         52:84:27:6b:cc:0d:2d:aa:fd:91:17:e6:ee:1a:ef:86:b7:99:
         ce:38:d3:c1:9d:b0:58:ce:84:40:a7:b5:68:9b:aa:02:ab:dc:
         35:5c:b0:b9:e6:d5:aa:a3:7f:e4:ef:82:63:5d:6f:95:fd:3f:
         4a:ae:1d:76:9c:d6:27:b8:c9:d2:93:98:e7:64:c8:78:42:c6:
         40:00:85:73:64:9e:9f:6d:ba:d6:d0:98:85:36:c5:eb:48:45:
         a7:25:4e:53:66:d4:15:05:80:97:86:d6:6f:86:f5:54:63:56:
         b5:a0:14:d8:cb:e0:1c:38:d2:0b:09:d3:9c:15:9a:7d:32:ba:
         33:a2:a1:6d:d6:be:c5:89:9d:a0:eb:6b:18:6b:9b:5f:42:17:
         a9:ab:8f:03:1b:b9:32:3f:e9:0b:fa:81:6e:e6:f2:1b:47:1c:
         7f:84:31:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 17:14:22 2024 by rpki-client on console-ams.rpki-client.org