Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/486461F6AFD211EF96F7E025C4F9AE02.roa
File:                     486461F6AFD211EF96F7E025C4F9AE02.roa (raw, json)
Hash identifier:          se6dcnf5oUUz27oGGKGs0jgaJTjerrRk/IMu7lgFuq4=
Subject key identifier:   C6:76:6D:F7:07:1D:8F:06:B8:59:05:2D:06:14:2D:DE:5D:17:AE:2D
Certificate issuer:       /CN=A91BB5D6/serialNumber=C2938CE63D7B9A2457E932A27AE971D20704A7FD
Certificate serial:       12
Authority key identifier: C2:93:8C:E6:3D:7B:9A:24:57:E9:32:A2:7A:E9:71:D2:07:04:A7:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpOM5j17miRX6TKieulx0gcEp_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/486461F6AFD211EF96F7E025C4F9AE02.roa
Signing time:             Sat 21 Dec 2024 06:20:41 +0000
ROA not before:           Sat 21 Dec 2024 06:20:40 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     45527
IP address blocks:        103.133.23.0/24 maxlen: 24
                          203.56.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.crl
                          rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpOM5j17miRX6TKieulx0gcEp_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Jan 2025 05:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB5D6/serialNumber=C2938CE63D7B9A2457E932A27AE971D20704A7FD
        Validity
            Not Before: Dec 21 06:20:40 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67665e38-74b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8e:c7:a6:2c:7f:fc:ae:d0:1e:76:e5:d5:34:
                    2a:90:91:0e:cf:d9:4a:fa:7b:4c:55:97:3e:15:ff:
                    d9:5e:eb:20:8d:04:ff:a6:91:89:83:51:2e:9f:c8:
                    2d:bb:f8:2c:db:c0:fe:2a:5b:85:ab:ba:61:df:6d:
                    56:0e:d0:e4:4f:63:70:be:8b:1a:35:6d:88:3b:1b:
                    c2:3c:a0:ed:f0:e1:7e:ea:00:a3:eb:72:1c:b1:0a:
                    6f:cf:0f:51:03:e8:94:72:41:26:6d:f0:14:fb:d4:
                    36:84:ff:c5:4b:3b:92:a2:9a:a4:1a:5d:3f:13:64:
                    f9:8e:8f:a3:0e:fc:ca:d3:a3:39:c7:8e:e3:28:a1:
                    9e:02:2d:2b:da:3d:87:20:9d:2e:34:cd:df:9e:cb:
                    46:2e:d6:c8:0d:7d:41:d6:66:7a:df:f1:a2:6f:4b:
                    b9:a1:2b:42:0d:02:fb:9a:5d:e1:5f:c1:5a:1a:5f:
                    b4:7d:34:ec:b8:a2:8f:45:04:48:98:b8:a6:79:d9:
                    be:90:82:2c:d1:81:ab:dd:9a:6a:b1:f8:f1:64:dd:
                    c2:da:13:16:4e:12:82:fc:82:d0:eb:5a:4d:4c:9a:
                    14:4a:d6:d8:64:1a:81:fb:50:d3:0a:60:30:2e:8f:
                    d0:d7:6b:81:0a:d8:13:f3:05:f1:05:28:82:d6:99:
                    0b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:76:6D:F7:07:1D:8F:06:B8:59:05:2D:06:14:2D:DE:5D:17:AE:2D
            X509v3 Authority Key Identifier:
                keyid:C2:93:8C:E6:3D:7B:9A:24:57:E9:32:A2:7A:E9:71:D2:07:04:A7:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpOM5j17miRX6TKieulx0gcEp_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/486461F6AFD211EF96F7E025C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.23.0/24
                  203.56.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:19:52:0a:95:8a:dc:5a:79:bd:52:ed:bc:9f:1f:f7:15:a6:
         67:5a:65:a0:10:02:0b:ad:14:1a:eb:ec:96:32:5f:aa:b6:99:
         3d:a5:e2:d2:ee:d7:5a:f7:0a:44:12:56:2a:0b:44:f3:fa:81:
         fb:5a:f7:1d:ff:7e:e3:64:ed:3d:fd:09:d4:d4:68:96:c1:d9:
         d0:96:04:d2:87:a1:53:7d:b7:40:ac:4a:51:a8:21:fd:1a:02:
         5b:b6:9e:95:ba:d0:47:66:0e:47:1d:d9:2c:e0:de:b4:df:68:
         4b:b8:4d:81:e8:d4:2c:57:ab:9d:3f:2b:ff:e0:f3:3f:53:e2:
         66:03:1f:48:1f:55:85:3f:75:64:9b:b7:6a:36:a1:a7:30:28:
         6e:cb:c8:a4:cf:fc:49:e6:15:c9:c5:d0:41:68:60:5d:c0:7e:
         20:44:50:99:92:3a:95:23:f3:0a:6d:fa:90:86:fe:4c:d6:73:
         a2:d2:fe:c5:ee:5e:75:bb:cf:c0:a4:bc:96:f9:36:20:32:4e:
         ea:d5:e9:15:f1:ff:1d:3e:3e:f1:b1:57:17:f5:e9:54:b2:2c:
         2d:49:d2:ad:39:18:7e:6b:a5:94:f8:2c:c6:43:cb:b9:12:8a:
         35:6a:93:99:86:3b:ff:7f:03:8f:cf:36:71:72:d3:82:11:e5:
         5d:80:1f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 07:43:59 2024 by rpki-client on console-ams.rpki-client.org