Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/1F90160E87F211ECBEBC5339C4F9AE02.roa
File:                     1F90160E87F211ECBEBC5339C4F9AE02.roa (raw, json)
Hash identifier:          Ie+fFLUk+hkh8iPsi0JIDwR97rjtnpIzqO2/djh9dOA=
Subject key identifier:   0A:49:67:6A:64:D2:FF:CF:87:6A:B3:EE:5D:39:96:86:1A:D4:EF:5D
Certificate issuer:       /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial:       1364
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/1F90160E87F211ECBEBC5339C4F9AE02.roa
Signing time:             Tue 10 Sep 2024 17:55:07 +0000
ROA not before:           Tue 10 Sep 2024 17:55:07 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     56032
IP address blocks:        103.110.214.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
                          rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4964 (0x1364)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
        Validity
            Not Before: Sep 10 17:55:07 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66e087fb-5ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:89:e8:29:4a:03:b9:34:ad:f7:a8:c7:32:
                    81:f0:f1:71:25:40:24:5b:bf:47:8a:45:26:cf:b4:
                    f1:99:46:66:73:b5:00:38:84:2a:78:48:96:2e:36:
                    d9:27:9b:23:da:10:40:02:b5:02:c6:d8:e1:00:a0:
                    6d:fe:79:c7:b6:c6:af:79:35:62:4f:6b:ac:a8:de:
                    b6:28:b2:37:7c:5f:41:61:cf:e6:15:05:94:7d:e1:
                    80:ba:da:b6:dc:14:2c:11:2a:b7:8d:d6:55:d8:c9:
                    74:a0:ee:c1:d3:cf:9a:90:01:05:7e:2d:4c:34:12:
                    20:ad:5f:56:7c:8e:e2:b0:78:06:b0:69:4b:51:00:
                    94:aa:2d:61:97:7c:2a:ae:c9:98:e9:fa:f4:e9:af:
                    0d:85:78:fb:4e:0c:4d:07:65:ef:97:62:1d:c1:be:
                    c0:99:3a:b7:e1:9f:d4:23:d5:ba:b0:21:7d:81:e8:
                    1f:96:0f:4c:74:51:e9:c8:5a:a0:a3:0c:98:76:29:
                    e9:51:43:52:17:5c:d3:0d:6c:c7:de:1a:63:95:87:
                    fc:65:ef:42:cb:1d:39:38:03:71:f6:f4:08:92:2d:
                    42:07:5e:4a:aa:ed:1c:0f:37:41:b6:1e:8b:1e:03:
                    3b:48:56:c4:30:15:0c:50:cd:6e:ef:89:0b:7e:dc:
                    c7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:49:67:6A:64:D2:FF:CF:87:6A:B3:EE:5D:39:96:86:1A:D4:EF:5D
            X509v3 Authority Key Identifier:
                keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/1F90160E87F211ECBEBC5339C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:e1:d2:82:aa:7d:0a:b1:e1:ca:91:cf:19:a6:65:12:ee:fa:
         83:22:6f:70:ce:19:4e:39:26:6b:ee:a9:0a:3f:30:3c:1a:7b:
         d8:f8:d9:ff:38:4d:20:7b:c6:91:d6:ab:0c:61:87:46:52:0f:
         d9:b6:cd:aa:11:62:30:fc:d0:ec:05:e4:7c:c2:53:38:9f:8e:
         06:e8:09:49:ed:3f:94:4d:d2:e1:ec:03:2a:3c:c8:84:23:03:
         82:9b:dc:e0:b6:ae:08:19:e3:69:6e:13:85:6f:cc:44:de:f1:
         35:c7:be:39:bd:70:98:96:5a:3f:94:63:6e:50:82:dc:8b:ed:
         2a:10:13:8d:b2:60:c3:90:b4:5d:b4:60:dd:75:ff:38:5d:5d:
         12:a5:a0:93:2e:a9:b1:e7:8d:d4:59:35:c0:aa:4e:13:19:8b:
         8d:51:44:68:39:7d:38:eb:44:08:ac:66:bd:a5:62:d2:59:85:
         2f:2b:76:23:61:34:c1:ec:8b:09:df:44:0c:df:8e:79:c8:57:
         89:c1:7c:fe:ed:25:e6:be:e6:fd:52:68:b9:dd:69:6d:27:07:
         55:06:b8:91:55:99:a8:b5:66:c4:ac:10:a2:75:2e:41:0a:93:
         1e:80:f7:4a:c0:c6:28:9f:de:ef:27:2c:9f:53:18:26:36:2d:
         10:a6:41:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:16 2024 by rpki-client on console-ams.rpki-client.org