Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/8F12C9C8391F11EFB455E565C4F9AE02.roa
File:                     8F12C9C8391F11EFB455E565C4F9AE02.roa (raw, json)
Hash identifier:          RxQekEsAzfRoaXQlF9gfuPb3rEYz9GMB9M+EsFimH7E=
Subject key identifier:   DC:93:DD:E5:F6:6F:B0:7C:3E:B6:52:5F:85:58:4F:E2:57:F4:FE:9A
Certificate issuer:       /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Certificate serial:       0995
Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/8F12C9C8391F11EFB455E565C4F9AE02.roa
Signing time:             Wed 03 Jul 2024 09:35:18 +0000
ROA not before:           Wed 03 Jul 2024 09:35:18 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     140900
IP address blocks:        103.203.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
                          rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:45:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2453 (0x995)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
        Validity
            Not Before: Jul  3 09:35:18 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66851b56-64e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:88:e6:db:3d:32:57:71:be:b0:e2:f2:0d:92:
                    37:63:4a:7d:c3:56:35:3e:3e:6b:59:b5:2e:55:1a:
                    eb:da:83:c6:81:64:2d:13:fe:11:57:8d:f8:1d:db:
                    23:70:34:24:8f:82:f2:bf:b6:f1:ab:7f:74:9c:bd:
                    ba:b5:ef:3b:e8:62:e7:81:35:a9:36:53:fa:b7:e7:
                    36:80:89:87:d8:81:48:b2:54:50:ff:81:ba:72:ec:
                    42:40:61:ce:09:5e:8e:91:6e:46:f1:ed:04:3d:a1:
                    ca:77:76:ce:1f:89:22:27:1e:c2:f5:37:60:46:97:
                    0e:1d:71:1d:81:7f:5f:7e:c8:53:ee:8b:90:78:18:
                    ea:05:00:98:d3:9b:c2:77:d8:14:ee:e8:0b:80:53:
                    c7:90:ad:c2:e5:20:10:b2:dc:7d:4c:6d:41:b7:5d:
                    ac:27:2b:73:12:8d:a2:3f:8c:dc:c6:7c:f8:9e:bd:
                    32:76:a7:c1:84:9f:28:93:2e:4f:fb:ae:20:f8:37:
                    bc:2a:42:c8:dc:fc:10:56:e8:b6:23:36:f1:1e:52:
                    a8:40:80:74:ab:a1:e5:bc:86:fd:12:19:5e:9d:6f:
                    af:f8:ac:b0:5f:12:fb:da:63:03:2a:0e:32:46:e2:
                    7a:15:d2:c0:92:8c:f5:fc:93:56:96:b6:67:69:1f:
                    91:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:93:DD:E5:F6:6F:B0:7C:3E:B6:52:5F:85:58:4F:E2:57:F4:FE:9A
            X509v3 Authority Key Identifier:
                keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/8F12C9C8391F11EFB455E565C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:3a:fc:1b:2c:d9:a6:7d:72:72:aa:c8:c6:90:3e:bb:0c:63:
         28:b0:23:f2:fe:51:e4:5f:c0:97:93:65:f8:5b:cf:32:92:cb:
         ad:d3:18:12:ef:cb:d6:f2:02:04:9e:58:71:c3:7c:8b:e4:6c:
         d1:2b:ea:ee:69:38:0e:ea:d7:0a:4b:c4:16:57:9c:e6:41:09:
         26:94:ea:24:b0:fc:b7:6c:0c:e9:c2:74:15:11:c5:bf:86:6a:
         df:25:aa:d8:9c:09:c7:33:1c:13:78:95:7c:bc:19:14:0e:a5:
         72:6c:bd:f9:30:26:bc:79:46:24:b9:7d:c7:70:5f:e1:d0:ef:
         1c:0c:bb:c2:c4:53:b8:4e:7f:c7:1c:ef:66:49:a2:d7:54:ca:
         6f:f0:9f:d8:37:02:95:47:ae:5d:a4:9c:2d:70:3c:5a:81:13:
         b1:09:66:54:bc:84:82:0e:02:ae:27:09:fa:34:62:82:f8:21:
         be:28:d5:a6:a0:ea:47:7b:f2:ad:72:c4:28:d7:0f:2a:fe:c5:
         65:91:1c:50:1e:c7:89:b4:2d:db:bf:1a:e3:56:4e:f7:b2:36:
         2b:17:72:6e:31:02:77:3b:e8:5e:c9:5e:27:0c:88:c5:f9:34:
         f5:b2:24:e1:c0:18:0b:e1:b0:85:ba:25:1f:c2:0d:17:09:e8:
         2e:b7:41:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org