Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/F450F110AAFE11EAAF572C5EC4F9AE02.roa
File:                     F450F110AAFE11EAAF572C5EC4F9AE02.roa (raw, json)
Hash identifier:          M+Tax7VG5rWwMeFmLKAhTKuNTWFgY09O4MxcZyAINIM=
Subject key identifier:   32:76:96:1C:E0:9E:A9:40:D1:0A:4A:B8:94:F3:D8:36:A6:B4:64:9D
Certificate issuer:       /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A
Certificate serial:       099F
Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/F450F110AAFE11EAAF572C5EC4F9AE02.roa
Signing time:             Tue 26 Mar 2024 21:10:01 +0000
ROA not before:           Tue 26 Mar 2024 21:10:01 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     58715
IP address blocks:        103.149.74.0/24 maxlen: 24
                          103.149.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl
                          rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2463 (0x99f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A
        Validity
            Not Before: Mar 26 21:10:01 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=660339a9-e4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:42:b8:53:79:76:1d:8f:1c:84:18:cd:2a:4b:
                    fa:db:be:2c:f4:0d:ca:4f:b0:b5:46:f2:50:19:9c:
                    fe:a9:9e:fd:75:16:35:15:df:2d:8e:ac:5f:36:93:
                    e6:2f:43:c3:e8:2e:fc:8d:7a:5a:0c:ec:a6:72:55:
                    b1:20:5a:87:47:51:f2:7c:23:4d:b4:cf:40:e6:2c:
                    ec:85:c9:48:cf:61:0b:7c:0e:ab:ff:e9:44:7e:44:
                    05:75:8f:35:30:1f:ae:8e:1a:6b:98:e1:89:17:30:
                    10:a8:11:6c:b8:64:d1:c9:0b:a3:f2:94:29:b3:c9:
                    18:45:53:73:dd:47:da:d2:8d:90:b1:04:e3:c9:ed:
                    48:ab:9f:a7:78:e0:82:9c:22:d3:0d:fd:a9:4f:cc:
                    52:cc:76:f4:6b:3a:fa:2a:14:46:50:c0:6e:2e:8c:
                    1f:12:7a:ab:63:90:9e:42:96:bf:47:84:cf:bd:ca:
                    b4:b9:a8:4e:ed:17:1f:20:6a:fb:32:71:f1:ef:a3:
                    ae:10:81:2a:09:ee:e2:3e:02:ae:c5:e4:d7:57:1c:
                    fd:d4:c2:d7:c1:a2:64:4b:16:db:7a:ca:21:26:ca:
                    bb:e3:90:63:ac:de:18:2d:04:78:65:44:ea:e3:17:
                    07:95:dd:38:6a:cf:df:31:03:0f:41:b1:e0:1f:24:
                    24:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:76:96:1C:E0:9E:A9:40:D1:0A:4A:B8:94:F3:D8:36:A6:B4:64:9D
            X509v3 Authority Key Identifier:
                keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/F450F110AAFE11EAAF572C5EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:89:e0:94:96:f7:ea:5c:38:86:6c:63:15:d0:58:76:fd:86:
         c6:f7:58:5a:a9:a9:7d:11:e6:a5:d2:ef:b4:71:11:57:87:2d:
         a0:c6:a0:db:e3:a2:3c:c5:14:8d:87:6d:c5:53:b4:fc:0e:13:
         9f:b3:b9:da:f3:0a:d7:ca:42:c7:f0:8f:96:39:78:51:ec:17:
         a5:08:a9:1a:fb:e8:e7:a4:bd:10:c7:34:ac:e0:3c:d0:c4:5c:
         34:33:38:ec:e6:77:d9:4d:4e:16:99:ee:33:87:85:66:08:21:
         32:0a:3f:05:24:f6:03:6d:ee:ab:cf:3e:13:d0:4a:8d:86:de:
         eb:65:0b:37:5f:5c:44:8c:f3:74:77:36:de:a5:41:70:54:12:
         88:40:a2:6c:bb:ab:2f:da:52:66:ec:fb:13:9f:a9:c3:40:05:
         b9:d7:90:81:65:9f:6a:51:61:4e:68:d2:2d:a8:33:1e:62:79:
         cc:53:7b:bf:2a:97:97:0d:55:fd:4e:77:6c:8e:49:bd:af:d4:
         0d:8d:83:67:71:e0:9f:db:50:a9:bd:22:3b:a4:75:d2:be:60:
         bc:5e:69:0e:f9:dd:8a:96:3e:9b:96:f6:32:1b:ba:e2:6d:86:
         a6:c4:3a:3e:42:92:5d:5a:8b:64:49:47:8c:8d:62:da:4c:cc:
         a6:8d:f7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:32 2024 by rpki-client on console-fra.rpki-client.org