Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/6BB6EF78EB5F11ECB4060F86C4F9AE02.roa
File:                     6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (raw, json)
Hash identifier:          TyzdfixbvhgTgVbeTj4apy/zB+wf6IDh1/Lzfu3rZJM=
Subject key identifier:   23:47:D1:F9:1C:9E:1D:73:66:3F:51:33:5C:83:54:39:B4:A1:FD:31
Certificate issuer:       /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
Certificate serial:       13A9
Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/6BB6EF78EB5F11ECB4060F86C4F9AE02.roa
Signing time:             Sun 30 Jun 2024 17:37:39 +0000
ROA not before:           Sun 30 Jun 2024 17:37:39 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     906
IP address blocks:        103.117.100.0/22 maxlen: 24
                          2403:18c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl
                          rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 16:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5033 (0x13a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
        Validity
            Not Before: Jun 30 17:37:39 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=668197e3-a810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:35:ac:61:a6:75:50:c0:99:c3:b3:b5:21:4c:
                    ae:73:25:f9:b6:43:57:cc:db:de:02:b8:75:e2:4f:
                    0a:f0:67:39:69:b3:e9:fb:a6:64:40:c7:22:a0:23:
                    8b:47:83:9e:86:bb:f5:4b:7b:ea:16:cb:e0:0c:40:
                    b5:25:1a:c9:5b:06:65:d3:d9:ec:cd:73:7e:e4:cd:
                    30:77:13:2b:09:6d:0b:f8:3d:44:dc:b1:8c:44:dc:
                    fd:da:62:9e:a2:d3:1a:3c:b0:78:5d:c0:6c:c3:3b:
                    dd:cf:11:68:fd:ef:58:04:7b:aa:78:44:ad:0b:26:
                    ec:60:b9:ce:7e:92:05:99:ed:f0:6c:bc:c9:91:c4:
                    c2:07:0a:88:fd:89:da:38:db:3d:ea:3e:a5:39:30:
                    6e:a9:3d:b6:ee:86:72:4b:ac:38:4b:3c:5b:16:85:
                    ab:09:ae:c4:49:33:95:ed:87:eb:bc:53:50:50:dd:
                    80:fc:8c:aa:c9:c0:d8:66:64:a8:e3:e3:f7:88:bc:
                    ce:8d:29:01:95:13:64:5d:94:6d:93:fb:1b:85:b3:
                    e7:6f:0b:40:8f:16:47:e3:01:7c:78:34:52:52:19:
                    25:38:37:4c:f3:44:7d:c7:9b:08:3c:5d:92:6e:a6:
                    6e:f4:f4:1f:fb:e9:f2:7f:0f:3d:6d:72:72:96:49:
                    a6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:47:D1:F9:1C:9E:1D:73:66:3F:51:33:5C:83:54:39:B4:A1:FD:31
            X509v3 Authority Key Identifier:
                keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/6BB6EF78EB5F11ECB4060F86C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.100.0/22
                IPv6:
                  2403:18c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:ed:37:1c:27:f0:ad:25:de:eb:73:70:b8:4f:53:a7:9c:8d:
         9f:3a:69:4c:1b:fc:2e:47:29:b0:b3:7a:3d:2c:72:f5:dc:80:
         95:a5:1b:1d:fe:3f:1c:7a:43:23:1c:31:16:06:70:12:26:a2:
         2c:44:93:10:30:5f:64:d5:63:41:c8:84:4e:68:5b:07:f7:6c:
         22:b9:87:e3:1a:b8:fd:8f:00:cf:b9:33:e7:85:ad:f0:40:b1:
         91:6f:2e:91:2c:a3:2a:03:98:2a:18:f2:57:85:53:93:dd:3c:
         fe:aa:4f:54:89:49:39:be:c1:d2:a0:9c:dc:35:8f:c1:62:d1:
         51:a9:ca:86:fc:6b:76:fb:88:18:b1:05:1d:25:63:4e:5a:45:
         f4:ea:d8:52:a7:74:3a:06:60:2b:c9:77:c0:18:bd:f7:dd:82:
         48:3a:b5:5f:c2:64:52:eb:74:72:b8:36:4d:56:a0:7d:61:85:
         13:77:e7:42:3d:34:fd:7d:60:9d:00:6b:f8:ef:c7:b5:0e:d9:
         8d:b0:78:06:f4:04:d3:fd:7c:f8:9d:3a:0a:8a:7e:30:86:5c:
         b6:4d:01:5b:66:93:89:a7:26:a2:b2:6d:53:01:d6:76:83:9b:
         83:77:af:a9:6a:9e:09:f9:39:80:6e:85:30:c7:43:58:c0:8e:
         7b:65:22:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:06:06 2024 by rpki-client on console-ams.rpki-client.org