Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/059432729E6A11EEB0983523C4F9AE02.roa
File:                     059432729E6A11EEB0983523C4F9AE02.roa (raw, json)
Hash identifier:          NP9fffigQ0ImiLL3SzcAQICpaRrCia/9CD7L49arMZU=
Subject key identifier:   BC:39:BF:25:1C:00:AD:46:2A:39:A2:6D:41:F3:96:0F:40:8B:52:32
Certificate issuer:       /CN=A91C6861/serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A
Certificate serial:       0A9B
Authority key identifier: 6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/059432729E6A11EEB0983523C4F9AE02.roa
Signing time:             Wed 20 Dec 2023 20:07:56 +0000
ROA not before:           Wed 20 Dec 2023 20:07:56 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     64063
IP address blocks:        103.200.92.0/22 maxlen: 24
                          2407:3380::/36 maxlen: 36
                          2407:3380:1000::/36 maxlen: 36
                          2407:3380:2000::/36 maxlen: 36
                          2407:3380:3000::/36 maxlen: 36
                          2407:3380:4000::/36 maxlen: 36
                          2407:3380:5000::/36 maxlen: 36
                          2407:3380:6000::/36 maxlen: 36
                          2407:3380:7000::/36 maxlen: 36
                          2407:3380:8000::/36 maxlen: 36
                          2407:3380:9000::/36 maxlen: 36
                          2407:3380:a000::/36 maxlen: 36
                          2407:3380:b000::/36 maxlen: 36
                          2407:3380:c000::/36 maxlen: 36
                          2407:3380:d000::/36 maxlen: 36
                          2407:3380:e000::/36 maxlen: 36
                          2407:3380:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl
                          rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2715 (0xa9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6861/serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A
        Validity
            Not Before: Dec 20 20:07:56 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6583499c-5551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:67:9a:13:cb:03:3f:79:b8:bb:02:21:f5:96:
                    4a:44:a2:61:c1:93:32:19:86:dc:52:9e:cd:95:da:
                    89:ce:a9:1f:94:80:6f:8c:7c:26:e2:76:c3:77:0b:
                    6c:51:84:9d:7c:fb:67:e2:6c:81:0d:08:14:22:59:
                    bb:e0:4f:f0:6b:35:39:68:bd:e3:2e:c8:96:8d:3e:
                    17:9d:b9:e2:3a:41:09:d6:e5:13:69:2b:94:d0:06:
                    0d:01:40:7b:5e:ce:37:c8:7d:72:f3:0c:e3:2f:12:
                    05:e0:2e:2c:f4:bc:9a:e9:45:df:ec:f8:e8:4a:5e:
                    57:96:86:fc:04:a8:1d:3b:2c:0f:e5:4a:90:7c:22:
                    86:13:bf:2b:17:5a:27:25:c0:e6:7c:fe:e0:4a:b6:
                    67:80:e2:3b:ac:28:1d:39:be:f4:8f:1c:ce:95:02:
                    10:7b:c7:1e:a4:97:9a:de:3b:63:dc:37:24:fc:ab:
                    7e:f5:bb:3a:b7:38:0f:f7:49:fe:54:72:68:54:49:
                    e9:64:6b:35:8b:72:11:9f:6d:58:02:eb:5d:83:55:
                    0a:2c:8b:7b:47:d8:b1:4a:d9:ba:a8:2a:0e:81:2a:
                    b2:44:0e:c6:ee:8a:cd:c7:3e:16:57:72:9d:44:0f:
                    0b:8f:d1:8a:2b:b0:dc:06:ac:ac:24:ee:82:5f:5f:
                    40:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:39:BF:25:1C:00:AD:46:2A:39:A2:6D:41:F3:96:0F:40:8B:52:32
            X509v3 Authority Key Identifier:
                keyid:6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/059432729E6A11EEB0983523C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.200.92.0/22
                IPv6:
                  2407:3380::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:1c:91:30:39:31:b6:4d:26:85:7b:6a:cb:74:1e:36:a0:5a:
         a3:5b:26:e2:50:e3:56:20:f1:5a:26:c1:0d:28:7a:64:c8:4b:
         94:34:73:7c:ca:bc:41:2f:31:d4:e3:25:e2:e5:dd:2c:fb:e0:
         fe:20:6f:cc:a9:cd:cd:34:e1:b5:c4:63:b0:5c:5a:81:e8:e8:
         00:5f:e4:dd:e9:da:4b:64:0a:e8:fc:77:3f:97:98:6d:71:ec:
         54:24:23:ac:b7:09:83:b9:7c:0e:20:87:d0:98:2d:bb:03:92:
         d3:97:5b:24:e2:a1:14:ac:76:10:e5:de:f3:3d:53:6f:21:90:
         25:05:59:43:2d:39:24:b7:30:72:49:69:4e:2e:d5:32:eb:cc:
         60:2a:be:23:9d:d4:b0:11:d9:48:a0:fe:36:aa:dc:c8:b3:ce:
         ac:55:91:f6:40:0b:90:9d:e5:81:dd:85:e4:9d:c2:f0:5c:2d:
         55:17:ac:3d:ad:80:8c:94:b1:e7:ba:7e:95:5f:6d:49:85:54:
         78:c3:9e:f4:59:66:c9:f4:c2:b6:62:f9:52:6d:1a:83:88:9c:
         d6:7a:94:cd:d2:71:0a:4c:d1:54:65:e6:de:da:c1:4c:f1:1b:
         6f:e9:bd:ac:0f:da:dc:99:bb:d4:72:5b:e0:f3:c0:d9:9b:95:
         fa:37:39:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:03 2024 by rpki-client on console-fra.rpki-client.org