Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/6AB08D12561011E78FC5FE7FC4F9AE02.roa
File:                     6AB08D12561011E78FC5FE7FC4F9AE02.roa (raw, json)
Hash identifier:          61kZnassBc8stF0ur52qBGG83zIwRfm1r942cp5jHsk=
Subject key identifier:   F6:3A:D9:B8:2F:D3:11:A5:7D:8C:77:4A:C5:82:9D:9C:54:18:EB:F2
Certificate issuer:       /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
Certificate serial:       3378
Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/6AB08D12561011E78FC5FE7FC4F9AE02.roa
Signing time:             Tue 04 Jul 2023 14:40:29 +0000
ROA not before:           Tue 04 Jul 2023 14:40:29 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     10139
IP address blocks:        121.1.0.0/18 maxlen: 24
                          121.54.0.0/17 maxlen: 24
                          125.60.128.0/17 maxlen: 24
                          175.158.192.0/18 maxlen: 24
                          175.176.0.0/17 maxlen: 24
                          203.84.160.0/19 maxlen: 24
                          203.87.128.0/17 maxlen: 24
                          203.111.224.0/20 maxlen: 24
                          203.201.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl
                          rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:30:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13176 (0x3378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
        Validity
            Not Before: Jul  4 14:40:29 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64a42f5d-298a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f4:e9:e9:bf:c9:5c:25:e8:58:b2:49:50:85:
                    62:cd:b6:e3:70:db:e2:ae:33:b2:7c:97:97:a7:79:
                    d8:10:4b:80:eb:e3:5c:4a:17:9b:3f:c6:a2:be:30:
                    ac:f7:41:04:df:6a:15:91:5c:d7:0e:3f:e4:b7:66:
                    0d:47:eb:2e:1e:c4:41:59:a3:11:db:52:1f:9e:4d:
                    b8:76:df:46:0f:0e:24:6d:a9:fd:55:a2:2e:3b:2d:
                    6b:2e:38:93:bd:98:97:c7:96:d3:17:cb:8c:59:6f:
                    76:43:66:d7:a7:7a:c5:7b:f7:28:2e:65:87:19:a6:
                    e5:5d:70:29:d9:46:ae:90:86:03:55:00:a4:68:40:
                    ed:c0:c2:66:65:72:95:9a:f7:1c:43:c5:d3:81:5b:
                    9c:4c:12:2d:26:32:45:ee:38:86:1a:9f:9e:4f:17:
                    9b:14:6c:8d:fd:74:9e:28:e3:33:d7:0a:e4:b0:d6:
                    9a:34:82:10:62:fa:11:40:bd:47:3d:cb:f4:ec:3c:
                    8f:1e:87:df:44:48:71:b1:d0:ec:53:a5:2d:10:69:
                    59:0e:8e:c1:d5:f5:ba:49:a4:4f:30:4f:15:23:62:
                    10:99:ea:cc:0f:b8:b2:87:75:ea:ce:d7:f0:1d:b8:
                    13:dc:11:3b:46:18:b3:ac:14:a6:48:68:b7:53:b1:
                    a1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3A:D9:B8:2F:D3:11:A5:7D:8C:77:4A:C5:82:9D:9C:54:18:EB:F2
            X509v3 Authority Key Identifier:
                keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/6AB08D12561011E78FC5FE7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.1.0.0/18
                  121.54.0.0/17
                  125.60.128.0/17
                  175.158.192.0/18
                  175.176.0.0/17
                  203.84.160.0/19
                  203.87.128.0/17
                  203.111.224.0/20
                  203.201.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:fd:6a:67:22:2a:b4:cc:3d:44:d5:7c:2f:fc:b1:dc:51:32:
         08:ae:39:25:e6:88:b4:97:ae:55:08:2f:21:c9:f5:02:d9:60:
         f3:56:30:ef:e6:ca:47:8b:bf:aa:e0:b3:9b:0a:80:b3:94:0c:
         c5:b9:73:f4:16:2f:0e:b0:66:6b:26:6e:71:c8:c2:95:3b:62:
         d4:d1:95:80:74:89:bc:ee:0a:5a:35:d8:3d:23:18:9a:ae:2f:
         d4:0f:44:f4:06:2f:33:f8:55:e9:07:cb:17:5e:20:f4:3d:e9:
         ea:f2:10:bc:19:55:9f:b3:e5:62:61:de:d8:da:d8:cb:a9:ac:
         f5:30:cc:dc:5a:61:47:09:60:35:65:1e:bb:5b:1e:e1:73:93:
         de:64:f5:9a:6a:63:75:14:46:14:e3:d8:dd:ae:22:06:79:cb:
         b9:f3:e2:b8:9c:e7:4e:72:fe:9f:96:7e:63:52:ca:fc:c1:c6:
         6d:3e:7e:7f:23:0c:06:e7:3e:fc:d9:80:a1:e0:c2:49:10:f1:
         fa:20:96:c5:5c:bb:bc:bd:47:55:d5:ed:4a:e0:9e:a2:52:d1:
         60:c1:7b:10:04:3a:87:70:16:5a:cd:91:00:e5:b7:ff:ae:66:
         a6:68:28:1b:f7:d5:9d:2b:cb:dc:e1:5a:79:e7:ab:34:4d:6a:
         80:2b:57:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:58:25 2024 by rpki-client on console-ams.rpki-client.org