Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/6F96208C227011EBA0973F7FC4F9AE02.roa
File:                     6F96208C227011EBA0973F7FC4F9AE02.roa (raw, json)
Hash identifier:          +l+y88slcd8CMQ9n/dTzp3oShT4cTaRVlDNuVo8APSc=
Subject key identifier:   0E:D7:32:BE:A6:89:CA:6A:AB:CA:7D:40:07:8A:A9:CE:98:65:15:84
Certificate issuer:       /CN=A91C7DC6/serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1
Certificate serial:       05EC
Authority key identifier: 48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/6F96208C227011EBA0973F7FC4F9AE02.roa
Signing time:             Tue 13 Jun 2023 00:16:30 +0000
ROA not before:           Tue 13 Jun 2023 00:16:30 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     137895
IP address blocks:        103.116.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl
                          rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Jun 2024 21:17:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1516 (0x5ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7DC6/serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1
        Validity
            Not Before: Jun 13 00:16:30 2023 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6487b55e-879d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e8:7d:7f:21:56:a0:ec:b6:d4:2d:4e:37:e3:
                    44:a1:a4:df:27:8f:df:a5:23:0a:7a:57:0a:09:50:
                    d1:c0:8e:56:e1:b1:39:8c:1f:84:1d:17:cc:58:58:
                    aa:7e:ef:d3:c7:b7:76:4e:50:ab:d8:9e:79:5f:82:
                    21:5b:b7:28:3d:67:37:82:0c:8e:bb:f9:05:97:7a:
                    d9:12:d6:1a:53:98:8b:f7:21:53:03:12:80:6a:e4:
                    bd:08:5a:3b:01:27:d1:7f:c8:39:17:15:2b:9c:57:
                    c5:85:26:85:8f:c7:57:b9:8f:ef:eb:d8:44:b5:18:
                    2d:fd:b3:4d:5e:f3:93:15:e3:24:20:d0:3b:cf:a5:
                    37:81:74:52:40:4d:c6:58:40:c1:41:70:bd:ad:c6:
                    7d:84:e5:b3:5d:ca:86:2f:70:c5:f2:92:a7:15:1f:
                    5c:58:83:79:84:a3:fa:79:ce:0c:31:4d:f7:78:c8:
                    c8:b3:b7:33:86:97:e1:5d:ec:0b:90:e2:86:98:9c:
                    16:6c:4c:6c:c4:83:d8:9c:79:b0:80:6f:a7:d9:cf:
                    d3:c3:bc:f8:a4:1b:fa:f5:d2:56:ec:8e:f2:23:01:
                    87:3d:fe:cf:28:f4:fe:c8:5f:2d:e2:18:4f:8e:e3:
                    d7:cb:97:26:55:35:c5:94:84:7c:f2:a7:45:81:58:
                    04:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D7:32:BE:A6:89:CA:6A:AB:CA:7D:40:07:8A:A9:CE:98:65:15:84
            X509v3 Authority Key Identifier:
                keyid:48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/6F96208C227011EBA0973F7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:d9:a4:45:2c:6d:1e:c9:c8:2f:66:57:e0:7e:f6:ec:b8:47:
         c2:f2:b3:71:0d:48:5b:44:85:b6:92:a3:50:0a:49:9c:8a:7e:
         6c:6a:be:42:ca:c2:5a:dc:c6:1a:dd:c1:48:87:c8:e2:06:a4:
         38:ae:e4:91:09:ab:e9:90:d1:b8:bd:90:cb:e7:d8:09:ca:3f:
         47:f4:6f:3e:17:ad:35:79:8a:fa:41:1c:bc:20:a4:48:4b:6f:
         5c:ef:5e:8c:c5:b4:18:30:50:f8:35:37:e7:be:32:00:9a:c5:
         97:05:94:53:c5:e2:e0:a7:2a:71:c9:72:64:4e:e7:e1:af:c4:
         e1:fa:f2:75:b2:97:1d:b6:8e:fa:e5:58:ee:ac:18:b5:62:84:
         7b:98:d3:dc:fd:8a:73:b5:ec:f1:a4:1d:d8:76:d2:ee:a8:34:
         3c:04:2f:e7:52:8b:3a:fc:a6:1e:b1:5a:cc:17:51:6a:b8:fb:
         1b:d0:c4:fb:56:e4:52:de:81:45:c5:cd:78:9e:cf:2f:a0:4c:
         0d:e4:b6:91:dc:14:b4:ce:75:26:77:b1:80:dd:50:3c:0c:5f:
         72:ae:67:fb:4b:fd:be:77:2c:f8:fd:f9:94:04:8f:71:4d:73:
         e7:c7:73:eb:f8:da:ed:df:26:e7:1d:60:75:0d:34:17:bd:00:
         98:85:fa:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 23:57:05 2024 by rpki-client on console-fra.rpki-client.org