Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/E67EF1B25F0311ECBB273637C4F9AE02.roa
File:                     E67EF1B25F0311ECBB273637C4F9AE02.roa (raw, json)
Hash identifier:          4oBxKLYesM3sWZKVveFALJuU9Ca/e2wCq6dTaipkUsU=
Subject key identifier:   C3:D6:51:FE:6D:69:DB:62:3B:D4:4C:32:4D:EB:2C:1E:48:45:42:29
Certificate issuer:       /CN=A91C90F3/serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2
Certificate serial:       0767
Authority key identifier: B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/E67EF1B25F0311ECBB273637C4F9AE02.roa
Signing time:             Sun 31 Dec 2023 22:20:01 +0000
ROA not before:           Sun 31 Dec 2023 22:20:01 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     138472
IP address blocks:        103.126.96.0/22 maxlen: 24
                          2001:df7:4300::/48 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl
                          rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1895 (0x767)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C90F3/serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2
        Validity
            Not Before: Dec 31 22:20:01 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6591e911-6705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:73:d9:24:d7:79:2f:83:01:8f:57:4a:b5:
                    a3:3c:49:6f:77:c4:c3:47:d0:84:43:30:42:19:26:
                    90:51:30:9f:1d:08:30:9d:28:78:c1:b1:45:c7:d4:
                    d9:0d:11:92:1e:53:c8:78:d0:17:89:13:18:ba:f7:
                    34:b6:09:9b:da:65:b3:d4:7d:bd:01:a7:78:6f:c7:
                    13:9b:5d:07:97:cb:33:d7:32:7d:9e:15:2a:96:a7:
                    fc:1e:f6:14:22:1e:2b:f6:0e:79:c6:1a:2c:e4:c8:
                    4d:ec:bb:c5:c8:cb:be:1d:03:74:e0:94:15:a4:45:
                    b6:ab:e9:9d:7b:2d:62:bd:05:a4:b1:ea:8a:c1:db:
                    7b:4e:ae:7c:0b:db:ae:5e:d9:92:76:e1:e6:91:01:
                    7b:56:36:b3:d1:d8:35:85:d5:6b:ab:d3:4b:b2:0c:
                    2e:2e:a1:8a:e9:6c:75:ca:10:d5:c2:60:87:6f:e0:
                    4d:ed:7f:8b:7e:df:80:22:2b:28:dd:fc:4d:fd:3c:
                    b7:6b:61:56:06:a5:8d:51:8e:27:e2:09:29:59:ae:
                    f2:04:cf:4d:15:7f:ba:21:c2:f1:8b:12:f5:be:e2:
                    79:34:34:4f:07:2e:63:3f:d2:b7:2e:36:ef:f5:8b:
                    cf:d9:36:82:f5:ef:b6:45:9a:ba:bf:f8:3e:3d:25:
                    70:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D6:51:FE:6D:69:DB:62:3B:D4:4C:32:4D:EB:2C:1E:48:45:42:29
            X509v3 Authority Key Identifier:
                keyid:B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/E67EF1B25F0311ECBB273637C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.96.0/22
                IPv6:
                  2001:df7:4300::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:b1:e7:71:9e:f9:1e:6a:a0:c0:e7:80:e9:d8:e3:f9:4d:54:
         d4:94:1e:0d:86:59:db:91:0d:25:4b:1c:8b:e3:f0:d1:51:51:
         52:fc:8e:19:ee:1e:af:30:1c:96:59:5c:21:af:db:d1:c4:63:
         67:a2:31:fd:28:6d:b5:d1:71:5d:0a:05:cc:60:e1:55:c3:fb:
         f6:73:eb:c1:82:5c:b5:24:58:7b:83:80:09:23:d2:2b:5a:aa:
         86:06:33:3a:14:5a:c3:b1:53:5d:30:c5:9c:56:57:87:b7:45:
         d9:ba:c7:38:9e:ed:be:76:13:bc:8b:71:e1:37:43:81:31:37:
         f3:70:c2:1f:ab:59:7d:7e:9c:10:f6:38:76:b3:5c:0f:21:56:
         90:0a:5e:d7:05:89:f2:d3:30:b6:74:fd:f8:19:35:2a:0e:57:
         3b:4c:df:fc:90:52:ed:ab:5e:90:99:5a:5d:68:83:df:f6:ec:
         c6:51:3c:b9:2e:d8:e7:34:12:2f:a6:b0:69:05:de:80:a0:8f:
         18:30:02:92:06:2d:48:19:e9:66:c3:3f:5e:19:cc:a4:54:9f:
         5d:a2:2f:37:2e:6c:a0:c3:c4:80:57:9b:4e:de:f0:04:1b:7f:
         56:cb:78:25:ed:a0:80:e2:f0:95:76:c8:fc:2d:71:6d:93:29:
         fa:fa:5a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org