Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/E2663F929C9511ED8014F84CC4F9AE02.roa
File:                     E2663F929C9511ED8014F84CC4F9AE02.roa (raw, json)
Hash identifier:          6Y5tviiZDDG9UDEgc5UyI9seFOB72fV6jZ50KDgSVtg=
Subject key identifier:   4D:C7:0E:55:1E:2C:8E:E4:B5:6C:40:38:FF:B9:43:DE:57:13:8E:AE
Certificate issuer:       /CN=A91C9670/serialNumber=F766DE5ECBCA7967052B96DB6F1782BD8FDA6D74
Certificate serial:       04C6
Authority key identifier: F7:66:DE:5E:CB:CA:79:67:05:2B:96:DB:6F:17:82:BD:8F:DA:6D:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/E2663F929C9511ED8014F84CC4F9AE02.roa
Signing time:             Sat 31 Aug 2024 01:34:25 +0000
ROA not before:           Sat 31 Aug 2024 01:34:25 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     137385
IP address blocks:        103.170.185.0/24 maxlen: 24
                          2001:df7:2580::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1222 (0x4c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9670/serialNumber=F766DE5ECBCA7967052B96DB6F1782BD8FDA6D74
        Validity
            Not Before: Aug 31 01:34:25 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d27321-5342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:49:0a:8a:3d:c4:9b:e2:94:64:a3:a2:3f:
                    88:e3:a6:bc:f5:09:59:57:0a:8e:d2:71:35:4c:42:
                    55:29:f0:bc:73:65:01:b8:8e:b8:bf:ef:51:dc:0f:
                    1d:0b:bc:67:ba:e9:9e:d8:4a:3a:44:0c:5d:27:46:
                    0e:ea:60:f0:68:a7:d2:00:b0:4d:da:55:1c:4f:ea:
                    90:8f:38:67:8b:82:08:1e:01:bd:bf:ef:f8:50:34:
                    f3:97:5c:c2:b8:f8:a9:6d:30:55:6c:94:4a:09:be:
                    42:99:d1:14:ef:4c:cd:94:61:16:5e:4e:1d:0f:44:
                    b2:6c:67:68:12:cc:45:63:d6:19:31:2d:ba:30:ca:
                    00:eb:e8:59:4e:e5:ee:5b:66:57:86:f4:89:0c:ca:
                    a5:09:a8:42:38:6d:ab:69:b9:96:c9:44:c6:81:ae:
                    de:66:3a:99:a5:9f:10:f2:86:61:91:9b:35:d7:5e:
                    99:3e:bf:e6:7f:86:3b:61:15:bf:c3:e6:f8:29:85:
                    55:e9:1e:e2:10:ad:61:47:dc:0b:14:35:1e:d4:dc:
                    95:4d:ff:25:cd:c7:f4:11:21:99:b4:11:ad:1b:9c:
                    a7:bd:6d:23:b4:31:fb:f5:50:e4:64:0b:1d:f8:a3:
                    b6:ce:25:2b:ad:62:1c:bf:23:97:4e:b6:9f:f6:1e:
                    52:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C7:0E:55:1E:2C:8E:E4:B5:6C:40:38:FF:B9:43:DE:57:13:8E:AE
            X509v3 Authority Key Identifier:
                keyid:F7:66:DE:5E:CB:CA:79:67:05:2B:96:DB:6F:17:82:BD:8F:DA:6D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/E2663F929C9511ED8014F84CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.185.0/24
                IPv6:
                  2001:df7:2580::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:9d:14:21:51:50:74:7a:ff:da:df:25:47:2f:0e:39:39:5b:
         57:df:2a:ba:5a:73:42:8a:41:fc:a4:72:66:d0:85:62:10:b4:
         7f:b8:0f:df:a7:c9:2c:1d:30:2b:b5:43:d7:13:7c:13:66:99:
         d9:96:b6:56:96:e7:bd:97:9b:70:6b:1f:24:95:dc:a8:00:9b:
         68:ba:0f:28:17:ad:dc:4a:c5:95:fe:0c:e9:ff:2b:aa:0b:53:
         3a:40:63:89:7b:33:9b:e9:db:fa:28:a9:5a:59:f1:83:17:04:
         b4:f4:ca:0c:b2:d1:a4:99:84:38:a3:e9:0e:9a:50:2e:24:18:
         53:30:ef:cf:49:11:45:b4:bf:e1:a1:37:fe:e7:1b:cf:ff:6d:
         74:74:2f:89:2e:be:c0:0d:69:c9:96:11:c7:88:f8:a7:c5:ee:
         2c:a8:f0:93:41:e5:59:9b:7f:d7:09:fc:26:ab:6f:f4:1d:e9:
         f4:a9:c3:1d:5c:f8:98:4b:7b:da:ce:33:1a:04:a9:68:5a:52:
         c8:5d:89:ba:d5:f4:3f:b6:30:1a:3d:67:28:a7:8a:8f:e7:cf:
         32:18:26:8c:c9:11:94:0a:b7:6a:91:0d:ad:4b:72:fc:00:47:
         18:97:8b:73:ba:e6:04:2b:eb:52:a9:be:dd:8d:c8:4b:db:b2:
         1f:e9:66:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:28 2024 by rpki-client on console-ams.rpki-client.org