Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/F0F97030612C11EF85AF817EC4F9AE02.roa
File:                     F0F97030612C11EF85AF817EC4F9AE02.roa (raw, json)
Hash identifier:          3kkH5EW9k5TTFg+XHHqI2feA7kJawsJC4SpKye1S2b4=
Subject key identifier:   D9:9D:9E:7A:6F:78:7A:87:7A:1B:D6:55:2C:EB:51:38:61:F3:91:78
Certificate issuer:       /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Certificate serial:       1DD4
Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/F0F97030612C11EF85AF817EC4F9AE02.roa
Signing time:             Mon 18 Nov 2024 09:30:54 +0000
ROA not before:           Mon 18 Nov 2024 09:30:54 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     138212
IP address blocks:        103.12.237.0/24 maxlen: 24
                          103.12.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
                          rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7636 (0x1dd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
        Validity
            Not Before: Nov 18 09:30:54 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=673b094d-679e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:24:4a:d1:48:13:63:c7:b6:3c:66:3b:3a:90:
                    71:a9:a3:dc:8a:0f:26:59:a4:10:ed:22:06:b1:59:
                    2d:89:6e:df:86:7c:93:05:59:08:d0:bb:36:33:d2:
                    ef:14:e0:12:5c:b4:c3:bb:44:89:7f:34:eb:e1:b0:
                    c3:8a:9b:ab:f9:a0:2c:22:b9:2d:d3:73:f9:af:29:
                    b6:0c:f3:97:80:6d:ae:5c:23:11:80:dd:e3:c6:2a:
                    35:20:32:be:0a:58:16:ff:27:6f:af:a9:a4:c7:e4:
                    cc:d1:cb:e7:a3:69:8b:28:64:88:44:f5:0f:d1:63:
                    73:fa:5d:f4:e1:0a:0f:5e:98:89:e2:1d:58:42:60:
                    d3:99:6d:96:c4:81:8e:38:00:6e:4b:4a:36:d4:3b:
                    13:f7:c5:d2:09:17:e1:b2:b2:5c:c9:6f:04:b8:73:
                    c3:de:4f:aa:e1:96:15:b3:fc:ed:0c:ba:99:ee:76:
                    eb:65:b2:db:1f:79:c8:46:ef:1f:89:86:b8:0a:f4:
                    ad:1c:b5:14:0c:71:d0:08:bf:87:2b:fa:be:f7:57:
                    fd:b1:b9:c4:7c:34:43:75:99:60:2e:19:80:09:14:
                    d7:15:3c:cd:75:82:fa:30:a8:7f:55:c3:3a:40:76:
                    6e:06:a7:c1:cc:cf:d6:13:06:b3:cc:74:ae:84:ee:
                    a5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9D:9E:7A:6F:78:7A:87:7A:1B:D6:55:2C:EB:51:38:61:F3:91:78
            X509v3 Authority Key Identifier:
                keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/F0F97030612C11EF85AF817EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.237.0-103.12.238.255

    Signature Algorithm: sha256WithRSAEncryption
         74:33:24:c4:cc:e4:4c:95:53:2b:35:80:a9:d4:b3:e4:f0:b1:
         7a:49:1d:c8:51:fb:c8:97:4b:81:df:8a:cd:71:c7:75:94:9e:
         cb:b6:21:e3:7c:8b:04:ad:b4:b7:fa:58:14:ad:67:43:d0:07:
         19:8d:39:c7:04:dc:78:f8:d9:0e:c6:2d:85:55:43:be:4d:ef:
         1e:6c:91:61:d7:8d:74:ca:a4:4e:fb:c6:d4:8c:aa:f9:86:b2:
         55:61:30:5f:4e:f7:d8:a3:07:a9:95:a6:98:ca:31:25:5b:e7:
         ef:da:54:8d:48:53:e9:d3:b9:86:27:bc:11:15:f9:51:65:ee:
         1d:5e:48:4d:9d:78:86:78:25:32:51:00:7a:18:fb:6b:99:17:
         16:97:bc:a6:ef:c3:dd:74:65:47:ee:b3:4d:40:8d:f3:8b:eb:
         81:a5:1f:04:ee:52:4c:41:46:2e:be:6a:e4:65:2a:4a:19:28:
         85:0c:cd:09:99:1e:56:ba:4f:21:1d:b9:07:04:22:53:e2:60:
         30:c9:e3:61:92:ad:74:a8:20:65:c4:2b:5f:67:0d:76:d6:3d:
         7d:df:5c:20:ce:46:c9:8a:4c:2a:9b:db:3d:12:e8:54:53:30:
         29:24:20:e8:8c:3c:2b:8d:10:ba:86:9e:34:b6:27:32:aa:38:
         08:35:37:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:17 2024 by rpki-client on console-ams.rpki-client.org