Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/A6ACA298858911E88026B416C4F9AE02.roa
File:                     A6ACA298858911E88026B416C4F9AE02.roa (raw, json)
Hash identifier:          Bm6Hg3gh1j1a80wR2XX7xwyi1WY27Wumi8LE07BcSR8=
Subject key identifier:   DD:59:16:7B:49:5A:91:3E:3A:AE:59:A2:E8:F6:72:D1:86:51:53:C8
Certificate issuer:       /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
Certificate serial:       1853
Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/A6ACA298858911E88026B416C4F9AE02.roa
Signing time:             Tue 24 Sep 2024 16:54:46 +0000
ROA not before:           Tue 24 Sep 2024 16:54:46 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     3223
IP address blocks:        103.118.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl
                          rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 16:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6227 (0x1853)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
        Validity
            Not Before: Sep 24 16:54:46 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66f2eed6-ecdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a9:54:73:ad:7e:6b:16:b8:33:56:1b:58:71:
                    fb:9e:5e:c8:9d:a0:4b:91:ed:e9:fd:82:cf:05:bb:
                    b4:8e:ea:3a:fe:ae:f1:d8:a0:1c:2a:09:ee:6c:1a:
                    4d:83:80:f1:4f:b1:33:92:c9:ab:d4:4b:ca:2e:98:
                    6c:5e:bb:f0:a2:fb:81:1f:65:2d:52:45:6a:d2:eb:
                    1a:a6:a6:95:9d:35:13:80:2e:46:c9:6a:88:6d:8f:
                    da:3d:43:fd:00:99:ee:37:df:d2:6d:cd:5a:c9:17:
                    52:23:c2:f1:1d:75:9b:ef:85:08:5e:ad:3c:e9:54:
                    b2:f6:85:62:7b:e7:09:05:03:2b:5c:88:b6:e3:cf:
                    73:dd:4c:7b:d4:32:df:e7:83:83:98:f7:26:3f:ce:
                    80:ac:ed:96:8e:de:9c:e7:a8:88:59:bf:db:e0:46:
                    f8:23:11:90:9a:b2:74:2f:50:ed:99:07:f8:c1:74:
                    2a:66:bb:2d:84:75:3e:bc:5d:08:5c:60:e6:58:9c:
                    aa:ec:3c:62:c1:9c:6a:f1:0f:4d:8f:14:e4:5d:1e:
                    98:5a:91:82:04:8f:94:06:ee:c6:70:1d:91:e2:1c:
                    60:22:75:62:25:57:5a:f2:fe:0c:4b:b1:a8:e3:0a:
                    60:f6:29:a1:ef:9f:6e:48:e2:09:a4:21:1c:f3:c8:
                    cc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:59:16:7B:49:5A:91:3E:3A:AE:59:A2:E8:F6:72:D1:86:51:53:C8
            X509v3 Authority Key Identifier:
                keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/A6ACA298858911E88026B416C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:3c:f6:48:0f:cc:0f:f7:01:62:95:c6:03:d7:5f:94:fd:52:
         b4:7d:2d:8d:2a:96:2e:bf:98:d7:da:62:0e:34:f9:2a:e5:14:
         27:d4:5d:72:6f:1f:f9:e6:ff:60:06:9c:d1:44:4c:fc:03:8b:
         da:56:bb:43:33:80:dd:37:f0:ae:d8:fa:f8:2a:69:bd:59:61:
         f8:a3:cb:35:b2:93:df:f5:d0:1f:63:dc:f0:aa:45:9a:75:b8:
         c4:04:88:0e:79:af:ef:6e:5b:b0:7e:ca:ee:99:ed:8d:70:b0:
         f3:18:6c:6d:11:84:9b:08:ed:eb:57:49:56:64:a8:56:39:2f:
         b5:8b:63:11:6f:50:af:bf:ea:90:f1:32:07:fc:8c:3b:38:fe:
         79:66:19:67:a2:69:ce:ae:c4:3d:38:1a:28:67:ac:23:a5:0c:
         e0:51:9c:2b:be:5a:64:36:7b:f3:ad:23:b9:b1:13:ee:a4:e6:
         fb:63:61:f2:88:d6:22:85:d8:e4:a1:65:86:50:f5:40:25:c1:
         df:a3:72:4f:90:72:84:04:e0:57:09:5a:a3:b8:01:93:c5:d9:
         dd:f5:21:40:0b:68:30:1f:43:e6:80:c3:f7:6c:39:f9:c8:5b:
         5c:df:8b:44:da:8d:bc:44:de:05:01:e8:36:74:57:3e:1e:b3:
         67:49:ed:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:06:07 2024 by rpki-client on console-ams.rpki-client.org