Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/469C2676D76111EB97EB721DC4F9AE02.roa
File:                     469C2676D76111EB97EB721DC4F9AE02.roa (raw, json)
Hash identifier:          t00CflQYN/OyH00gO0h+rG8Clxsna4wLCpf4dxw1OLQ=
Subject key identifier:   09:60:08:63:F3:FD:AF:A5:C0:EC:89:80:61:8B:0D:74:39:3E:A6:0D
Certificate issuer:       /CN=A91D008B/serialNumber=C82D4623B79DC5A040072C112A1BABEB4416041C
Certificate serial:       04D8
Authority key identifier: C8:2D:46:23:B7:9D:C5:A0:40:07:2C:11:2A:1B:AB:EB:44:16:04:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/469C2676D76111EB97EB721DC4F9AE02.roa
Signing time:             Sat 15 Jun 2024 02:36:51 +0000
ROA not before:           Sat 15 Jun 2024 02:36:51 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     142407
IP address blocks:        103.168.8.0/24 maxlen: 24
                          103.168.9.0/24 maxlen: 24
                          2407:7ac0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.crl
                          rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1240 (0x4d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D008B/serialNumber=C82D4623B79DC5A040072C112A1BABEB4416041C
        Validity
            Not Before: Jun 15 02:36:51 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=666cfe43-7b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:0f:51:7f:2a:e3:c9:b5:9c:83:55:e0:d5:ca:
                    a6:e8:57:f6:09:15:4b:ad:b2:f2:91:30:78:f8:e8:
                    1e:5f:98:f0:d9:d6:c2:63:69:27:44:69:8f:9d:c3:
                    ec:78:6b:7e:48:ec:09:dc:20:ac:ba:a6:40:f1:8c:
                    e1:a3:66:2f:5a:3b:64:5b:60:22:e0:6c:15:a5:91:
                    3e:6b:69:2e:82:8d:75:46:4c:a8:3c:7d:28:60:ff:
                    6e:92:fe:32:5c:f7:a1:e0:35:f2:41:58:ff:12:e3:
                    fc:65:d5:96:f5:8e:b0:e2:0b:c7:8c:d2:ba:1d:ed:
                    3c:1d:12:04:91:ed:de:d6:79:87:93:83:6b:91:5f:
                    9d:f3:26:1c:24:54:88:03:42:af:23:a7:7c:84:3d:
                    f1:b8:8c:53:fb:d1:b6:95:f3:51:fd:99:ac:3d:22:
                    2e:02:f9:5a:be:80:1d:72:28:ef:06:8a:35:43:9f:
                    0b:88:53:e2:a7:0d:c0:7f:90:49:7c:de:b6:cc:f1:
                    3a:fa:71:6c:4a:a4:bc:1b:2e:3f:46:81:11:a3:0a:
                    60:dd:da:0e:28:d0:d9:11:b6:f8:1f:a4:aa:0c:b2:
                    31:4a:58:98:29:e1:e4:03:16:aa:1d:77:89:22:b7:
                    d7:65:aa:95:69:aa:33:f5:79:e9:03:64:ec:09:85:
                    2f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:60:08:63:F3:FD:AF:A5:C0:EC:89:80:61:8B:0D:74:39:3E:A6:0D
            X509v3 Authority Key Identifier:
                keyid:C8:2D:46:23:B7:9D:C5:A0:40:07:2C:11:2A:1B:AB:EB:44:16:04:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/469C2676D76111EB97EB721DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.8.0/23
                IPv6:
                  2407:7ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:2c:aa:ce:c5:ef:87:f7:a5:b8:6c:5c:dc:8b:64:a3:c0:7f:
         72:ee:d8:e9:3f:08:7d:7a:62:13:a0:92:30:cc:b4:22:1d:73:
         b5:e7:87:4f:f3:f2:ce:46:fb:bb:9e:96:d7:73:b4:32:78:14:
         7e:7c:84:89:50:21:28:2b:c1:f3:1c:ec:44:b6:68:73:86:7c:
         b1:95:f3:7c:d9:2d:ab:ad:50:e6:9a:fb:06:fe:16:40:ca:ff:
         1a:d5:6d:bc:e8:72:b8:f1:0c:af:5f:87:1d:20:48:1e:f5:2d:
         52:6d:d6:07:8b:0d:67:e3:9b:20:ae:21:70:c8:1b:3e:21:54:
         67:a3:96:18:62:22:5f:1d:54:9d:d8:90:a0:e3:2d:0d:d2:5b:
         44:0e:b4:c7:a8:19:9f:bc:18:63:5d:3d:e0:32:ea:5e:26:4d:
         75:29:35:45:87:9b:4d:1e:e1:54:84:76:0f:16:df:bb:6c:65:
         d7:1e:56:a5:86:1d:6a:66:5e:ed:a3:06:d8:ed:f3:10:1f:45:
         e9:66:e6:46:26:3b:41:e5:50:bb:d5:c7:6c:4f:a2:53:3d:f5:
         78:5c:ce:f5:e2:5f:8e:d7:e6:7d:65:49:d4:f8:35:4b:98:97:
         bb:82:e1:3b:0d:0c:8f:44:57:87:2e:88:b6:5c:fb:08:34:d9:
         93:4a:e4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org