Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/6A8A22841DCE11EF85CAC83EC4F9AE02.roa
File:                     6A8A22841DCE11EF85CAC83EC4F9AE02.roa (raw, json)
Hash identifier:          oSIv8di1nBYFk+5mBIHhAz3HS/TpuPa73V53udRJHWY=
Subject key identifier:   46:13:D2:8A:AE:96:E6:66:57:2B:83:48:24:24:28:B1:DE:EC:3A:1B
Certificate issuer:       /CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
Certificate serial:       05F1
Authority key identifier: D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/6A8A22841DCE11EF85CAC83EC4F9AE02.roa
Signing time:             Wed 29 May 2024 15:16:26 +0000
ROA not before:           Wed 29 May 2024 15:16:26 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     135341
IP address blocks:        103.162.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl
                          rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1521 (0x5f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
        Validity
            Not Before: May 29 15:16:26 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=665746ca-83e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fa:c2:37:ff:88:7a:3a:cf:87:00:e6:0f:0a:
                    6c:0a:f1:b0:72:76:44:71:e3:2b:00:62:16:50:54:
                    34:41:c4:4c:dd:b7:c2:44:37:dc:f7:8f:31:45:80:
                    c5:c4:fd:e5:1d:66:4b:d5:ed:b4:38:64:ba:11:c1:
                    b5:11:be:13:70:4d:af:eb:f4:fd:54:38:89:a7:65:
                    a6:ad:f8:43:6c:62:d4:fc:64:3c:79:a5:97:21:8d:
                    51:0c:39:a2:a3:ac:41:91:41:ac:f0:77:6b:6f:3a:
                    98:b7:f9:e3:3b:de:1a:be:7e:65:d4:d6:3e:e0:45:
                    f9:52:91:18:c6:1f:f9:c4:f1:2c:40:a0:72:80:eb:
                    af:65:00:2c:09:7d:fe:26:b1:62:c8:d2:6b:c0:41:
                    fa:45:c8:08:2d:48:ba:8b:b8:66:63:bc:2a:2b:9d:
                    2c:9b:62:3b:34:3a:d0:8e:c8:8a:b3:8e:4a:d0:57:
                    fc:d3:d1:82:8c:99:c4:57:33:17:54:5a:d2:68:44:
                    7c:d0:d1:55:1f:a5:0c:0f:6d:85:75:2b:bb:30:b9:
                    8a:e6:80:7d:62:e6:bc:eb:c8:87:dc:60:d0:76:ff:
                    62:b8:5c:76:f8:55:58:aa:2c:ba:3d:96:59:69:83:
                    47:56:79:de:07:dc:3e:9a:b3:dc:d4:14:2d:aa:03:
                    3c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:13:D2:8A:AE:96:E6:66:57:2B:83:48:24:24:28:B1:DE:EC:3A:1B
            X509v3 Authority Key Identifier:
                keyid:D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/6A8A22841DCE11EF85CAC83EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:32:97:98:5f:ea:bc:15:c3:49:2e:aa:ec:f7:b5:61:f9:51:
         db:0a:a7:14:d0:0e:76:7f:06:fe:6d:71:6d:70:3c:27:81:4c:
         45:0b:65:1e:d6:a7:cd:cf:a0:d1:0c:17:bc:68:88:93:6f:b3:
         0b:fe:87:49:de:9f:7e:b5:7d:ab:d3:73:5b:5d:6a:fe:89:1e:
         1c:48:a3:4e:f9:b7:48:d8:a2:e9:f5:8d:37:de:52:11:51:50:
         ec:c1:f4:a0:2e:ac:a3:5d:9f:f1:57:e9:c4:7d:df:f6:bf:bc:
         b7:f7:3e:ad:8a:e9:f5:b2:f1:b2:cc:f5:b4:a4:5b:98:40:f0:
         69:62:95:5e:a7:d1:55:f9:0b:d8:56:91:8f:53:0f:b0:de:8a:
         24:a5:67:e7:f3:08:1f:b6:7a:a8:34:83:3e:31:bb:c8:23:86:
         f0:73:99:1a:54:66:29:c7:43:1a:bd:b4:fc:44:21:e8:f7:58:
         dc:ef:59:6c:8c:80:e3:17:2d:d1:66:a4:93:4e:11:8e:a3:6e:
         c2:e6:cf:19:c2:84:36:cb:6f:91:7c:7c:36:3e:9c:78:fe:a4:
         64:c8:92:ad:d8:ac:53:4f:d6:8d:ed:57:c6:65:9b:f6:cd:5c:
         6a:b8:c6:f2:75:3a:f8:15:d5:a0:0a:80:0b:b1:5c:df:0e:ec:
         8e:94:dc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:34 2024 by rpki-client on console-fra.rpki-client.org