Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/B6FCD4F60CD111ECABD2264AC4F9AE02.roa
File:                     B6FCD4F60CD111ECABD2264AC4F9AE02.roa (raw, json)
Hash identifier:          bB+9hsPPapCcbcV407klYfK5DJTWT3wpVck7/MMMHXw=
Subject key identifier:   57:D3:AD:24:E4:7A:BD:A9:F5:15:BC:EB:C9:66:13:66:81:BA:59:56
Certificate issuer:       /CN=A91D2F93/serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
Certificate serial:       064A
Authority key identifier: 6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/B6FCD4F60CD111ECABD2264AC4F9AE02.roa
Signing time:             Tue 06 Aug 2024 23:11:27 +0000
ROA not before:           Tue 06 Aug 2024 23:11:27 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     136950
IP address blocks:        103.96.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl
                          rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1610 (0x64a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2F93/serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
        Validity
            Not Before: Aug  6 23:11:27 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66b2ad9f-4fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:25:af:9f:4d:65:fb:7c:0b:4e:3e:82:44:12:
                    28:b2:c3:98:66:18:53:98:40:51:07:45:72:9f:0c:
                    dc:4d:f4:a4:37:fc:36:57:31:de:af:41:03:a4:7e:
                    1b:e2:03:b0:26:34:b6:78:fe:35:75:f6:56:25:af:
                    80:4e:3c:b1:3d:bd:90:4d:f4:7a:ab:7a:5f:7b:5b:
                    fe:e5:9b:7d:b3:25:a9:76:ce:bf:33:fc:07:4c:b3:
                    7e:d2:54:f2:9c:98:3a:77:11:57:65:88:f6:30:57:
                    82:a6:65:8e:30:22:3e:0e:4e:f6:d8:63:46:dc:9c:
                    ec:da:f6:b4:98:e3:3f:3d:8b:ad:0b:e7:20:3e:14:
                    8f:b2:35:a9:17:8f:94:5a:c9:e9:8e:83:42:a8:e0:
                    c9:e9:89:05:ff:b3:98:99:ab:6d:59:ed:5e:64:7e:
                    18:5b:55:ab:2a:0d:75:b4:68:9b:44:4c:b0:69:c9:
                    1a:a7:64:3f:e6:7b:c3:9f:d2:90:6e:eb:7b:5c:b1:
                    38:74:df:3e:e1:25:46:63:3b:ca:0e:95:28:ca:da:
                    01:1c:92:a7:50:e5:d1:d4:f5:5b:5e:d1:58:88:8d:
                    ea:f5:39:89:d9:c8:34:2c:11:a9:c7:96:92:8d:64:
                    b5:eb:16:d7:e0:8b:2f:64:f8:aa:9c:7f:d5:32:9a:
                    e9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D3:AD:24:E4:7A:BD:A9:F5:15:BC:EB:C9:66:13:66:81:BA:59:56
            X509v3 Authority Key Identifier:
                keyid:6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/B6FCD4F60CD111ECABD2264AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:78:d8:e9:48:4d:39:24:32:ab:6b:3b:0b:e3:e7:1f:d7:b4:
         2c:2e:66:50:3a:22:fa:e4:98:bd:f9:3d:46:d5:59:2c:de:d2:
         15:b8:4a:7c:ab:68:24:c3:9d:f0:e4:f8:9a:09:ed:3d:f2:70:
         a8:16:51:47:b8:6f:b1:1f:90:54:76:b5:69:62:02:9c:0a:70:
         e9:b2:c4:b7:f7:1d:92:16:3b:f2:2a:5c:4d:97:56:c0:82:40:
         23:c2:44:1c:78:ca:11:4b:b1:55:a6:58:68:c7:6e:45:50:e2:
         99:c8:00:23:99:95:64:c9:58:c9:a6:db:61:ef:05:6d:29:b5:
         24:61:51:73:af:af:8f:a9:cf:8e:d2:4d:a4:a0:cc:7b:8c:a5:
         8b:53:26:3b:1b:80:0f:ce:23:df:a7:20:81:98:c0:98:f7:8d:
         ee:f6:e7:75:a9:a2:d2:ce:52:83:90:66:7e:e8:aa:3a:46:38:
         55:12:46:00:e9:00:47:8c:05:24:8b:fb:56:21:73:7e:2a:02:
         cd:4b:36:ba:31:46:0f:15:2f:ac:e0:7a:b0:fe:f2:41:90:94:
         a9:fd:1c:61:bd:ab:26:86:3d:4f:46:aa:ec:92:e1:12:33:15:
         72:27:a0:ff:e9:3b:29:ec:61:fb:26:38:3e:81:01:30:73:ea:
         ec:ee:30:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:11:49 2024 by rpki-client on console-fra.rpki-client.org