Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/512CFEFE68BD11EE87942B4EC4F9AE02.roa
File:                     512CFEFE68BD11EE87942B4EC4F9AE02.roa (raw, json)
Hash identifier:          XYr7qobbtwKguAgGaGwCKgaDEaozLZCNulqeuQS9qtA=
Subject key identifier:   D2:6C:37:F1:D0:5A:1F:7D:EB:0D:1F:32:A9:F6:CE:7B:CF:51:00:3F
Certificate issuer:       /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Certificate serial:       0C
Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/512CFEFE68BD11EE87942B4EC4F9AE02.roa
Signing time:             Wed 25 Oct 2023 06:17:50 +0000
ROA not before:           Wed 25 Oct 2023 06:17:50 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     138360
IP address blocks:        103.131.106.0/24 maxlen: 24
                          103.142.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
                          rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 07:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
        Validity
            Not Before: Oct 25 06:17:50 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6538b30e-c9eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:43:ff:a3:70:36:ba:dd:d3:2c:0c:d9:c9:c1:
                    bb:45:a3:a2:83:3c:32:68:70:48:f3:82:06:39:6b:
                    aa:3f:70:12:aa:08:2a:01:be:bd:27:81:91:9d:7e:
                    e1:24:06:99:57:86:c3:c0:97:c7:85:95:1d:c6:6f:
                    d9:27:f7:d9:cb:50:e8:80:83:4d:02:5f:8f:45:42:
                    69:20:fc:cd:72:cf:e4:53:ef:6d:ed:a6:0b:f7:8e:
                    6f:ef:a1:26:d8:16:c2:45:00:16:5c:02:e6:c3:90:
                    74:04:31:fd:e4:5c:36:d2:5e:4c:e4:55:e7:be:d5:
                    69:58:7a:25:d3:2e:5e:1e:4a:c0:16:09:af:bf:fc:
                    0e:65:cb:46:2b:d7:8e:75:d2:5d:ec:5f:c0:59:ae:
                    1b:56:54:70:d4:b7:11:6c:b2:a2:70:d0:bf:0e:8a:
                    41:9a:b5:39:bd:32:52:52:67:3a:74:e9:fa:f5:16:
                    58:f1:00:33:51:b9:b1:ed:7c:04:f3:ea:39:e5:4b:
                    9c:e4:9d:9d:2d:a9:72:7a:fe:7f:d0:39:e3:50:9d:
                    5d:7a:92:79:c1:0c:79:28:5e:55:6a:65:9a:07:2a:
                    84:9d:1d:d6:bf:b6:05:9b:f1:9d:23:0a:d4:86:f4:
                    94:01:a7:1d:2a:35:5f:c7:12:9c:37:67:3b:79:09:
                    23:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6C:37:F1:D0:5A:1F:7D:EB:0D:1F:32:A9:F6:CE:7B:CF:51:00:3F
            X509v3 Authority Key Identifier:
                keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/512CFEFE68BD11EE87942B4EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.106.0/24
                  103.142.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:86:cc:41:a2:29:6e:22:64:cc:24:22:77:b7:ff:c9:18:ba:
         c1:20:54:ef:16:81:ff:b5:68:21:c9:5c:4b:1a:f6:2e:cc:fe:
         c6:e8:bf:d7:25:a1:64:da:9f:ce:97:04:56:ef:5e:af:82:c4:
         b2:da:16:3b:2b:45:7a:55:02:c9:4a:78:dc:3c:38:f8:ee:3c:
         70:33:6c:58:c6:e1:5e:eb:08:69:14:33:04:dc:ee:5f:cf:40:
         6f:86:5a:80:c2:26:f4:88:db:42:3e:44:d3:55:1c:fe:e7:8a:
         99:cd:df:94:93:79:90:08:24:1f:fd:4d:cf:9f:d6:95:43:1a:
         f8:6d:d4:b1:8a:a0:ca:48:4a:aa:d5:da:89:bc:7f:f4:df:98:
         2a:de:91:09:c1:04:6d:1e:2d:0f:fa:ae:18:51:f6:c9:1c:de:
         df:f6:aa:82:9f:26:2c:32:15:35:6a:67:09:70:76:f2:ed:36:
         a1:4f:77:9d:19:f5:8e:5f:3a:da:a5:50:55:d0:ea:fd:36:49:
         66:bf:03:74:e5:6c:44:48:99:d7:91:d6:bb:62:de:f9:6e:84:
         f5:f1:4b:8c:1f:f1:42:a2:ee:0c:88:8a:89:68:98:26:73:dd:
         ea:68:da:6d:9e:a0:39:0f:2f:fb:cf:d4:9e:ba:fd:44:8d:4c:
         d1:0d:b7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 09:41:09 2024 by rpki-client on console-ams.rpki-client.org