Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/512CFEFE68BD11EE87942B4EC4F9AE02.roa
File:                     512CFEFE68BD11EE87942B4EC4F9AE02.roa (raw, json)
Hash identifier:          wxzifKiO/1duDLAOqG/EgJqXNOBnq5EBtgG/0AK/VlY=
Subject key identifier:   0D:90:8D:24:93:B0:14:D1:3D:B8:92:E9:D0:0A:9F:26:52:2F:33:0E
Certificate issuer:       /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Certificate serial:       C3
Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/512CFEFE68BD11EE87942B4EC4F9AE02.roa
Signing time:             Tue 15 Oct 2024 04:29:16 +0000
ROA not before:           Tue 15 Oct 2024 04:29:16 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     138360
IP address blocks:        103.131.106.0/24 maxlen: 24
                          103.142.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
                          rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
        Validity
            Not Before: Oct 15 04:29:16 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=670def9c-691f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:3f:25:3b:79:7c:76:41:38:f3:ba:a7:4c:
                    c4:17:25:1f:38:79:70:f9:11:27:1b:83:3f:d2:60:
                    d5:8c:92:4b:8a:97:97:ef:9e:b0:69:ed:e8:21:e4:
                    20:b0:89:9d:07:bf:64:1e:5c:c1:5a:39:36:e6:f5:
                    5d:ab:45:17:c3:4c:b3:1e:89:f8:45:85:d6:80:27:
                    ac:3c:a1:20:a9:cd:94:09:ab:70:36:7e:5e:15:6c:
                    d6:e5:05:23:44:fd:91:96:a3:eb:ee:d7:b6:83:c3:
                    97:1c:7b:52:cc:48:ff:02:db:44:de:a6:fa:69:58:
                    da:37:f8:58:1b:2b:94:0b:d9:c7:62:88:4c:e6:f8:
                    c8:4b:ca:39:8a:db:9a:4a:df:40:74:10:22:ae:59:
                    ea:28:e3:4f:cd:0c:55:62:f4:20:49:75:b4:8c:c6:
                    70:25:26:3f:8c:c4:5d:f8:99:31:ea:5e:2f:25:3f:
                    85:1e:72:7b:10:ef:e6:b4:89:51:de:61:f3:c8:1f:
                    85:59:43:d7:04:d0:d0:2e:d5:db:b6:93:f9:ed:e6:
                    20:33:3f:06:8a:b0:49:76:49:21:a6:48:96:5e:2b:
                    26:59:73:69:2e:1e:cd:88:1f:9d:1c:59:66:1d:65:
                    19:b8:81:17:60:9d:e6:03:2d:6f:ad:9f:48:70:51:
                    da:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:90:8D:24:93:B0:14:D1:3D:B8:92:E9:D0:0A:9F:26:52:2F:33:0E
            X509v3 Authority Key Identifier:
                keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/512CFEFE68BD11EE87942B4EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.106.0/24
                  103.142.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:8a:09:df:2e:99:0b:ca:63:06:20:b6:9f:cd:35:00:71:f0:
         5e:1e:80:7a:8b:79:ae:1c:12:ef:f0:ef:8e:a0:6a:95:97:da:
         4e:d3:e9:cf:19:39:48:a0:45:cc:7f:a6:68:7d:9a:35:d5:68:
         bd:9b:0d:45:74:2e:17:9b:26:ae:97:e6:ae:41:6d:1b:10:dc:
         65:6c:77:54:88:0c:3a:96:eb:61:82:d2:2b:68:0d:74:40:0a:
         85:5b:50:9e:9f:8e:fb:4e:e1:b5:59:62:b6:ec:a5:a2:05:a1:
         b3:ca:63:f8:c8:82:73:59:6b:18:ab:28:19:e3:03:57:67:f3:
         b8:00:2d:96:82:c4:1c:a0:83:2b:90:a4:88:c0:f0:d9:00:d2:
         15:bd:0f:70:f1:a0:79:5d:04:40:64:06:48:d5:30:a7:3b:8b:
         cb:aa:d7:dd:1a:98:7c:4b:aa:70:c1:24:35:bc:05:e7:69:ee:
         2e:b7:2e:d2:38:3b:6b:55:9d:00:ae:a1:58:0e:01:34:e1:15:
         7f:ed:ed:90:d5:35:a9:54:23:db:d8:b8:60:bf:c3:e9:c1:59:
         42:d0:ec:35:d2:bc:db:55:e1:79:63:e4:c8:be:6a:6d:02:f2:
         a9:0a:56:41:46:c0:54:22:7f:b1:49:ed:b5:6d:1b:62:f5:1c:
         4b:da:29:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:58 2024 by rpki-client on console-fra.rpki-client.org