Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/261A4C3432B611EBBB18F11EC4F9AE02.roa
File:                     261A4C3432B611EBBB18F11EC4F9AE02.roa (raw, json)
Hash identifier:          kbdjY2OJIhMziw3qryw6oHlmwYn20X0C78rnakQFSs8=
Subject key identifier:   39:69:EA:AE:30:0E:32:A6:62:7D:5A:D6:EF:EC:4E:07:A0:BD:C1:57
Certificate issuer:       /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
Certificate serial:       05CD
Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/261A4C3432B611EBBB18F11EC4F9AE02.roa
Signing time:             Sat 22 Apr 2023 07:00:49 +0000
ROA not before:           Sat 22 Apr 2023 07:00:49 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     139006
IP address blocks:        103.91.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl
                          rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Jun 2024 21:17:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1485 (0x5cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
        Validity
            Not Before: Apr 22 07:00:49 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64438621-7046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:03:71:7c:6a:9d:4a:f9:0b:c3:e3:d9:ac:24:
                    9f:5d:b1:70:83:2c:e1:3d:f0:0d:13:52:ef:dc:2a:
                    20:67:51:36:73:1d:e4:4e:c5:7d:fd:ba:3c:0f:6a:
                    ae:f9:ef:49:dc:1d:92:0e:58:cc:75:78:13:39:7a:
                    cb:08:91:c3:af:bd:4c:18:e2:56:15:ba:0c:b7:19:
                    0f:a6:9d:87:d4:90:14:34:b0:5e:6f:84:99:21:31:
                    e2:2d:9d:bd:a7:e1:a4:51:08:eb:56:90:4d:c1:91:
                    03:3b:90:24:9e:71:d0:d9:16:f1:a5:f8:73:9b:b9:
                    46:e5:20:fe:d4:3e:c9:84:7f:7a:11:18:64:dc:e4:
                    9d:71:85:92:f5:69:fd:02:d5:40:54:4a:86:45:7e:
                    0f:8b:c9:af:80:2b:0a:99:26:bb:c5:ec:7b:b8:c9:
                    e8:31:1f:f7:1a:af:8d:e0:52:b9:46:bc:77:7d:a8:
                    af:92:f9:2e:07:c5:90:bb:d2:fc:4f:76:33:58:18:
                    e5:61:ab:1f:7d:17:59:24:2f:b9:5b:90:09:ec:d3:
                    90:a3:81:ae:6b:c2:64:2a:18:46:30:f0:40:68:39:
                    d4:5a:a2:89:67:25:66:0b:2f:1e:9e:99:b1:0e:55:
                    ff:3b:b2:3b:b8:ca:7a:a1:c1:d1:8a:ad:a9:11:c5:
                    9f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:69:EA:AE:30:0E:32:A6:62:7D:5A:D6:EF:EC:4E:07:A0:BD:C1:57
            X509v3 Authority Key Identifier:
                keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/261A4C3432B611EBBB18F11EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:6b:c1:02:d9:86:40:fd:79:e4:84:7f:60:c3:2e:a1:a1:33:
         92:55:72:b5:7a:e5:41:f2:7d:6e:4a:84:60:ac:38:ab:c4:ef:
         62:a6:35:ca:8a:87:af:73:21:88:95:71:8b:09:ec:1e:a1:e6:
         eb:18:e7:a0:ca:df:77:8d:92:d7:b2:45:e9:0d:34:31:50:c4:
         e1:89:b1:70:a9:be:c8:a0:28:6e:f2:cd:78:d5:d2:dc:73:99:
         73:05:d5:11:14:6d:cd:bf:10:89:af:91:bf:ae:38:13:da:9e:
         c7:ef:b9:b7:1c:3e:c7:d0:83:55:f2:02:6d:04:af:1b:3c:f8:
         94:58:b0:0b:13:c9:fa:5b:1e:67:0c:cf:27:ea:49:76:e9:c7:
         2b:c4:77:e3:d0:97:b4:07:72:50:84:26:16:2b:e0:0f:32:24:
         8b:f4:d7:eb:bc:92:76:10:8a:30:d2:3d:f8:fc:31:60:4d:6a:
         06:2b:d5:5e:5a:f8:6f:06:b7:fb:6f:d9:31:8d:af:16:b6:0f:
         6e:73:75:f8:10:61:de:03:95:a4:a1:f9:e5:42:f5:3a:65:bd:
         83:21:f4:12:48:94:9e:bd:75:59:34:67:04:47:d6:da:49:53:
         ff:c9:18:2d:87:0e:0e:fb:2a:2e:52:5a:cd:f3:49:c7:11:b2:
         29:ec:41:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 23:57:05 2024 by rpki-client on console-fra.rpki-client.org