Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/0AE7E0B6421711EE97070469C4F9AE02.roa
File:                     0AE7E0B6421711EE97070469C4F9AE02.roa (raw, json)
Hash identifier:          /4GsPDOsOz6IKJ8MiECwyeOuOhiaIGDZwISWVLxNOyo=
Subject key identifier:   44:39:2F:61:E1:A8:74:66:05:BC:86:BE:7C:07:A1:D3:F8:FC:9D:36
Certificate issuer:       /CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363
Certificate serial:       88
Authority key identifier: 16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/0AE7E0B6421711EE97070469C4F9AE02.roa
Signing time:             Sun 05 May 2024 07:39:31 +0000
ROA not before:           Sun 05 May 2024 07:39:31 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7387
IP address blocks:        103.184.102.0/24 maxlen: 24
                          2001:df0:8fc0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl
                          rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363
        Validity
            Not Before: May  5 07:39:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=663737b3-0e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8b:f3:f8:01:ac:6c:b1:70:97:fc:46:f7:df:
                    48:62:6f:e7:58:8f:7a:44:8e:f2:64:5e:a8:01:df:
                    52:26:bd:f3:7b:a7:37:25:55:cb:48:01:d3:70:6d:
                    13:cd:79:80:48:15:5f:31:b7:69:57:e9:a8:9a:00:
                    f2:9b:54:fb:ce:30:43:c2:da:b7:ed:df:cb:58:16:
                    76:b6:07:e4:a6:01:ce:d5:99:d9:44:df:fe:4f:66:
                    3a:92:96:bd:ce:1c:40:a2:68:72:1b:d1:fc:d1:4b:
                    7d:c3:6d:37:05:f1:19:32:4a:c0:07:5f:7f:47:f1:
                    f9:36:9c:25:9e:fe:48:9b:e7:84:77:af:66:a7:e5:
                    50:eb:fa:1d:91:09:ac:22:d5:0a:56:bd:e9:14:20:
                    7b:cd:c1:59:d4:e9:c7:3d:e3:6e:b6:06:b9:6e:39:
                    01:78:8b:ca:11:21:31:9c:21:03:ca:03:f6:a7:74:
                    55:d4:cb:ea:0e:be:0e:cf:c5:c6:34:14:e2:90:96:
                    09:92:74:ff:5a:8f:71:ad:38:e0:c5:8b:f9:41:ec:
                    fb:50:8f:4b:ba:e9:c6:45:e5:b8:4d:a4:26:9b:44:
                    74:90:54:7c:db:2c:67:2d:df:1f:79:e8:d2:1b:8c:
                    29:3e:c3:d1:0e:4e:18:3c:55:ea:52:0a:4d:bc:42:
                    0c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:39:2F:61:E1:A8:74:66:05:BC:86:BE:7C:07:A1:D3:F8:FC:9D:36
            X509v3 Authority Key Identifier:
                keyid:16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/0AE7E0B6421711EE97070469C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.102.0/24
                IPv6:
                  2001:df0:8fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:3b:a1:fe:25:2f:5e:0b:71:cb:af:aa:de:12:a4:af:ff:9b:
         9e:b4:fc:81:1c:56:f7:06:e0:d4:14:0c:d4:f9:b9:70:70:68:
         67:cc:a7:ff:cd:b8:26:44:28:41:43:14:7a:0b:51:9a:79:90:
         21:c2:88:f6:6a:a5:29:b3:b9:e0:6f:81:28:a7:ab:f5:bd:a5:
         e0:66:a1:bb:64:48:9b:60:c3:ad:b0:08:72:c3:dd:1e:d8:4c:
         95:ba:b5:3c:18:a6:ec:f6:14:65:8c:07:af:19:d8:3c:d4:1f:
         2f:bf:4d:eb:e8:0c:c7:c9:7a:39:92:e1:6e:27:b0:cd:37:b6:
         1e:c4:df:25:9c:38:bf:8e:e8:01:9f:aa:3e:76:4d:b4:7a:a8:
         73:ff:cf:58:2c:bc:75:7f:a2:56:8d:32:49:0d:90:6a:30:d7:
         aa:a1:71:42:7d:b1:df:8d:39:ce:bd:85:74:e3:30:73:0f:39:
         bf:40:5d:25:7c:b4:cf:08:1d:ce:6f:51:d1:14:01:bd:66:a5:
         12:87:0c:45:d4:03:10:12:7d:f9:53:4f:c3:52:4c:1d:c0:07:
         84:c2:bb:ff:6e:66:40:58:62:42:e7:80:4c:a9:29:21:57:1d:
         77:38:a9:f3:be:43:47:d4:e1:31:64:b8:6c:d9:65:cc:5e:a1:
         62:3a:0d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:59 2024 by rpki-client on console-fra.rpki-client.org