Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/01109D481B9011EDBC68484CC4F9AE02.roa
File:                     01109D481B9011EDBC68484CC4F9AE02.roa (raw, json)
Hash identifier:          c791advS7FJxJQliNVREZFMZhHtkZDtdWCzXey8hKmc=
Subject key identifier:   52:49:45:2D:27:B2:63:4E:CA:DC:15:66:F7:34:93:1E:A4:2B:45:DE
Certificate issuer:       /CN=A91E28D8/serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E
Certificate serial:       01B4
Authority key identifier: 95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/01109D481B9011EDBC68484CC4F9AE02.roa
Signing time:             Sat 13 Jul 2024 04:25:08 +0000
ROA not before:           Sat 13 Jul 2024 04:25:08 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     149873
IP address blocks:        103.189.226.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl
                          rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E28D8/serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E
        Validity
            Not Before: Jul 13 04:25:08 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=669201a4-bd5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fe:9c:ad:c9:d9:6a:7c:ad:7a:6b:77:9a:c6:
                    eb:cd:e9:f3:b4:79:58:e1:34:4d:90:c0:4b:65:5b:
                    67:b7:82:db:5a:86:6e:c6:8b:cf:ae:14:fc:01:12:
                    09:1d:39:73:78:d0:18:76:d8:b4:56:d1:7d:13:ab:
                    6b:56:5e:e8:e5:62:de:b3:58:36:71:8d:4d:99:90:
                    c3:b7:7b:1a:2f:5c:79:83:05:cb:32:96:b9:97:1f:
                    c8:89:a1:f4:b6:ad:e7:32:53:40:31:b8:4c:09:e5:
                    fe:6c:39:f3:d8:8d:17:3a:cb:5c:07:a6:ce:7d:5a:
                    fd:85:9a:84:95:c2:d5:4d:fe:6f:bc:2f:62:47:bd:
                    ed:74:9a:81:2a:72:5d:e0:34:2d:a9:45:73:f6:9e:
                    bb:e4:aa:00:3c:85:b1:05:a6:4b:31:af:3e:a0:2f:
                    4e:c0:07:17:9c:69:38:29:5f:4f:4c:be:62:61:8f:
                    8a:2c:9b:4c:27:69:93:2f:2b:2d:86:3d:55:de:3d:
                    45:84:23:37:a9:31:69:26:cd:79:18:ec:ab:be:e3:
                    cb:52:c7:86:9f:36:7a:86:49:76:ae:d4:5f:fa:45:
                    55:81:65:14:40:fc:50:1c:07:47:79:c3:c9:de:dc:
                    7d:c4:d4:d1:35:7d:31:7d:cd:ca:f4:ee:ba:75:f2:
                    6e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:49:45:2D:27:B2:63:4E:CA:DC:15:66:F7:34:93:1E:A4:2B:45:DE
            X509v3 Authority Key Identifier:
                keyid:95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/01109D481B9011EDBC68484CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:2b:ff:9c:70:75:e3:e3:83:25:97:d9:9f:6a:67:3a:de:62:
         32:d4:df:a6:07:c2:e6:61:d9:4e:05:77:63:7e:23:9b:da:78:
         73:48:e2:96:3b:3f:65:a7:08:96:34:3c:6c:9e:42:ae:3f:87:
         1a:e4:7c:64:d8:24:98:1f:c7:00:75:c9:bf:c0:8b:eb:d0:96:
         45:7f:2d:75:9f:26:3c:7e:f4:3f:e6:e7:87:5b:1b:8a:79:ca:
         37:e6:c1:f0:51:ae:80:be:be:df:34:b8:a1:7f:80:74:7e:83:
         42:0f:d5:e7:1a:82:6a:7a:91:60:65:7e:d6:4f:c7:dc:53:a8:
         1a:42:f4:fa:0f:92:b1:ad:dc:44:ab:81:29:7f:ca:f2:2a:c1:
         a9:20:61:c3:6b:b5:be:22:b0:7b:77:e5:be:ac:48:03:86:34:
         bc:3c:9d:9e:b2:4a:08:91:be:17:1b:c4:d6:a8:3d:a8:ab:d4:
         c9:2f:07:ea:b4:a2:1a:eb:e3:43:5f:71:fb:48:5b:b8:ab:ea:
         3a:cf:9a:dc:d8:7f:1a:17:69:b4:4b:48:49:65:2a:20:b8:9f:
         b8:58:7d:d4:f2:8a:27:f4:95:44:5f:71:47:98:a8:4d:97:a0:
         7c:bf:46:bc:17:93:bb:1b:58:2e:89:9d:44:ac:59:bb:1d:9a:
         a5:86:3c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:48 2024 by rpki-client on console-fra.rpki-client.org