Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/D926DBDA605211EF90C2C621C4F9AE02.roa
File:                     D926DBDA605211EF90C2C621C4F9AE02.roa (raw, json)
Hash identifier:          tkJcG248FdMtD+BEeatR1cEXQikLyK5thc50Bl6i7SE=
Subject key identifier:   30:88:E4:12:C1:B1:16:9C:8F:85:4E:8C:A1:7C:66:41:61:40:94:80
Certificate issuer:       /CN=A91E2EF9/serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88
Certificate serial:       02
Authority key identifier: 94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/D926DBDA605211EF90C2C621C4F9AE02.roa
Signing time:             Thu 22 Aug 2024 06:50:42 +0000
ROA not before:           Thu 22 Aug 2024 06:50:42 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     38493
IP address blocks:        103.125.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl
                          rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2EF9/serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88
        Validity
            Not Before: Aug 22 06:50:42 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=66c6dfc2-8a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:59:14:1b:33:fb:19:df:90:0c:f9:25:c8:6f:
                    6f:b7:b0:5d:f5:d4:4c:a6:35:85:94:d1:3a:ae:ff:
                    eb:f9:6d:e1:84:b8:3b:0e:31:ca:91:ab:6e:b0:28:
                    0d:be:81:6d:32:d1:d1:6b:ea:d5:b8:6f:67:95:3c:
                    74:53:5c:a1:5e:45:e4:ad:16:61:73:de:be:af:90:
                    60:ea:70:97:50:62:ad:b8:36:87:7d:8d:a0:7d:0f:
                    c2:29:9f:68:c0:d0:ea:ec:d5:a6:b8:22:80:32:c5:
                    77:3f:85:d6:f9:d1:f7:15:30:58:16:25:eb:e5:3e:
                    55:a4:de:e2:27:cb:54:3e:7a:71:b0:80:db:60:04:
                    73:9a:26:88:d1:a4:7b:7a:86:18:6c:98:41:8d:57:
                    03:7d:75:b4:bd:13:1c:58:5b:33:09:4b:9a:ef:e3:
                    fa:a0:8f:83:e2:20:7f:2d:15:c2:5c:c6:4f:c8:06:
                    46:1a:d1:18:7c:34:9d:2b:5b:02:09:d3:07:13:e2:
                    05:b6:8a:56:68:a4:b9:59:29:2a:68:4c:8f:dc:c7:
                    df:ab:1a:aa:05:c0:f5:38:bf:b3:c7:80:13:ef:d2:
                    77:6b:57:ce:de:89:a5:e7:56:60:eb:14:f5:cf:e4:
                    29:b8:cf:54:d5:14:bd:0d:84:c7:1b:de:4f:35:30:
                    00:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:88:E4:12:C1:B1:16:9C:8F:85:4E:8C:A1:7C:66:41:61:40:94:80
            X509v3 Authority Key Identifier:
                keyid:94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/D926DBDA605211EF90C2C621C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:75:75:44:42:5b:2a:95:a5:72:3d:49:c1:5c:bf:ba:6d:f2:
         de:e5:fb:e0:ca:a7:5a:bf:54:eb:72:4c:8e:89:37:ba:fc:ec:
         fc:01:08:b8:bb:5c:76:0e:91:fe:b0:9f:67:89:bd:31:c5:e4:
         63:2e:ad:37:5a:df:c9:40:b9:54:76:b6:c8:9f:40:61:58:13:
         f4:3a:fd:31:89:8d:bf:ee:e3:e3:af:da:78:c7:66:d4:3c:2f:
         ba:f3:46:cc:29:5a:c9:fa:81:f8:30:2c:ab:cd:bd:30:34:5b:
         85:61:1f:42:e0:72:33:3b:f2:f6:7f:38:0f:22:11:dd:a6:41:
         0f:80:53:e2:f8:75:66:32:aa:89:85:46:d4:e7:7e:85:d8:cf:
         ab:9a:fe:7a:cb:f3:f6:95:1d:40:e4:9d:2d:c9:a7:b4:52:f1:
         b1:63:43:69:db:9a:35:1d:2a:ee:ba:1a:68:65:11:f2:0a:ad:
         1c:fc:da:6d:be:a0:09:a2:b2:7b:a0:eb:74:8f:7c:93:21:39:
         e6:ad:f5:c2:69:f9:46:85:6b:a6:02:44:d5:db:76:fc:7c:7d:
         92:b4:ee:8e:df:0f:23:ef:e4:49:13:61:dd:a3:22:48:0e:6f:
         7a:06:c4:01:5b:c2:f9:77:21:f1:f5:82:10:1b:fe:cc:9e:0d:
         07:ca:dd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:45:05 2024 by rpki-client on console-ams.rpki-client.org