Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/38DEC3C04ED611ED84336740C4F9AE02.roa
File:                     38DEC3C04ED611ED84336740C4F9AE02.roa (raw, json)
Hash identifier:          SYKjgHEXo5m2moa0ugIv9WzIl1i1pLYgcR5vMrtTYOA=
Subject key identifier:   E9:E2:4E:7C:D8:D7:B5:81:C3:24:B3:0C:8F:47:46:02:EB:40:53:59
Certificate issuer:       /CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A
Certificate serial:       E6
Authority key identifier: 89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/38DEC3C04ED611ED84336740C4F9AE02.roa
Signing time:             Sun 31 Dec 2023 04:25:39 +0000
ROA not before:           Sun 31 Dec 2023 04:25:39 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     132136
IP address blocks:        103.247.116.0/24 maxlen: 24
                          2001:df7:6a00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl
                          rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A
        Validity
            Not Before: Dec 31 04:25:39 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6590ed43-dab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ce:3d:e9:bd:63:ae:cc:88:23:d3:b9:73:77:
                    02:a0:b5:ae:3b:1e:44:cc:b2:2c:8d:c2:1b:ed:ee:
                    1c:c8:2a:3c:da:9c:ae:31:a0:92:b2:d2:6b:12:80:
                    e7:3c:1a:df:7e:87:d3:e3:8d:2b:56:ef:08:0c:3e:
                    bb:9f:c2:71:8a:ad:c1:1d:82:1d:54:eb:63:3d:06:
                    20:a9:d4:95:c0:b5:2b:20:11:96:91:5f:36:8f:cf:
                    52:59:9d:95:6e:00:76:00:70:3a:9b:08:35:3e:e4:
                    b4:7d:87:8c:dc:a6:37:a4:b3:64:59:e3:38:25:51:
                    9a:e6:e2:1e:0f:c6:09:15:06:29:75:9a:52:01:e7:
                    b6:2b:88:a4:a0:b7:6b:63:bd:78:bd:4a:86:a3:7b:
                    03:07:60:77:67:39:3b:ec:3b:1e:d9:6c:3f:94:a2:
                    c7:99:f1:51:39:45:39:f9:52:28:44:47:66:c9:b0:
                    87:c3:34:04:c5:d6:e4:07:fa:89:bc:dc:f4:50:9f:
                    ce:53:29:2a:35:98:a0:c1:d4:43:99:fd:a9:63:25:
                    29:ef:e2:75:30:4b:cf:0a:7f:1d:46:c8:0c:db:b5:
                    53:7f:2a:98:76:15:ba:08:56:00:17:13:d2:60:57:
                    f5:02:f0:e7:4a:13:ae:a8:0c:cb:00:ae:fe:9b:5a:
                    48:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E2:4E:7C:D8:D7:B5:81:C3:24:B3:0C:8F:47:46:02:EB:40:53:59
            X509v3 Authority Key Identifier:
                keyid:89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/38DEC3C04ED611ED84336740C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.116.0/24
                IPv6:
                  2001:df7:6a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:c1:46:19:0b:45:5d:3a:47:cc:3e:76:da:fd:b7:75:f3:96:
         f8:24:8c:52:4a:6b:75:dc:18:92:ab:bf:5f:6e:3b:88:cb:71:
         b7:fb:62:2b:6a:d3:f7:00:cb:40:db:a8:c7:70:c4:78:3b:62:
         ca:f2:dc:cc:de:93:fe:02:a2:10:85:ed:b0:27:59:a0:52:b8:
         4c:62:70:ec:d6:35:c3:6f:11:0c:2b:c3:78:8c:e3:59:24:d2:
         47:64:0a:fc:18:dd:0c:dd:ff:50:69:ad:ce:27:a7:65:44:bb:
         9a:01:88:1a:a6:da:85:a3:78:24:2f:9e:19:5a:5f:f7:e9:ca:
         45:df:f9:3f:49:94:3f:d1:c3:93:f0:0d:d9:54:3d:b6:f7:e0:
         d0:72:02:bb:77:67:83:a0:7c:b5:f3:da:5e:8a:9e:c3:f7:c2:
         59:e0:1e:1a:0d:42:35:51:43:1b:94:9a:88:26:b6:96:d7:0c:
         52:a7:96:70:15:9c:69:a0:46:0a:c3:0a:d2:cb:5a:24:ee:45:
         a8:6e:6b:bb:d3:9e:ce:02:f5:62:fa:4f:3c:0b:50:0c:8c:ae:
         97:34:07:6b:e5:fa:7a:e9:98:86:1c:0d:e8:d3:ad:8d:68:bf:
         eb:32:9c:3d:c5:3e:dc:0d:12:dc:da:48:51:e8:77:a3:46:b3:
         cb:a5:60:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:59 2024 by rpki-client on console-fra.rpki-client.org