Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/AC56C61497F811EF8D52DE75C4F9AE02.roa
File:                     AC56C61497F811EF8D52DE75C4F9AE02.roa (raw, json)
Hash identifier:          sHFvTnu8iiOhSTaoi08VnkboBzE+UHsLHvG1Rlt2ziw=
Subject key identifier:   57:10:A8:A3:F8:15:3E:04:3C:8E:4F:1A:6C:57:D9:D4:5A:61:CE:55
Certificate issuer:       /CN=A91E96BC/serialNumber=ED11EB4C34804199EA77500EDDBBEEE10B7549AB
Certificate serial:       95
Authority key identifier: ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/AC56C61497F811EF8D52DE75C4F9AE02.roa
Signing time:             Sun 03 Nov 2024 04:47:59 +0000
ROA not before:           Sun 03 Nov 2024 04:47:59 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     139646
IP address blocks:        103.143.14.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl
                          rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E96BC/serialNumber=ED11EB4C34804199EA77500EDDBBEEE10B7549AB
        Validity
            Not Before: Nov  3 04:47:59 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6727007f-9386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:23:56:72:66:c9:93:4b:e3:12:12:12:83:f3:
                    ac:d6:75:c3:3c:78:16:be:10:bb:80:94:31:a1:2b:
                    f2:dc:6b:6b:ab:61:18:c1:18:5e:1a:8b:9c:24:45:
                    40:f8:ad:c6:1d:95:49:87:e3:3d:4b:37:f9:77:dc:
                    3e:c9:b2:1d:47:df:35:61:78:80:6b:35:61:84:71:
                    ec:15:eb:01:9d:27:41:09:60:4d:7d:e5:93:9c:34:
                    d7:e2:2e:89:af:25:f1:54:52:d9:52:d8:0b:40:bf:
                    05:e0:cc:5f:53:a3:f3:91:ba:ed:70:f7:84:b8:79:
                    3b:02:49:fb:82:5c:23:06:bb:ed:8a:8e:67:6f:00:
                    4e:f9:60:2a:a8:e4:9a:00:a3:86:f0:ce:f0:7b:07:
                    fe:94:15:8a:8b:37:b9:ec:c5:0c:4f:1f:53:35:b5:
                    d3:a9:c6:64:58:b0:a5:b9:4c:cb:26:d8:63:10:a8:
                    54:db:51:19:3f:3a:b3:92:71:88:19:17:80:73:96:
                    39:ae:7c:d6:56:93:31:5a:eb:d0:71:f3:95:86:b9:
                    c1:d5:fc:f1:74:b2:e4:e2:85:b3:40:c2:ce:35:4a:
                    62:45:2f:92:88:83:55:4b:0e:c4:c3:07:e5:db:34:
                    ae:a2:a4:0d:25:15:41:8e:ed:67:6d:59:a5:b5:e1:
                    8c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:10:A8:A3:F8:15:3E:04:3C:8E:4F:1A:6C:57:D9:D4:5A:61:CE:55
            X509v3 Authority Key Identifier:
                keyid:ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/AC56C61497F811EF8D52DE75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:e2:5b:93:c5:9c:7b:1a:03:7c:e1:57:57:08:35:94:31:aa:
         aa:9d:97:44:12:0b:d7:c0:7a:13:65:53:7e:a2:60:03:f9:11:
         28:ca:c7:2b:4b:09:e9:c1:e4:d9:2e:c1:47:23:b9:b7:75:69:
         a9:ea:7c:ec:e6:d0:e8:b5:5a:0a:e0:9d:8e:ce:97:94:71:f6:
         c3:45:34:aa:58:82:5b:63:69:fc:d1:6a:9f:8b:3f:2b:4b:6c:
         06:cf:43:99:a4:64:ac:51:e0:17:54:f2:d6:76:5d:7b:79:38:
         47:d6:cc:87:f0:1a:f9:1f:d1:64:5b:48:e4:96:c1:75:8f:70:
         f0:69:eb:d2:4c:7b:20:26:4f:e8:89:53:80:df:19:8f:ff:15:
         d5:73:d0:e3:94:10:92:dd:44:15:81:91:3b:ec:6c:09:8a:36:
         d3:e4:ed:37:7f:73:c9:37:be:c9:d0:40:37:c3:6f:93:4f:7a:
         f2:7d:91:0e:f3:dc:a1:fd:04:f5:68:0f:61:e8:98:c0:d3:07:
         53:2b:e8:28:d1:b5:4f:51:2f:cc:fe:db:60:6f:b0:01:86:81:
         fc:12:2e:38:52:a5:ae:35:3a:96:0b:81:ba:ce:0f:8a:99:f6:
         1f:1d:8f:be:5f:c4:91:2d:00:25:90:9f:86:6a:3d:ff:95:94:
         6e:95:fd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:18 2024 by rpki-client on console-ams.rpki-client.org