Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/1FC6B062419811EAA268D964C4F9AE02.roa
File:                     1FC6B062419811EAA268D964C4F9AE02.roa (raw, json)
Hash identifier:          C8iXMjUzV0QbuQGRlsfr36SJbDpqnQOR6HISgduh/mM=
Subject key identifier:   33:F6:EA:6F:85:BC:8A:A6:5C:41:DF:F6:46:DF:85:60:1B:C1:7D:FA
Certificate issuer:       /CN=A91ED2BB/serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
Certificate serial:       09D8
Authority key identifier: A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/1FC6B062419811EAA268D964C4F9AE02.roa
Signing time:             Sat 02 Sep 2023 19:47:27 +0000
ROA not before:           Sat 02 Sep 2023 19:47:27 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     9919
IP address blocks:        103.246.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl
                          rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 21:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2520 (0x9d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED2BB/serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
        Validity
            Not Before: Sep  2 19:47:27 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64f3914e-5761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2e:9e:ed:8e:eb:90:c6:2e:bf:db:e9:95:c9:
                    6a:d3:d4:33:ae:4b:d4:7a:8d:1c:66:23:08:44:58:
                    9b:a8:4e:25:12:da:8d:a7:ef:a1:05:90:0b:75:29:
                    9c:cf:c8:3e:fc:c0:a9:d0:5f:09:db:58:9f:ef:87:
                    a3:fa:ac:92:d8:61:1f:5a:fd:a6:82:e9:d4:3d:d5:
                    18:55:e5:9c:fa:26:b0:ba:25:f5:85:3b:8a:49:a7:
                    4e:51:b5:48:3a:b0:66:54:41:0e:68:05:9a:4e:58:
                    50:e1:13:01:b5:5a:19:74:4a:02:2f:0d:82:4b:9d:
                    a8:33:5e:eb:0f:0a:35:62:3c:bc:d8:74:3d:ae:14:
                    15:1a:51:b2:38:b6:0b:b2:35:54:a3:dc:e2:25:0e:
                    82:eb:db:6d:05:12:dc:1e:fc:f0:ee:60:ed:13:4b:
                    4c:4b:d5:f1:aa:ab:4d:90:35:fe:36:ce:57:4a:c1:
                    4e:5f:65:09:9d:1d:44:d4:ad:58:70:c2:5d:d6:b5:
                    4f:1f:00:6c:f6:ea:fa:b5:f5:42:ad:1a:f0:8d:ad:
                    ad:eb:66:0e:f4:d7:e9:61:87:21:66:82:4e:73:c2:
                    8b:32:41:19:b9:a7:45:45:0f:19:b4:57:d8:df:5b:
                    dc:6b:0a:cb:da:f0:5e:30:4a:3e:2e:64:4c:94:b7:
                    5c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F6:EA:6F:85:BC:8A:A6:5C:41:DF:F6:46:DF:85:60:1B:C1:7D:FA
            X509v3 Authority Key Identifier:
                keyid:A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/1FC6B062419811EAA268D964C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:a8:c8:b0:35:3d:e9:e0:5c:74:eb:8f:28:04:b8:25:89:ed:
         24:f3:2e:45:c5:c7:73:e9:39:14:cc:d8:d9:6f:df:c6:8b:bc:
         64:6b:d6:c2:85:f2:c2:d5:e5:da:68:14:ef:27:66:4d:1f:29:
         5a:db:1d:9d:4a:7c:2c:b2:bf:64:e6:19:0e:ad:18:20:19:58:
         0b:5b:85:c5:de:86:23:47:35:cb:c1:99:79:01:84:6f:f3:87:
         27:a4:cf:c3:96:00:84:18:9b:f5:25:bf:f4:c1:8e:c0:d1:ab:
         86:d2:71:46:20:a3:1b:e3:06:dc:20:ab:66:ae:90:e3:4e:dd:
         a8:ca:6f:7e:f6:50:a4:23:93:d5:cc:04:cb:1a:4c:de:7c:c6:
         4e:c0:bd:d6:84:41:f6:c6:28:48:63:d8:5b:2e:71:dd:6d:a9:
         1d:25:b3:41:11:aa:01:f6:08:79:74:46:5c:09:ef:49:93:7f:
         90:40:ec:8d:45:67:7a:38:a6:e8:28:ad:8d:d5:69:c3:7e:fc:
         a4:17:ad:3a:ad:61:23:1f:3b:a0:34:bf:06:3e:79:f5:96:38:
         18:e5:d3:b0:6c:6e:c0:50:dd:74:9a:75:6f:18:70:54:58:b4:
         05:9d:30:15:fd:51:e4:91:b4:21:eb:dc:9d:97:82:8d:07:4a:
         71:e7:25:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:13:32 2024 by rpki-client on console-ams.rpki-client.org