Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/81BA905AB5E811EDA7091163C4F9AE02.roa
File:                     81BA905AB5E811EDA7091163C4F9AE02.roa (raw, json)
Hash identifier:          KuhfA0h0fU7PC9HbE51Sqnz5h1zO5p0TnicH+m1oCF4=
Subject key identifier:   81:AD:00:F8:AF:DE:21:CC:4A:F7:09:44:EB:63:93:60:77:BB:AD:8F
Certificate issuer:       /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Certificate serial:       014A
Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/81BA905AB5E811EDA7091163C4F9AE02.roa
Signing time:             Thu 31 Oct 2024 02:36:22 +0000
ROA not before:           Thu 31 Oct 2024 02:36:22 +0000
ROA not after:            Sat 01 Mar 2025 00:00:00 +0000
asID:                     150778
IP address blocks:        103.93.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:36:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
        Validity
            Not Before: Oct 31 02:36:22 2024 GMT
            Not After : Mar  1 00:00:00 2025 GMT
        Subject: CN=6722ed26-c349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f0:14:22:fc:22:e6:93:95:26:48:34:ee:d9:
                    8d:94:10:51:2c:15:7e:81:51:09:93:20:c1:26:c0:
                    09:36:d9:45:45:3e:63:18:6b:fb:99:51:97:7f:83:
                    80:e7:f3:b4:17:17:ca:d2:c9:35:48:c6:20:4c:00:
                    c2:1a:89:0d:3c:1c:86:36:1e:1c:df:32:d6:88:59:
                    02:de:ca:3a:cf:38:ef:0b:8f:ec:f2:46:8a:49:21:
                    f5:50:89:72:d7:9d:fb:68:d2:25:e1:58:16:2f:1d:
                    b7:9d:4c:7b:24:88:48:57:9b:d5:52:15:64:25:dd:
                    3a:b4:87:95:e4:be:9c:d3:ff:a1:a7:1d:8c:5a:66:
                    3f:18:09:4f:ec:51:7b:49:a4:30:d1:9f:b5:7b:9f:
                    5b:f3:75:be:70:60:6b:92:ec:e4:c0:8e:ba:56:74:
                    80:fc:b4:db:34:22:d2:c4:69:a9:b3:f5:8e:23:14:
                    50:b6:e1:c6:b1:40:b2:47:22:f6:82:4a:e4:0a:a5:
                    c1:3a:4b:9a:45:83:db:fb:79:77:c8:14:9f:6d:f9:
                    ff:39:68:91:9e:5d:48:8b:06:01:f8:02:7a:0b:91:
                    10:57:49:16:ab:fb:32:dd:46:e2:5f:c0:de:7b:73:
                    54:26:5f:2e:8b:59:b8:66:72:f6:a7:bb:13:54:f9:
                    d3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AD:00:F8:AF:DE:21:CC:4A:F7:09:44:EB:63:93:60:77:BB:AD:8F
            X509v3 Authority Key Identifier:
                keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/81BA905AB5E811EDA7091163C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:09:b5:c1:15:90:7d:12:8f:6a:92:e0:45:16:55:e6:3b:69:
         2c:01:39:80:4f:05:81:52:87:98:21:e7:f3:c8:ea:fa:7b:f7:
         83:f7:d9:48:ec:d6:12:6a:19:46:83:1c:4e:3a:b4:25:ee:33:
         90:35:84:25:13:a1:a5:4e:ba:f8:87:33:a3:e7:2d:ca:46:59:
         4b:ae:3b:80:ff:74:42:a9:8c:02:d0:2f:30:f9:f0:dc:8d:a4:
         e5:57:b2:b2:af:95:d8:ae:8c:84:1c:f0:e5:c5:41:54:98:13:
         de:05:23:f5:ce:67:15:10:6a:29:c6:3e:63:62:ae:28:ec:4b:
         18:af:62:9f:7a:2c:79:b6:ce:43:65:19:1e:a0:10:e3:fc:58:
         f5:a6:61:ab:7b:d8:87:9e:3a:c6:f1:4c:4b:14:a4:24:de:29:
         c6:7f:01:e5:1a:df:d0:ce:38:6c:1f:9b:74:cd:36:2a:b4:5a:
         33:ed:65:f6:4c:27:92:90:d7:fb:ac:3f:1b:11:26:d9:2d:1a:
         d6:09:e9:48:d7:ec:8b:dd:9e:1c:18:ca:1f:58:f2:c0:02:02:
         d7:32:4a:b2:fb:72:d5:87:1a:50:ca:61:9f:92:b3:42:3a:b8:
         81:e1:27:b5:2a:1e:50:82:8e:c5:c1:d8:8c:cc:1d:6b:76:e7:
         e4:21:dc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:06:08 2024 by rpki-client on console-fra.rpki-client.org