Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa
File:                     FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa (raw, json)
Hash identifier:          EbIaf/1Sy/3aBx9khl+6A1cQZxzTMmTyasNR7QqdjR8=
Subject key identifier:   A3:C9:C6:A5:85:ED:82:F5:0C:A5:BA:50:3D:FD:5E:B3:80:21:A4:17
Certificate issuer:       /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930
Certificate serial:       343E
Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa
Signing time:             Fri 04 Oct 2024 15:21:20 +0000
ROA not before:           Fri 04 Oct 2024 15:21:20 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     140955
IP address blocks:        103.136.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl
                          rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 15:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13374 (0x343e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930
        Validity
            Not Before: Oct  4 15:21:20 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=670007ef-fc90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d1:0e:6a:d3:5d:ed:ea:1c:a4:a8:ca:01:b7:
                    c4:b8:fa:f5:c6:af:c2:97:7b:7a:98:d1:dc:89:17:
                    68:ca:74:aa:82:7f:5b:15:de:10:5a:13:24:9a:20:
                    c6:58:3e:16:cc:cd:db:5a:44:6d:26:e7:0c:f8:a2:
                    0d:05:96:c2:9a:f9:e8:19:13:6c:67:e6:9b:6a:1e:
                    95:2e:25:04:66:2e:70:23:fd:8c:25:84:21:e6:2d:
                    1c:65:cc:7d:74:15:38:a5:86:80:0d:27:ba:60:e9:
                    f1:ac:f8:cc:5d:b1:69:23:b8:63:fe:cc:1e:71:8b:
                    fa:00:db:08:a8:18:d1:f3:f9:b6:4f:7e:06:5f:0d:
                    c6:01:86:9e:3f:fc:7c:0f:86:3a:2d:b5:1e:88:90:
                    2f:cc:b3:fd:37:63:af:d5:71:49:f3:3f:95:51:0a:
                    6a:a1:e6:f5:00:73:a9:1e:d6:70:5d:4c:65:0d:5b:
                    9c:5a:80:f8:3d:dc:7f:05:01:70:1a:b1:2f:69:80:
                    b5:9a:f3:84:66:b7:2c:2f:0a:68:e3:9b:71:ce:e7:
                    16:4e:35:48:f9:fb:4d:52:5a:8c:4a:a0:9a:ce:09:
                    a2:86:9d:76:c4:91:06:ae:f3:86:0e:ef:d9:17:ac:
                    5e:37:97:2b:c9:db:6d:13:02:e1:5d:b9:b8:b3:49:
                    cf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C9:C6:A5:85:ED:82:F5:0C:A5:BA:50:3D:FD:5E:B3:80:21:A4:17
            X509v3 Authority Key Identifier:
                keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:b8:c5:58:27:80:45:a9:23:7c:74:42:cf:12:95:b0:0c:0e:
         d7:0c:14:a5:3f:4a:21:e7:47:4f:8f:e2:f1:73:30:1c:2e:a1:
         8e:70:9c:ed:7c:45:73:ba:cb:e7:bd:55:cd:84:1d:b9:53:c2:
         3b:e8:18:ca:bb:42:1c:8b:9f:71:3e:d3:55:ff:bc:f1:83:cd:
         ba:0c:1f:61:8d:52:e3:45:2b:2e:bc:56:4f:cf:24:70:3c:65:
         cc:a9:28:3f:20:92:33:ab:11:99:8b:d9:ca:6b:6a:a5:66:ca:
         c3:83:3b:ae:98:63:2c:35:82:44:d1:96:29:34:b7:9c:7e:9e:
         9f:07:69:d6:6b:d4:6c:75:48:36:2d:bb:d5:bc:af:3b:13:1d:
         e9:51:5d:71:9f:88:ce:3d:3f:12:e2:f5:32:25:a0:9c:82:17:
         bd:23:53:3d:be:e9:09:03:c2:ec:3e:c9:b3:64:76:72:66:a7:
         5f:6e:39:51:63:50:0b:90:ee:c4:2d:90:e1:32:b5:d1:e7:ef:
         36:da:33:8c:6f:3d:39:75:30:29:53:74:d1:ad:9f:7e:c3:d1:
         3a:fe:b9:8a:ef:90:e7:78:6b:df:24:59:92:01:bf:be:e8:c8:
         d5:0e:46:01:1d:e7:8a:aa:65:31:89:8a:9b:b8:8e:76:07:55:
         e1:91:89:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:20:07 2024 by rpki-client on console-fra.rpki-client.org