Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/0AC48B08855211EC8C06075AC4F9AE02.roa
File:                     0AC48B08855211EC8C06075AC4F9AE02.roa (raw, json)
Hash identifier:          2QJmDZYcJvMKA1VD3KctOJhUNhu4gmHGXcVx8gxtotI=
Subject key identifier:   6A:91:F0:78:58:15:0B:FA:B1:13:97:55:50:09:C0:01:F6:FC:85:66
Certificate issuer:       /CN=A91F1610/serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D
Certificate serial:       032F
Authority key identifier: 8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/0AC48B08855211EC8C06075AC4F9AE02.roa
Signing time:             Sun 23 Jun 2024 02:42:23 +0000
ROA not before:           Sun 23 Jun 2024 02:42:23 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     137847
IP address blocks:        103.115.136.0/22 maxlen: 24
                          2402:e8c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl
                          rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 815 (0x32f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1610/serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D
        Validity
            Not Before: Jun 23 02:42:23 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66778b8e-bbef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f0:5a:81:16:7c:e5:9d:fe:04:3c:80:c7:26:
                    c2:18:05:db:15:a4:70:05:8d:18:18:b0:89:29:31:
                    07:ce:4c:0f:05:b1:6a:e9:18:0b:ee:55:7b:1e:2c:
                    3a:5d:02:66:8f:b1:16:cb:cb:b5:13:07:f0:d6:72:
                    51:6d:98:2e:a4:5d:bf:44:23:f5:7b:e5:dc:c5:28:
                    fc:0b:9d:a5:4c:9f:48:ef:56:ce:c4:51:91:99:dc:
                    5a:8c:24:a9:42:82:a9:72:b4:fe:b6:f5:0b:f5:6b:
                    a5:a1:9a:88:bb:ed:7d:98:d4:54:e3:3d:aa:f5:89:
                    7b:63:a9:4d:e6:55:7d:15:d6:e1:b6:9a:b2:30:e5:
                    5a:ae:92:70:f3:60:3f:e6:a4:1d:ee:08:34:3e:fa:
                    cb:b5:c6:cf:67:c2:d9:ab:68:32:89:57:29:19:5d:
                    14:08:60:2c:c3:58:38:35:8b:66:60:cb:ea:ab:cb:
                    9b:05:74:f1:f6:5a:9c:eb:8c:e9:4b:a6:a2:1c:12:
                    30:ff:c1:1f:89:f2:64:46:69:c1:a9:80:8e:d7:3e:
                    4f:ec:bf:b9:42:05:fe:48:02:be:0b:80:e0:23:c8:
                    bb:d2:2b:02:2b:84:e3:e9:d2:b8:e4:4a:a2:45:0a:
                    4c:4f:92:f4:78:03:4e:b7:36:fa:8d:e6:78:3d:5f:
                    77:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:91:F0:78:58:15:0B:FA:B1:13:97:55:50:09:C0:01:F6:FC:85:66
            X509v3 Authority Key Identifier:
                keyid:8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/0AC48B08855211EC8C06075AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.136.0/22
                IPv6:
                  2402:e8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:fd:c4:7c:e0:b9:f3:29:9a:ed:71:8b:8e:e0:38:35:53:68:
         53:7f:74:a1:07:62:6f:fa:50:6e:d7:9b:15:8f:84:4c:a7:5b:
         e2:19:d8:ac:14:83:7c:8b:36:4f:67:45:b6:23:27:02:97:cb:
         0f:77:14:93:83:ce:04:ce:ae:84:fd:dc:5b:d2:8f:5b:b8:45:
         b3:36:b6:4e:57:11:c2:cf:ee:3e:27:24:b4:ce:1a:bf:31:c2:
         a2:56:f5:64:93:1f:67:80:a6:5d:f9:e1:72:f5:5a:f1:78:16:
         26:ee:94:6c:59:24:0d:1b:e5:8b:3b:eb:90:81:7b:6f:3b:5c:
         35:67:a7:5b:4a:d4:8d:81:49:fb:48:0a:81:88:f9:df:cd:5e:
         5d:6f:46:01:b1:8f:7f:c0:39:eb:2a:90:c3:b4:60:35:84:5f:
         7d:cb:85:b0:2f:11:b1:14:28:7c:80:a4:ab:22:dd:1b:78:f6:
         f1:08:d8:5f:10:b7:ea:ea:a9:1a:a4:9a:cb:02:03:b0:ea:ae:
         c4:6d:5d:a2:2a:c5:81:61:6e:e2:b5:f7:cb:78:be:b2:0d:21:
         66:94:14:fc:fc:ad:a5:e2:07:52:b3:77:05:a7:2a:78:50:f6:
         83:d2:f7:fb:0c:77:82:8b:6d:32:22:35:67:29:54:5e:e3:45:
         de:46:97:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:50 2024 by rpki-client on console-fra.rpki-client.org