Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/F13B6A3C70A711EFBA8AFF10C4F9AE02.roa
File:                     F13B6A3C70A711EFBA8AFF10C4F9AE02.roa (raw, json)
Hash identifier:          jV7pTLLQPAskIihyf9Dp12RJ84TcLdZjS7I4GkFqPvA=
Subject key identifier:   9B:74:DA:F4:B9:86:4F:14:A5:31:A4:B4:23:70:F0:95:33:17:DD:B7
Certificate issuer:       /CN=A91F6799/serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3
Certificate serial:       02
Authority key identifier: 76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/F13B6A3C70A711EFBA8AFF10C4F9AE02.roa
Signing time:             Thu 12 Sep 2024 01:40:08 +0000
ROA not before:           Thu 12 Sep 2024 01:40:08 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     134080
IP address blocks:        103.51.159.0/24 maxlen: 24
                          103.211.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl
                          rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6799/serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3
        Validity
            Not Before: Sep 12 01:40:08 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66e24678-3a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1b:58:23:e0:0d:90:31:e7:de:d0:3a:1e:64:
                    f1:ce:ec:38:6a:22:84:62:f2:6b:94:e7:2a:05:bb:
                    d6:27:cb:cf:52:90:dd:9d:22:88:86:c1:56:22:34:
                    3d:ee:a3:ee:a1:d6:e0:89:42:bf:02:eb:c6:b4:dd:
                    4d:c9:9e:6e:85:5f:c8:87:2f:28:72:fc:77:0b:a5:
                    2a:68:9f:6f:5e:72:34:b5:2c:7e:ca:92:f3:bf:dd:
                    15:42:05:0e:e0:35:e7:01:2f:54:ce:ac:24:29:e5:
                    ab:ea:51:fa:00:1c:f2:a8:36:46:20:12:ed:85:a0:
                    0f:ee:e4:92:4b:ab:f1:35:d6:1a:ef:c1:5a:8e:05:
                    ac:01:fd:cf:6d:d4:31:ae:15:38:1b:8c:52:d1:60:
                    cb:b0:69:86:71:e8:71:97:da:50:0a:55:3e:f7:24:
                    02:2b:7e:4f:7d:e3:7f:43:6c:58:4f:d4:67:a7:e5:
                    0f:7b:c2:89:ab:d0:11:8a:d3:49:59:53:12:e4:33:
                    3b:29:75:70:ac:cd:36:8a:10:05:50:45:94:37:55:
                    c1:eb:69:7c:1a:e7:ad:66:9c:d8:9b:43:42:71:f2:
                    3a:df:4e:8b:de:71:04:ba:f7:61:9c:f6:7a:de:fe:
                    b8:6b:ca:59:1a:43:b1:c0:ae:6e:6d:95:ce:aa:ca:
                    49:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:74:DA:F4:B9:86:4F:14:A5:31:A4:B4:23:70:F0:95:33:17:DD:B7
            X509v3 Authority Key Identifier:
                keyid:76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/F13B6A3C70A711EFBA8AFF10C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.159.0/24
                  103.211.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:c9:dc:87:c4:45:44:4a:4a:bc:32:a3:ea:c8:22:40:70:cc:
         90:fe:83:91:6e:32:3e:60:e9:89:9e:c5:65:12:67:7d:3a:90:
         3b:ba:c8:14:86:0c:51:2c:c1:a5:13:16:ef:3c:2a:62:e5:b2:
         ae:58:93:a7:5b:b3:90:19:2c:4d:40:4d:c7:54:71:60:df:b3:
         6a:27:2a:a7:3a:11:c6:36:1e:22:89:03:a0:fa:fe:ce:65:77:
         1b:55:4c:c7:7f:b9:50:eb:c2:bd:3a:36:c4:6d:cf:a1:68:88:
         56:73:93:7b:f6:c8:71:b4:ac:56:7c:d0:95:b1:aa:4b:2a:7c:
         b3:ae:6c:e7:b4:8e:ab:eb:44:f0:73:e7:22:73:e6:91:d5:91:
         ff:a3:ea:83:bc:27:1c:d8:13:4a:dd:ec:f7:7b:b0:ac:08:19:
         c9:7a:87:bd:e5:27:45:48:f1:34:0d:e3:ed:68:f3:16:de:1d:
         c6:2e:bf:bc:29:24:e5:40:aa:7c:36:c5:a9:0e:36:0b:fa:b9:
         9b:80:3c:b1:e1:71:4d:c8:99:01:ac:c3:2e:b1:9c:a4:84:a7:
         ef:17:4f:8a:59:39:47:d8:57:4f:01:d0:5e:74:c8:17:1e:f1:
         64:28:ad:f7:56:d1:86:b7:da:8a:cb:3f:9b:b6:b3:db:8f:02:
         29:96:77:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:45:06 2024 by rpki-client on console-ams.rpki-client.org