Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/D76E91DE093411ECAA6B6714C4F9AE02.roa
File:                     D76E91DE093411ECAA6B6714C4F9AE02.roa (raw, json)
Hash identifier:          qUak/G5CE95rx8enDR7HzImHJJvHnA+ExD0yKsDxa8A=
Subject key identifier:   53:CA:1D:37:E0:6E:C2:86:9C:F4:BD:57:1B:92:F9:57:05:6E:7C:C0
Certificate issuer:       /CN=A91F6CB0/serialNumber=6D175A74C1A098BFA2DF7EE4371605FF6A304249
Certificate serial:       048A
Authority key identifier: 6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/D76E91DE093411ECAA6B6714C4F9AE02.roa
Signing time:             Sat 03 Aug 2024 01:43:54 +0000
ROA not before:           Sat 03 Aug 2024 01:43:54 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     45472
IP address blocks:        103.22.198.0/24 maxlen: 24
                          103.22.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.crl
                          rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1162 (0x48a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6CB0/serialNumber=6D175A74C1A098BFA2DF7EE4371605FF6A304249
        Validity
            Not Before: Aug  3 01:43:54 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66ad8b5a-30f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:73:59:e8:a8:39:40:14:44:1c:01:82:0b:48:
                    65:67:88:9d:c4:8f:ee:14:9c:a2:b2:43:20:a4:f9:
                    82:c3:d7:3c:34:00:34:2c:b6:3e:8e:9a:a6:74:86:
                    dc:bd:3b:83:2a:a6:f3:fa:44:ab:4a:e7:fe:28:33:
                    d2:da:31:26:9e:0c:1d:da:d2:3d:ab:88:4e:4e:93:
                    02:d3:7c:1f:e4:ac:bc:b3:73:af:23:73:17:2a:88:
                    24:bd:46:8a:70:d8:6b:0c:fc:9a:b3:ce:ee:c1:53:
                    51:55:87:b4:de:3c:48:df:b0:7d:f8:42:b1:b2:8a:
                    d5:7a:06:06:ea:8a:37:7c:20:6f:3f:93:b1:b2:ff:
                    cc:da:f4:18:62:4d:a2:a8:4c:81:f6:1d:a7:6f:ee:
                    a3:93:63:e4:9d:0c:10:6b:01:07:f9:6c:46:81:f5:
                    11:2a:4e:1d:cc:30:91:40:2c:b1:ee:ac:1a:9e:b7:
                    14:9a:9f:c1:38:ec:d0:3c:4b:3f:30:49:9c:85:ce:
                    ba:3f:ab:e5:99:17:b3:13:b7:19:ee:09:1e:49:91:
                    ce:1a:89:bc:4b:45:83:de:15:c2:69:f0:9e:9b:de:
                    10:b7:bc:ac:0f:ed:17:e6:67:b7:83:f6:0c:f1:02:
                    f7:d6:5d:85:db:a8:d2:d8:9c:32:88:ab:d1:a6:bd:
                    b4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CA:1D:37:E0:6E:C2:86:9C:F4:BD:57:1B:92:F9:57:05:6E:7C:C0
            X509v3 Authority Key Identifier:
                keyid:6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/D76E91DE093411ECAA6B6714C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:ba:bd:f8:ed:57:26:d2:9c:3b:d6:eb:d4:a1:1f:a9:c6:04:
         28:72:01:70:bd:2f:52:0e:2a:6a:ea:01:38:75:a0:c7:5c:87:
         63:78:67:83:25:a0:da:a0:58:4d:2a:66:8e:c6:22:86:3f:e7:
         8a:64:26:28:79:66:99:6d:27:f1:9e:10:98:2e:20:00:0f:31:
         08:86:1e:c2:45:21:39:88:e8:f1:a8:88:33:0f:d6:ae:96:40:
         e8:e3:5a:23:e9:8f:68:1b:1d:ba:03:0c:62:7d:94:18:36:01:
         ed:9d:c3:2f:fb:86:b5:ee:2b:80:6a:79:db:40:f3:78:d3:cb:
         8a:2e:e9:a9:0b:2f:a2:b8:e6:26:e6:20:75:ff:9f:20:fc:e0:
         57:b2:00:7c:3b:59:7e:0d:9a:ec:c3:3b:f5:83:4b:89:c4:be:
         fe:a2:f2:ac:5d:2d:a0:34:36:ab:b1:24:21:fc:30:f4:db:f5:
         a5:78:a9:d3:6c:1c:68:45:c5:a6:39:34:c8:1a:ad:3e:99:85:
         64:5d:9d:a1:76:9c:f2:23:1e:1c:74:96:8d:53:ec:19:ec:36:
         0f:ca:bb:93:5f:40:27:70:7a:eb:81:cc:27:4f:46:bf:59:34:
         7b:88:ff:23:ae:4f:27:40:28:f0:ee:3a:52:67:e4:c3:a0:53:
         c1:76:86:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:39 2024 by rpki-client on console-fra.rpki-client.org