Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/66CA9E0C0C5C11ECBD37E846C4F9AE02.roa
File:                     66CA9E0C0C5C11ECBD37E846C4F9AE02.roa (raw, json)
Hash identifier:          9KrFu8rfuzGcElTJ+SW1V8KTmVUFQFDwJgp8Mmol+WA=
Subject key identifier:   0F:37:6C:4D:44:D4:CF:EE:37:06:E2:95:F1:E7:DD:70:2C:9B:D3:86
Certificate issuer:       /CN=A91F7AC9/serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219
Certificate serial:       0442
Authority key identifier: 32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/66CA9E0C0C5C11ECBD37E846C4F9AE02.roa
Signing time:             Wed 01 May 2024 02:35:17 +0000
ROA not before:           Wed 01 May 2024 02:35:17 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     138934
IP address blocks:        103.137.88.0/22 maxlen: 24
                          2404:adc0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl
                          rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1090 (0x442)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7AC9/serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219
        Validity
            Not Before: May  1 02:35:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6631aa65-cdb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ae:21:66:10:d4:f2:fb:0d:5f:d8:6a:b5:a6:
                    c5:5b:ea:3a:cf:bd:70:8f:9f:07:0e:5f:dd:4c:ea:
                    9e:cd:f5:9b:fd:de:30:54:a6:1d:08:be:fb:4b:29:
                    ea:e3:9c:17:d9:66:a3:84:27:89:a3:50:c0:d2:4e:
                    d7:e0:d8:36:37:23:7e:cc:ab:85:9c:a8:2a:c1:10:
                    00:9b:43:0b:ef:bc:72:b3:66:51:f8:f1:0b:21:49:
                    df:51:60:53:11:f4:4a:6e:a5:2e:f9:84:e2:ae:88:
                    12:b2:16:78:f7:1b:d6:ee:e6:00:fc:32:26:31:3a:
                    24:e5:cd:75:27:d9:b4:8d:5d:c5:e6:68:95:78:d6:
                    92:8c:25:20:18:b4:28:21:db:97:a7:ef:bc:d9:60:
                    b9:3d:99:34:89:58:d1:6f:fd:4c:e5:80:7a:7d:8d:
                    68:75:a5:a4:b0:8a:59:d2:be:7a:e4:88:93:8b:d4:
                    ee:43:54:e1:07:46:57:2b:a6:d3:65:8f:30:46:da:
                    af:f4:88:f2:cb:96:2c:2a:2f:5a:28:fb:0c:8e:09:
                    19:f7:5c:5d:f0:3a:b6:ab:89:53:91:2c:d8:1c:f0:
                    a8:a4:bb:b4:e3:f8:64:32:ef:54:77:96:e5:1b:32:
                    46:8d:e9:17:42:75:bd:30:e0:6d:8b:67:dc:eb:55:
                    33:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:37:6C:4D:44:D4:CF:EE:37:06:E2:95:F1:E7:DD:70:2C:9B:D3:86
            X509v3 Authority Key Identifier:
                keyid:32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/66CA9E0C0C5C11ECBD37E846C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.88.0/22
                IPv6:
                  2404:adc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:d9:ba:df:83:e1:bb:43:c2:e3:cd:70:b8:c0:2a:18:82:8c:
         24:78:59:d8:0d:f3:2a:63:07:55:b0:1f:81:47:3a:2c:85:c4:
         42:a0:2e:23:f9:56:86:9b:2b:34:94:f0:d7:15:9a:90:a7:0e:
         e7:6e:2c:5e:78:87:70:83:d7:9d:1f:fd:da:da:55:f8:fe:40:
         8e:21:c6:af:9e:d5:58:2f:ce:67:2f:1d:dc:3c:b6:1f:85:ad:
         dd:9e:ad:8f:eb:35:51:57:4c:87:36:c6:a2:15:3e:c9:99:fe:
         97:0f:40:07:11:b5:1f:bb:7a:eb:b1:b0:29:f1:0a:c8:22:ae:
         65:1b:7e:3c:b0:7b:7a:0d:a8:b7:d0:5e:fe:d5:28:48:a7:85:
         9d:ac:c4:db:13:94:17:b9:17:58:87:53:e6:9d:88:a2:1d:92:
         82:35:08:34:0f:a1:10:9b:70:2b:7c:03:cc:ce:1b:43:e3:06:
         e7:cc:1e:91:50:02:ae:7c:5e:01:23:71:03:38:93:3d:be:fc:
         88:74:8d:58:9b:de:55:4c:1a:07:8b:ac:7c:e8:9d:61:72:eb:
         ff:a0:19:5e:78:50:2d:4c:7d:3b:31:f8:ae:16:6b:6f:36:db:
         78:c8:4c:15:c4:4e:09:29:73:9c:c2:99:64:c4:e0:02:ea:9a:
         33:f3:db:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:39 2024 by rpki-client on console-fra.rpki-client.org