Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/9389FFE8650411EE80570A12C4F9AE02.roa
File:                     9389FFE8650411EE80570A12C4F9AE02.roa (raw, json)
Hash identifier:          IhHnqIJSUKHQvAUemNA8DV1wdnkLH6BV1/tBV7gGepE=
Subject key identifier:   5B:45:5B:0C:AA:B2:B4:BF:65:CD:BF:D5:56:EF:84:59:3B:DD:06:58
Certificate issuer:       /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Certificate serial:       0297
Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/9389FFE8650411EE80570A12C4F9AE02.roa
Signing time:             Wed 07 Aug 2024 02:44:43 +0000
ROA not before:           Wed 07 Aug 2024 02:44:43 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     55933
IP address blocks:        103.97.176.0/22 maxlen: 24
                          103.242.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
                          rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 663 (0x297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
        Validity
            Not Before: Aug  7 02:44:43 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66b2df9a-b730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2d:e7:f6:88:90:3c:67:89:e4:80:fc:64:9b:
                    e5:07:9f:ae:af:4f:2a:11:50:8e:ba:99:d4:55:bd:
                    7c:03:d8:fc:42:64:3a:99:75:10:f6:4a:64:11:97:
                    2b:df:81:33:c6:97:99:fe:3a:b8:6d:0f:d9:2d:a8:
                    8b:39:4c:50:95:41:e1:b4:e5:ab:e6:17:f6:50:2c:
                    5f:ff:ae:a6:39:06:57:9a:88:3b:3c:d3:10:f2:92:
                    9f:2e:c1:b2:a0:a6:5f:b3:d5:42:12:02:4b:de:02:
                    bc:c8:19:57:b3:cf:07:c3:b4:bf:ba:be:21:d3:8b:
                    a6:93:10:b9:56:2e:36:86:68:e7:a4:24:ab:e7:51:
                    bd:7c:20:fd:2a:98:b0:01:fc:3c:37:e3:cb:36:2f:
                    25:59:8b:10:24:2d:50:f6:96:01:93:04:db:cd:c7:
                    8f:50:95:ef:bf:c8:d3:bb:91:f2:db:d1:50:2e:fa:
                    10:8d:20:78:c0:a7:83:cb:4a:25:fd:dc:99:1f:b0:
                    5a:81:c6:96:38:a1:2a:f1:62:62:85:d3:ba:b0:d5:
                    38:86:c2:1f:b1:3b:a3:84:41:ab:bc:01:82:26:44:
                    94:e0:29:6e:9e:e2:52:b2:bc:95:9a:42:b0:e4:1d:
                    63:2f:e5:52:c3:76:cd:86:d7:f5:e4:89:69:42:04:
                    88:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:45:5B:0C:AA:B2:B4:BF:65:CD:BF:D5:56:EF:84:59:3B:DD:06:58
            X509v3 Authority Key Identifier:
                keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/9389FFE8650411EE80570A12C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.176.0/22
                  103.242.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:d1:73:65:72:35:94:70:86:90:78:3e:6b:df:d4:f4:d1:df:
         c6:37:52:cb:28:19:6f:ae:0e:d5:f1:44:33:d7:20:a5:bd:f5:
         4a:6f:bf:7c:0d:51:12:29:38:4b:78:72:12:e4:29:07:a8:e8:
         98:7b:ed:69:fc:02:63:c8:13:be:25:a9:19:d1:6f:51:fd:41:
         80:78:c0:80:a7:cc:02:37:f5:4a:df:f0:33:3c:6e:23:2e:29:
         9d:b3:45:8b:d4:da:9c:fa:f7:48:67:df:6e:c1:39:92:8d:a7:
         22:42:e5:45:ed:90:cc:c5:e6:ec:d8:b5:ef:88:0c:5a:53:a0:
         bc:78:b8:aa:46:05:b8:91:da:94:55:7e:52:bb:83:d5:03:5d:
         9f:76:2e:18:0f:83:c9:01:6b:3d:35:8c:ef:01:fa:ef:50:82:
         24:d5:54:59:3b:eb:b4:43:5a:cd:42:0c:02:7c:97:18:8e:d9:
         a6:89:4d:28:5a:55:8c:01:bb:8e:42:55:c8:19:45:c0:28:78:
         cd:ea:14:c0:15:88:02:12:43:27:c4:65:38:b3:58:12:04:9e:
         36:b2:b1:a0:b5:3d:ad:9b:94:7c:ac:52:29:6a:ab:c6:65:5f:
         97:d5:5a:80:a0:a4:7e:ec:b9:94:31:41:b9:93:c0:09:8c:5d:
         dd:01:ba:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:29 2024 by rpki-client on console-fra.rpki-client.org