Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/F91B41A40C5811EFB9F63337C4F9AE02.roa
File:                     F91B41A40C5811EFB9F63337C4F9AE02.roa (raw, json)
Hash identifier:          NmJNgM1TocJKXWdxIqSxjaeXJhysWvNCkav+9g71gx8=
Subject key identifier:   B2:30:C0:05:E4:D0:F6:7F:11:AB:7B:CE:52:08:29:CE:32:51:C2:F8
Certificate issuer:       /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Certificate serial:       02FA
Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/F91B41A40C5811EFB9F63337C4F9AE02.roa
Signing time:             Tue 07 May 2024 10:02:55 +0000
ROA not before:           Tue 07 May 2024 10:02:55 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     132601
IP address blocks:        103.181.180.0/24 maxlen: 24
                          2001:df0:7140::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
                          rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 762 (0x2fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
        Validity
            Not Before: May  7 10:02:55 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=6639fc4f-2118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:46:42:c8:4e:a9:f3:a2:55:cf:db:96:00:a7:
                    0c:4b:91:e0:e6:9b:79:93:ad:e7:de:ab:af:ca:a3:
                    86:ae:98:5d:60:4b:c5:d7:3d:3a:db:cb:0d:1a:c3:
                    b9:e7:0d:39:50:13:91:5f:34:56:b4:f6:2a:35:45:
                    de:66:41:b7:9b:78:9f:d5:8f:f2:eb:7d:96:a4:20:
                    58:32:8f:79:a8:80:90:3b:91:eb:8d:92:ee:10:2f:
                    01:35:a5:bb:14:00:87:d9:f0:e4:fb:ca:a4:f4:e8:
                    48:c2:ed:1c:5e:18:6e:a5:2b:df:8f:20:73:2d:69:
                    0a:ea:d2:b8:b3:80:2d:d9:ea:ca:6f:5c:eb:5a:49:
                    99:07:96:c5:48:5d:47:d9:a1:e5:81:8c:33:03:dd:
                    e8:85:90:59:2a:4d:e8:1e:6f:7f:77:2a:e6:84:3e:
                    0a:a8:ff:ef:eb:70:8f:87:34:a2:15:ce:8f:32:bf:
                    d1:9e:45:16:21:43:e9:96:3e:cd:ce:a4:f0:8f:47:
                    8d:76:99:96:22:f2:1e:e6:0a:ab:5d:6c:bd:92:c2:
                    9e:07:e5:df:7c:71:80:87:f9:b0:8a:fc:99:d0:d4:
                    cf:f0:e1:da:38:50:1c:7a:e7:e8:47:21:b5:7a:4f:
                    d3:12:85:42:3d:eb:e1:39:40:f2:ae:25:65:ed:87:
                    fd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:30:C0:05:E4:D0:F6:7F:11:AB:7B:CE:52:08:29:CE:32:51:C2:F8
            X509v3 Authority Key Identifier:
                keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/F91B41A40C5811EFB9F63337C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.180.0/24
                IPv6:
                  2001:df0:7140::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:82:3b:51:70:c0:32:12:37:ed:1e:2f:ba:3d:99:cf:ae:be:
         ac:a0:72:93:9c:cf:b9:27:f6:18:1b:58:d5:1c:57:6c:6e:31:
         0c:6c:23:a0:64:82:2b:e2:60:2e:db:45:9d:e9:99:f8:ac:a0:
         84:8c:50:dd:fb:9a:19:5b:d1:d7:3c:9f:6b:c8:a9:5b:c2:c8:
         d2:75:b5:fd:91:93:f8:19:b2:9d:a0:4a:c3:3f:6f:ac:12:ff:
         1f:11:24:ec:5e:a8:b2:0c:ed:61:cc:20:89:9b:aa:af:55:3b:
         1f:99:b6:33:c8:7e:42:85:d9:66:24:44:ff:6d:91:c5:35:de:
         ca:32:b6:36:7c:af:57:30:aa:34:c0:22:b2:3a:b6:7d:d4:e0:
         34:ce:77:83:24:b6:81:9e:49:6e:fb:4b:7d:c4:bb:72:75:6f:
         38:55:db:2b:52:a6:fb:04:38:08:93:e8:f9:2d:1a:fd:ea:ef:
         c3:8f:94:b7:8c:de:d3:11:4c:55:e3:16:ad:ca:44:d4:63:92:
         b1:23:53:5b:09:f0:76:54:c8:3e:82:dd:27:34:4c:1e:5b:bf:
         45:89:0c:b8:b7:49:07:ad:98:28:ff:71:a5:11:bb:a0:1b:9a:
         f6:41:12:2d:32:3d:94:a6:a1:fe:e9:7e:b3:ee:e6:d0:2b:1f:
         56:bc:5e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:52 2024 by rpki-client on console-fra.rpki-client.org