Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6F46908C2D3411ED92165562C4F9AE02.roa
File:                     6F46908C2D3411ED92165562C4F9AE02.roa (raw, json)
Hash identifier:          4gZpKbAZ3PPZ8XY+4tRmnbJCoHSToqpiZD3Xw35DspI=
Subject key identifier:   A9:28:DF:76:C6:9E:39:A7:7F:BE:99:1C:61:E4:EA:60:3E:B6:FD:A9
Certificate issuer:       /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
Certificate serial:       0183
Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6F46908C2D3411ED92165562C4F9AE02.roa
Signing time:             Wed 03 Jul 2024 04:05:22 +0000
ROA not before:           Wed 03 Jul 2024 04:05:22 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        103.10.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl
                          rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
        Validity
            Not Before: Jul  3 04:05:22 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=6684ce01-b894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a6:54:56:22:99:7e:8a:11:33:c0:26:12:60:
                    71:4a:83:74:ba:77:aa:82:c5:2a:08:9c:cb:1e:fd:
                    60:f1:ba:9e:90:29:9a:3f:e5:c2:57:21:aa:b4:4f:
                    0a:a0:4f:67:3e:b5:4e:24:64:32:f6:1f:1a:07:d6:
                    57:17:dd:b5:a7:4c:cb:69:60:54:3f:04:0d:c8:b1:
                    5a:b6:00:5e:8a:02:b2:82:b2:e0:88:93:64:49:df:
                    bd:59:66:72:8a:bb:3a:43:45:c1:94:db:c8:64:bb:
                    ff:a9:99:69:9e:53:9c:07:a9:22:49:05:b3:51:90:
                    43:cb:20:7b:f0:48:0d:e2:9a:ba:38:dd:ab:23:8f:
                    62:22:13:c7:0c:58:7c:89:ca:5b:f7:30:d8:ca:8a:
                    cf:0a:1b:d8:59:86:2c:fd:2a:1e:07:b2:4d:94:b5:
                    27:6f:86:88:66:09:15:3b:ea:fa:79:7a:8b:c2:f7:
                    87:0c:9a:d1:42:d2:72:b6:0b:c4:06:78:8a:5f:dc:
                    35:6d:5f:aa:96:72:70:06:95:00:d3:fe:b6:4b:a7:
                    4c:cf:5f:14:31:2c:50:2e:91:1a:5e:83:f6:73:d4:
                    2f:94:5b:99:a3:71:cc:ed:18:d5:53:23:93:e8:dd:
                    40:1e:28:91:29:4d:42:89:4f:ae:4e:1e:ff:da:5d:
                    af:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:28:DF:76:C6:9E:39:A7:7F:BE:99:1C:61:E4:EA:60:3E:B6:FD:A9
            X509v3 Authority Key Identifier:
                keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6F46908C2D3411ED92165562C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:fb:bb:61:27:4a:03:61:c3:71:c0:32:99:7f:bd:62:1c:5a:
         75:ac:d8:5f:57:4a:01:6b:84:3f:9e:e5:b7:ff:dd:43:a7:9b:
         e5:88:30:f3:93:f0:1d:8a:63:15:58:5d:15:30:b0:6c:6e:62:
         e3:55:b9:7b:c0:4d:09:b6:00:49:15:e4:14:6e:d6:0d:e0:7c:
         5f:a3:58:94:a6:04:b9:3e:8a:d6:55:41:2a:49:f7:f5:e0:e6:
         e9:37:78:af:76:65:24:e0:bd:c6:76:1b:88:60:e4:d2:23:91:
         39:1b:1f:b5:c5:50:b3:23:28:2e:07:85:30:7d:67:b6:98:c6:
         c8:8d:11:d0:86:8d:be:4c:9c:01:b2:c4:1c:7d:54:e3:57:a3:
         db:a7:63:3a:bb:9e:23:16:18:ea:51:44:6a:60:b6:88:c8:2e:
         0d:64:22:d0:38:7b:64:73:28:36:38:f1:a2:58:b7:22:ad:42:
         cf:3c:6f:88:8b:d8:63:55:3d:a7:ac:9d:e4:57:9e:75:e6:c7:
         59:07:2f:63:77:92:8d:f6:4e:c2:39:b1:4c:93:ea:bb:93:2e:
         f5:85:08:17:c9:c0:90:b9:68:07:ee:e6:42:a7:3c:45:77:b9:
         94:a2:38:42:60:8e:ed:fa:ae:37:4b:9f:be:7c:f7:6d:11:e5:
         db:ac:b3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:59 2024 by rpki-client on console-ams.rpki-client.org