Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/19E46D60D0F711EC8673072FC4F9AE02.roa
File:                     19E46D60D0F711EC8673072FC4F9AE02.roa (raw, json)
Hash identifier:          H8M7DHeKtoHqgDEQjzrVYJpqHkMj4EXwpxpc1rO1Nd0=
Subject key identifier:   0A:F2:90:3A:55:07:EB:BE:9E:B4:7D:0A:D2:39:53:B9:CB:6F:89:79
Certificate issuer:       /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
Certificate serial:       01EC
Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/19E46D60D0F711EC8673072FC4F9AE02.roa
Signing time:             Thu 21 Sep 2023 02:44:08 +0000
ROA not before:           Thu 21 Sep 2023 02:44:08 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     131253
IP address blocks:        103.244.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl
                          rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
        Validity
            Not Before: Sep 21 02:44:08 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=650badf8-2781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:11:3b:bc:08:22:a4:b7:a4:cd:ed:d2:37:
                    97:72:26:e4:7d:fb:80:ad:a8:31:5a:d1:a3:61:c1:
                    8c:ef:38:54:76:c2:24:00:77:0d:97:f3:ca:8c:c6:
                    39:c2:8e:37:4c:47:7d:6a:97:95:7e:20:d7:77:a7:
                    f4:07:7e:cf:8e:e5:da:ec:a0:cc:d0:72:b0:37:1f:
                    8d:35:c3:f7:0d:eb:8f:c5:dc:6f:22:9f:dc:91:ae:
                    3d:e9:2f:62:c7:fd:90:f9:79:63:5a:69:df:f3:13:
                    5c:59:32:c7:b0:da:7a:87:54:05:31:31:c6:1b:7a:
                    62:fc:41:8f:98:1d:37:10:e5:07:98:84:0d:7f:7a:
                    73:f3:ac:5e:bc:dc:a1:5e:2b:4a:74:03:64:e3:4e:
                    a8:0b:c7:72:9e:df:b9:0b:a8:ff:08:f1:7f:79:a3:
                    93:d2:cb:39:17:1c:88:97:48:9b:23:1b:cc:31:99:
                    e4:9f:72:fe:59:9a:33:8e:d9:7a:a9:79:c3:9c:11:
                    71:d8:2a:ec:6b:9b:6c:5e:86:22:29:2a:d7:fb:e5:
                    e5:fa:80:a1:a8:93:e4:b6:31:f8:df:e3:7a:8b:ab:
                    b7:b9:50:3d:a5:43:18:59:1c:b3:69:47:d5:b0:53:
                    42:94:29:4c:72:46:35:ea:16:b8:92:84:7a:a0:80:
                    af:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F2:90:3A:55:07:EB:BE:9E:B4:7D:0A:D2:39:53:B9:CB:6F:89:79
            X509v3 Authority Key Identifier:
                keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/19E46D60D0F711EC8673072FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:38:48:4f:48:40:86:d8:73:55:b9:81:0b:b8:5c:cd:89:13:
         5e:f9:8d:5c:3a:14:10:b6:f7:78:85:c7:ea:5a:02:ac:e5:ae:
         c6:18:ed:15:eb:47:76:43:d7:1b:b3:01:19:41:0e:e4:ee:dc:
         65:31:68:eb:69:e8:3b:3c:36:55:5b:fd:8a:d7:5f:12:16:55:
         d2:63:2e:85:bd:c9:e3:3d:b2:8a:35:91:dc:33:d9:9b:7f:62:
         2c:ea:a6:77:67:3a:c7:b6:e7:d7:b6:ee:96:5e:8c:bd:b2:57:
         f5:5c:a1:02:64:5c:9a:b5:61:38:5a:a1:eb:34:b5:47:89:be:
         a3:4a:16:17:97:64:49:ca:e0:0b:c5:f4:6e:2f:12:5c:0f:b9:
         b7:45:e8:d0:b5:2c:f3:de:be:93:a0:90:81:bf:a9:1d:8f:33:
         f4:d9:39:cb:2e:a3:ec:40:87:b5:13:5a:0f:a2:31:2c:03:e5:
         12:d5:eb:61:30:76:55:7b:55:74:71:db:e7:51:c4:ff:8b:ac:
         68:de:09:c3:e0:12:f3:5b:d3:c1:3a:e9:ea:51:f3:2c:9c:7d:
         f7:33:1f:a8:76:f2:c6:5d:59:a6:f2:5e:e0:64:d7:ab:37:3b:
         77:19:db:24:2d:c5:bf:5d:2d:13:8f:93:60:79:dd:30:3f:97:
         c5:fd:db:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 05:09:21 2024 by rpki-client on console-ams.rpki-client.org