Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/6A430D5AD0F411EC8DAD6D11C4F9AE02.roa
File:                     6A430D5AD0F411EC8DAD6D11C4F9AE02.roa (raw, json)
Hash identifier:          Bb2xTTpIaFr8iYFQlcG6UCji83j2vCryfdgXK9RWTd4=
Subject key identifier:   8E:DD:9D:06:7D:DE:79:CF:62:6B:93:37:7C:C4:91:0A:C3:3F:A7:44
Certificate issuer:       /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
Certificate serial:       01F0
Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/6A430D5AD0F411EC8DAD6D11C4F9AE02.roa
Signing time:             Thu 21 Sep 2023 02:44:12 +0000
ROA not before:           Thu 21 Sep 2023 02:44:12 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     63848
IP address blocks:        103.42.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl
                          rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496 (0x1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
        Validity
            Not Before: Sep 21 02:44:12 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=650badfc-7794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:84:9c:6d:43:df:10:f1:f7:88:49:00:ae:f0:
                    2a:ee:a3:d9:39:ce:c0:c9:20:f2:f9:fb:66:f1:c2:
                    81:c6:da:6c:fa:4a:e1:ca:1b:04:31:7c:c2:bb:88:
                    4a:88:08:bb:a6:8f:d8:49:25:4d:fc:02:7f:70:22:
                    1c:da:99:08:03:6f:dd:1b:42:05:e8:45:54:0f:34:
                    62:f0:23:8b:96:48:d5:b8:1d:41:c8:97:52:fd:2a:
                    33:d3:ae:7e:73:00:bd:28:3c:37:7d:f5:93:87:bf:
                    03:d7:80:dc:8d:b9:e9:2a:45:a9:f5:d0:9b:80:95:
                    1f:a5:38:ae:51:3a:9a:15:53:32:ac:0f:d7:24:80:
                    d7:c2:78:51:11:20:0d:78:7d:a3:17:84:8e:a4:75:
                    62:6a:23:d0:6a:9c:93:96:c1:b6:b2:a9:6b:3f:d9:
                    32:6b:92:7d:45:54:91:a6:65:da:30:f6:83:63:58:
                    cc:d6:1c:07:3f:93:46:01:fc:06:c8:6c:44:57:4d:
                    c8:1a:c4:46:a8:a7:be:fe:65:f9:af:e3:5c:84:f6:
                    8c:a0:d1:b1:97:b9:94:aa:e0:23:15:60:a7:cf:8e:
                    56:96:e6:52:45:66:e9:40:45:16:e2:62:95:62:4e:
                    71:2a:2d:9b:86:9e:fc:23:a5:a0:e6:ba:ab:c2:f0:
                    e3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DD:9D:06:7D:DE:79:CF:62:6B:93:37:7C:C4:91:0A:C3:3F:A7:44
            X509v3 Authority Key Identifier:
                keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/6A430D5AD0F411EC8DAD6D11C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:a3:1f:07:99:07:84:54:3b:3e:90:c2:cf:3f:8e:ff:bc:99:
         ea:e2:7d:b5:af:e2:1d:6c:c3:44:82:0e:10:22:93:0a:3a:ef:
         d6:64:ac:9e:7c:8e:de:aa:15:00:50:5d:ea:ce:03:c6:e3:f9:
         0d:f0:54:be:37:3f:1c:94:58:76:26:d2:31:ff:93:25:b0:5f:
         68:60:34:64:0d:e0:4e:08:c9:6b:04:91:48:f5:32:c2:5b:a7:
         89:f3:df:51:fd:e9:5a:57:c3:17:ef:7c:45:ef:1c:65:24:f1:
         05:27:72:8d:4a:e3:82:ab:ea:ba:97:14:7b:52:1e:de:2e:dc:
         f6:22:46:7c:ee:53:ac:4f:b7:d9:c0:cb:f1:a9:93:53:2d:99:
         1c:f1:ff:ca:62:3f:3a:75:bc:3e:e7:48:06:6e:f9:17:7b:13:
         87:db:6b:53:4b:65:78:a0:7d:4a:2b:2b:a3:3f:ad:26:bc:d8:
         59:90:c7:a9:11:b5:cc:dd:52:99:00:28:64:6b:a0:73:07:8a:
         0e:7f:58:5d:1d:f9:09:51:44:b0:c4:09:25:9a:d1:91:37:81:
         52:c4:f6:97:6c:1b:b5:d2:7b:8e:09:a0:b3:77:99:b7:28:0f:
         7a:41:69:56:ba:97:8e:ef:19:ce:88:9a:c9:0b:07:29:0b:83:
         f6:6e:83:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:14 2024 by rpki-client on console-ams.rpki-client.org