Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/5D31D17ACE9811EE9392467BC4F9AE02.roa
File:                     5D31D17ACE9811EE9392467BC4F9AE02.roa (raw, json)
Hash identifier:          h643cI2g+iFcUuenN+s6pHi62OFIxZQfh52pwbMjNbE=
Subject key identifier:   C7:07:EF:E7:5C:6A:CA:5F:30:13:21:B2:4D:03:AA:85:92:BE:08:73
Certificate issuer:       /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Certificate serial:       3C
Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/5D31D17ACE9811EE9392467BC4F9AE02.roa
Signing time:             Mon 03 Jun 2024 09:33:25 +0000
ROA not before:           Mon 03 Jun 2024 09:33:25 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     58212
IP address blocks:        103.197.54.0/24 maxlen: 24
                          2407:9d00:20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
                          rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 07:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
        Validity
            Not Before: Jun  3 09:33:25 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665d8de5-efb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:42:d2:fb:dc:fb:08:f0:22:e1:4c:ab:83:6c:
                    1f:03:15:69:89:5f:ed:cc:50:8a:ef:14:bf:2d:22:
                    d7:ff:27:60:38:46:4b:90:e6:59:22:41:2d:4f:95:
                    8b:04:a6:53:63:7f:86:66:19:58:36:e3:1f:39:77:
                    4b:8f:ea:cd:ff:ff:82:8c:4c:ee:26:40:af:a5:55:
                    93:a6:d1:8d:f4:79:d5:0f:ef:a3:51:b9:c6:d2:9c:
                    e3:80:64:8a:6e:36:27:95:5b:64:86:32:58:f7:f1:
                    26:3c:c2:46:d1:64:90:3f:85:28:67:53:d5:93:bf:
                    c2:1d:05:a7:e1:4a:90:c5:0a:98:49:b2:e7:ef:b9:
                    82:34:8a:29:e7:04:aa:c7:9a:2f:0c:dc:3e:1b:95:
                    c4:d2:d1:54:12:e9:89:f6:65:e4:2e:7d:42:f6:3c:
                    87:2e:9d:15:72:86:ea:b4:b5:df:1e:5a:11:0b:14:
                    81:3b:94:83:c3:42:d2:c2:d1:9f:f3:22:bb:a3:6a:
                    89:ee:8d:c8:ba:11:32:bc:32:e6:4e:51:84:f2:e6:
                    4c:c2:60:e5:fb:fc:43:58:dd:05:af:d2:f6:93:dc:
                    ea:18:02:5e:0c:6a:2d:cb:0c:c3:fb:83:27:67:75:
                    76:f5:8a:e1:fb:dd:c2:c6:a0:ad:7f:d1:e8:7b:6f:
                    0b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:07:EF:E7:5C:6A:CA:5F:30:13:21:B2:4D:03:AA:85:92:BE:08:73
            X509v3 Authority Key Identifier:
                keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/5D31D17ACE9811EE9392467BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.54.0/24
                IPv6:
                  2407:9d00:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:74:c6:2b:8c:3f:d4:a9:ee:1b:cd:69:2b:16:07:3d:97:24:
         1e:ad:c8:1b:5d:fa:19:71:f4:d9:bc:d7:e7:23:86:bc:70:29:
         22:b8:ca:a8:09:34:f8:9a:0d:c9:3d:16:03:f1:54:dc:5f:f7:
         ab:d5:e0:3d:69:01:e2:d9:6a:32:9d:8c:97:bd:3d:8c:37:c5:
         df:b7:05:8e:5b:48:57:e3:a5:ec:2e:9b:d2:11:78:6c:69:e2:
         f4:a6:76:8f:52:5d:24:ff:26:92:92:49:7b:3e:35:65:15:d5:
         a8:8e:c0:54:75:95:19:e6:10:ec:96:80:6a:dc:d0:28:63:60:
         10:e0:6b:5a:6f:ec:e4:38:ae:c2:d8:71:be:ab:1a:87:77:fb:
         3b:cc:87:0f:56:b9:de:5c:cc:b8:46:6d:f6:3e:39:cc:28:f7:
         1d:15:15:74:85:bf:38:3a:08:f3:ea:7d:e3:32:0f:ae:9a:fe:
         f1:e5:25:96:71:67:ee:e5:0c:e5:dc:76:dc:9b:40:75:0f:da:
         f8:0a:61:12:28:65:6b:f2:3f:7a:f3:08:73:32:10:fe:2d:01:
         ed:60:d3:37:49:7e:17:56:35:a6:5a:83:b2:15:48:61:bf:9d:
         3b:df:a8:bd:0e:cf:cf:20:19:b6:19:2b:e6:63:f1:64:38:7d:
         48:db:ff:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 11:02:21 2024 by rpki-client on console-fra.rpki-client.org