Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/D0BC8E28C4B511EA8323912BC4F9AE02.roa
File:                     D0BC8E28C4B511EA8323912BC4F9AE02.roa (raw, json)
Hash identifier:          hjSkQxYAxZJa0FcToZk4nbKLBcJPNMlDcdQXL1B56UY=
Subject key identifier:   D4:9A:93:EA:C3:9A:B0:E2:59:02:6C:7C:86:C0:0D:3D:23:79:33:0E
Certificate issuer:       /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02
Certificate serial:       0720
Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/D0BC8E28C4B511EA8323912BC4F9AE02.roa
Signing time:             Fri 18 Aug 2023 21:38:44 +0000
ROA not before:           Fri 18 Aug 2023 21:38:44 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     131475
IP address blocks:        103.31.24.0/23 maxlen: 24
                          2001:df0:425::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl
                          rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 22:47:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1824 (0x720)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02
        Validity
            Not Before: Aug 18 21:38:44 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64dfe4e4-6753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0a:07:d0:56:06:92:ba:a9:59:7f:d9:fa:cc:
                    5c:84:b5:30:e8:87:05:e2:6c:de:b0:10:29:c0:92:
                    ff:51:75:c1:3f:0c:82:ed:4e:4f:93:cf:6b:21:f8:
                    fc:ff:a1:93:3f:44:6a:b6:5f:41:65:14:e4:df:00:
                    2e:14:57:5d:42:45:68:99:e6:97:fd:f3:c9:3f:de:
                    fd:19:47:85:11:f0:9d:27:82:c6:8a:92:1c:59:0a:
                    46:40:37:09:bf:f0:a5:bc:29:33:54:47:93:98:c8:
                    90:42:26:0d:67:8c:4b:e4:26:0f:7c:cc:52:23:c9:
                    aa:83:48:ca:31:f5:4d:ae:d8:59:93:f9:af:03:b2:
                    6f:e7:98:93:cd:d4:ff:9b:24:1f:4f:ab:53:11:a5:
                    c3:7e:c6:ee:f1:a1:83:cf:b4:14:43:4b:ba:49:51:
                    e6:4a:b6:58:ce:11:5d:b3:18:37:92:27:6d:51:61:
                    47:63:b8:13:13:b8:2c:c4:d7:f3:0c:15:e2:96:08:
                    62:83:e3:38:76:ec:b5:8f:cc:ab:a8:7a:52:3c:79:
                    a8:02:48:d7:eb:03:14:ea:7e:a3:e5:37:34:a5:21:
                    65:e3:71:64:17:3a:a3:17:03:6f:d2:d7:13:be:c9:
                    8c:1e:33:b2:f3:ec:e4:d9:17:6e:0f:5a:27:a2:e1:
                    2c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9A:93:EA:C3:9A:B0:E2:59:02:6C:7C:86:C0:0D:3D:23:79:33:0E
            X509v3 Authority Key Identifier:
                keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/D0BC8E28C4B511EA8323912BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.24.0/23
                IPv6:
                  2001:df0:425::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:60:bd:f8:63:cd:c3:48:c9:18:12:34:e9:33:1c:66:03:37:
         03:da:22:df:ac:09:e6:c0:a6:8d:d2:a5:fe:e9:4e:de:93:52:
         c7:e7:11:0c:65:99:75:9f:e3:de:01:69:3d:b3:c8:04:53:6f:
         21:e2:1d:9b:22:8d:55:8e:7c:c0:66:87:3d:26:15:f6:59:4e:
         6d:09:a9:6d:c8:09:11:f2:34:fd:dd:bd:81:9c:03:15:67:f8:
         da:15:82:58:da:5c:89:44:31:cc:d2:f3:f3:6a:de:cd:5e:80:
         2b:bb:ca:dc:e1:21:18:0f:28:f7:4d:25:f4:6e:c6:c1:28:e0:
         c4:00:51:48:62:42:71:fc:2e:b6:34:a8:e3:08:21:b3:5c:c8:
         89:60:24:a5:87:df:e2:56:dc:df:75:d7:f0:3a:a5:54:5f:c5:
         ca:5d:18:86:4d:87:d1:0a:e0:78:39:cb:ea:77:90:4f:5b:1c:
         69:7f:b8:72:2f:ef:6f:da:41:de:cd:4e:b4:4d:72:54:5f:1f:
         d2:8c:68:b1:50:4c:57:f1:a0:e3:31:4e:47:67:3f:2e:d2:8f:
         df:44:4a:96:ce:5e:f2:d6:ef:94:25:67:2f:6c:ae:6d:3c:9a:
         78:28:24:b9:29:33:dd:cc:bb:c9:e3:a7:8a:9a:1b:23:7a:97:
         67:99:94:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 23:53:07 2024 by rpki-client on console-fra.rpki-client.org