Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/975BB0CE73AD11EDAD75DB7DC4F9AE02.roa
File:                     975BB0CE73AD11EDAD75DB7DC4F9AE02.roa (raw, json)
Hash identifier:          6wF0CgZY02NzZdzcs6vnE5ugZS9H1iOH5CjmO2OFDgU=
Subject key identifier:   98:9A:BF:27:18:33:48:9C:5E:E6:08:70:49:B8:D7:E7:FE:9C:EA:F6
Certificate issuer:       /CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
Certificate serial:       0794
Authority key identifier: A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/975BB0CE73AD11EDAD75DB7DC4F9AE02.roa
Signing time:             Sun 30 Jul 2023 21:18:00 +0000
ROA not before:           Sun 30 Jul 2023 21:18:00 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     141322
IP address blocks:        103.151.184.0/24 maxlen: 24
                          103.151.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl
                          rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 22:34:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1940 (0x794)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
        Validity
            Not Before: Jul 30 21:18:00 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64c6d388-47e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:aa:61:ed:d9:ff:11:c8:90:ec:92:0b:b7:1a:
                    41:53:9c:07:37:a0:b8:55:9c:21:18:cf:69:ef:f7:
                    ed:60:1e:40:4b:02:32:32:29:e7:1b:03:06:53:8a:
                    27:86:93:63:86:f6:df:a0:8a:b1:b7:3f:82:ad:c5:
                    81:38:2d:94:b4:51:62:12:3d:e2:f2:d3:7c:e9:07:
                    d6:86:7f:44:3d:5d:90:1e:2a:e2:a6:f0:67:94:28:
                    70:83:58:20:8d:28:66:31:1d:15:ba:a3:c9:32:4a:
                    0d:ab:e0:9c:1f:c2:16:07:fb:d1:59:18:04:90:1e:
                    e1:c0:79:a3:72:a4:67:74:7f:16:53:e1:d5:b4:e0:
                    94:70:94:1c:f6:0c:0c:f4:d0:1c:f1:e3:c1:0e:ad:
                    8a:cc:3c:32:8b:21:e0:25:b8:b3:fa:bc:63:74:52:
                    38:dd:fd:f3:97:35:87:cc:41:ad:71:ca:cc:17:2d:
                    eb:b3:5f:98:79:34:c7:58:4e:62:36:82:9b:a6:94:
                    7b:eb:0c:cd:bf:f8:d7:90:17:93:b6:85:76:9d:4b:
                    2e:cf:4d:18:9c:eb:5f:b1:b5:10:2b:01:0f:0a:1b:
                    57:8f:32:fb:0f:1b:24:c5:18:fd:e8:4b:f5:4a:15:
                    ad:7d:62:5d:67:9d:18:85:4d:08:99:1d:ae:87:7a:
                    28:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9A:BF:27:18:33:48:9C:5E:E6:08:70:49:B8:D7:E7:FE:9C:EA:F6
            X509v3 Authority Key Identifier:
                keyid:A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/975BB0CE73AD11EDAD75DB7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:4b:2b:98:d1:e0:28:16:87:0e:9d:02:02:0d:c3:45:18:4e:
         27:1e:7c:36:11:9b:70:f9:d6:46:e6:62:55:86:a1:b8:e4:75:
         28:b8:25:cc:bf:0e:32:b2:85:0d:97:79:99:2b:d2:63:2c:7b:
         c5:7e:40:7f:0d:ca:1e:0f:89:9c:12:e1:a2:f3:47:40:08:40:
         1e:33:a2:a5:2e:3d:7e:0a:ef:01:98:15:b5:b3:56:b5:d9:82:
         d1:ce:bf:27:45:28:b3:74:35:c6:91:f4:49:c6:74:14:87:ce:
         59:bc:4a:19:65:86:64:89:ad:6c:0b:88:21:0d:45:06:4c:ab:
         0f:ae:d5:52:35:4c:b7:87:63:91:fe:10:1f:63:cc:2b:d7:fe:
         b9:8d:47:7a:f7:54:2e:5c:b7:e4:27:06:19:f3:90:d0:3c:f0:
         51:f9:ce:27:3c:b1:92:87:4f:f0:82:74:e4:38:7d:a5:42:2c:
         fa:08:ba:64:09:1a:6c:a9:77:fd:8f:f5:63:cb:c8:c6:27:ed:
         fc:5b:f1:41:0e:7d:2f:c2:b7:0d:a0:1d:ab:51:21:0b:58:fc:
         4e:8f:5f:ee:3a:78:0e:54:30:35:e8:14:bd:18:9e:8b:15:78:
         ae:17:65:97:ce:f9:93:77:2e:87:95:3c:4d:47:d0:be:4b:3b:
         09:8d:80:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:13:25 2024 by rpki-client on console-ams.rpki-client.org