Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/D2093EF4EC6E11EEAEF9610BC4F9AE02.roa
File:                     D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (raw, json)
Hash identifier:          tteglKGihCQVs3h+zk0FgvgH6wR9ojI8iLV0ircfkIQ=
Subject key identifier:   78:C5:F6:20:BB:39:E3:29:85:37:60:2F:69:E0:46:2B:0E:A1:D1:BC
Certificate issuer:       /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial:       83
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/D2093EF4EC6E11EEAEF9610BC4F9AE02.roa
Signing time:             Wed 27 Mar 2024 19:18:41 +0000
ROA not before:           Wed 27 Mar 2024 19:18:41 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     138995
IP address blocks:        103.112.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 02 Jul 2024 05:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
        Validity
            Not Before: Mar 27 19:18:41 2024 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=66047111-9aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:45:ff:dd:01:1c:5e:33:bf:46:9b:ee:6a:b3:
                    f7:24:70:25:5b:b3:7d:12:79:59:64:5e:25:ac:32:
                    19:9d:a7:04:9e:51:81:88:06:fd:5d:a0:31:4d:eb:
                    b2:be:fb:54:63:c7:68:67:fb:9e:47:79:80:ff:d7:
                    1d:ad:62:5e:c7:d1:66:b1:47:8e:16:5a:ae:1b:d9:
                    95:92:c4:b2:f3:ef:5a:93:d4:de:ce:8e:63:45:a2:
                    4e:3b:25:47:39:49:62:d7:0c:ee:68:3c:6b:bc:e8:
                    05:3b:31:a9:60:a5:12:55:26:9a:17:8c:07:f5:7c:
                    89:4b:49:e9:4b:2f:9f:69:e7:e4:d9:d1:62:e6:f4:
                    0e:f5:43:e9:71:e3:58:c7:c2:5a:d6:09:e4:41:59:
                    71:0a:d9:2b:38:c7:32:13:14:24:26:5b:da:dc:5b:
                    75:00:b9:38:62:f5:20:9b:44:f6:71:bf:22:b5:06:
                    02:b3:33:03:9f:64:f3:11:04:2a:74:64:2f:b9:01:
                    b8:59:68:f1:81:ec:f0:b9:fa:af:2f:97:01:2e:b5:
                    90:56:c7:e5:0e:c2:bb:c2:dc:0d:3e:d5:d0:ac:3d:
                    b4:c3:15:71:74:53:d9:40:67:2e:1e:52:29:af:eb:
                    1f:2d:e1:b3:9d:18:52:28:90:03:37:40:fa:bc:ad:
                    f6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C5:F6:20:BB:39:E3:29:85:37:60:2F:69:E0:46:2B:0E:A1:D1:BC
            X509v3 Authority Key Identifier:
                keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/D2093EF4EC6E11EEAEF9610BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:f2:03:88:fa:9a:fa:16:d9:20:e0:63:ea:10:82:65:03:be:
         76:b5:ea:a5:d7:88:16:ff:30:6f:50:56:58:e9:9d:1f:aa:5e:
         2b:71:57:50:5e:85:0c:22:8d:12:90:f3:e4:51:68:2d:b3:6c:
         9b:09:99:4b:4d:ab:56:55:4b:ca:a3:fa:39:f6:f5:07:18:c9:
         63:df:fe:20:ab:0d:aa:5c:c4:a5:1d:5e:62:60:35:a3:bc:74:
         80:a7:59:87:86:a1:18:55:72:82:0b:26:0b:b9:0f:8e:b2:d4:
         c7:6e:20:a5:a6:e1:ce:a6:21:fc:2b:25:fa:64:7f:93:be:a8:
         db:0b:2f:03:aa:1b:c5:c5:ae:0d:3e:6d:d5:c9:27:00:0c:03:
         cf:71:3d:5d:93:67:c0:aa:e7:a1:8c:90:4a:48:ba:8d:07:97:
         d4:07:ce:10:a1:ed:0b:b8:ab:dd:18:7a:97:1b:80:37:7b:cf:
         14:f2:cc:75:f0:4d:60:1c:94:11:1b:83:11:1f:e0:a4:dc:5f:
         ec:e5:b2:85:2f:34:75:e0:40:28:39:32:1e:88:d9:cf:7c:e3:
         fc:13:90:03:14:cf:4e:76:b5:0b:4d:34:bf:d5:7f:2b:6f:e9:
         e2:93:04:a4:e2:f8:d5:be:7d:5e:6a:45:0a:b6:eb:ba:e7:14:
         91:15:c6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 07:06:32 2024 by rpki-client on console-fra.rpki-client.org