Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/E76ABE9EB51811EAA9D89B43C4F9AE02.roa
File:                     E76ABE9EB51811EAA9D89B43C4F9AE02.roa (raw, json)
Hash identifier:          Y0o7/HKtcH1NN/yWT+yuyqcdDZa4lqAdEtD3R2MaRJs=
Subject key identifier:   78:68:A9:1F:65:FA:58:3E:3B:0C:67:DE:A4:75:09:48:D6:09:9A:81
Certificate issuer:       /CN=A91AA8E4/serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4
Certificate serial:       0770
Authority key identifier: 92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/E76ABE9EB51811EAA9D89B43C4F9AE02.roa
Signing time:             Mon 14 Aug 2023 21:38:45 +0000
ROA not before:           Mon 14 Aug 2023 21:38:45 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     136936
IP address blocks:        103.99.103.0/24 maxlen: 24
                          2001:df2:5d00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl
                          rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 22:39:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1904 (0x770)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA8E4/serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4
        Validity
            Not Before: Aug 14 21:38:45 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64da9ee5-84ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:59:04:55:5b:99:0a:73:de:4d:ea:18:55:d7:
                    68:d7:18:39:34:7f:fa:e9:b6:4b:60:dd:16:8e:89:
                    35:2d:26:d3:2e:3e:76:bf:82:57:9d:e6:15:4d:8d:
                    c9:80:0a:be:70:05:17:fb:47:9e:7d:0a:13:23:c8:
                    62:ae:e9:b1:d4:8f:ec:69:21:68:6e:ed:ce:5f:85:
                    bb:5f:07:c2:04:a6:ac:85:aa:35:fe:19:31:0b:6c:
                    fd:e1:ea:91:f3:c8:8b:c7:dd:dc:ce:7a:af:0c:2b:
                    76:04:d9:af:a8:f4:f2:54:cc:de:45:d0:7b:c8:62:
                    9d:6a:92:d7:c8:02:7e:36:19:1b:fe:2b:5d:28:64:
                    78:88:93:81:f0:c1:69:1d:27:e5:28:38:31:a4:b2:
                    03:28:e7:ac:e8:69:a1:48:5b:ec:a5:b8:5a:99:61:
                    c2:8d:5d:17:0b:16:cd:83:d5:92:1d:33:a0:e7:af:
                    d2:fc:e7:2c:36:b9:35:46:c2:df:aa:21:21:30:1e:
                    0e:18:c9:f5:7f:89:bb:3e:ae:1d:1e:30:3c:51:66:
                    c8:50:5a:25:fc:f1:01:32:ea:ae:b3:d2:07:d8:77:
                    76:b4:e7:f4:b5:a6:21:04:a2:75:0b:3c:95:39:24:
                    00:89:06:1d:b6:85:a1:e0:41:2a:1c:23:28:f5:fb:
                    4c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:68:A9:1F:65:FA:58:3E:3B:0C:67:DE:A4:75:09:48:D6:09:9A:81
            X509v3 Authority Key Identifier:
                keyid:92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/E76ABE9EB51811EAA9D89B43C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.103.0/24
                IPv6:
                  2001:df2:5d00::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:8d:2f:29:17:da:46:b9:82:1d:2a:18:c5:10:60:1f:7e:09:
         4e:21:8f:55:f7:0a:72:48:2a:c4:08:40:01:0d:13:3e:a7:98:
         41:9b:ba:4c:f7:d0:bd:be:3f:7b:f6:62:e9:a8:ae:97:cb:f9:
         67:e3:22:ad:3e:fd:15:7b:90:7f:06:2e:4b:8e:71:09:27:cd:
         20:d2:ff:39:be:f8:fc:66:7a:3c:c8:52:5c:65:25:90:4e:8f:
         a9:ad:46:c0:ae:b3:8b:b8:20:9d:89:14:97:50:7f:cf:71:33:
         5e:13:1f:06:b4:5c:35:3f:bc:30:76:96:54:7b:0b:aa:59:0a:
         f7:eb:48:75:31:cd:90:5e:0d:b7:6e:88:cc:be:07:86:cf:22:
         ab:c8:99:0b:67:09:35:45:90:db:f5:ee:fe:9d:f5:05:86:2d:
         78:f0:8b:37:4d:b0:8c:51:16:85:86:95:7e:a6:5f:12:9e:ac:
         5d:48:f9:10:74:4c:8f:55:34:1f:ae:3d:62:ae:10:57:70:bd:
         6a:aa:68:51:40:d3:60:db:b9:44:b7:21:78:10:9d:b5:16:22:
         22:4d:6e:fe:60:89:92:9e:3a:2a:a1:89:b3:69:97:99:9c:87:
         24:46:f0:99:f3:b0:a2:06:2a:2a:8b:71:84:ca:e2:4b:60:e8:
         97:63:a4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:13:25 2024 by rpki-client on console-ams.rpki-client.org