Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/7CF84F084B9111EBBA09CA72C4F9AE02.roa
File:                     7CF84F084B9111EBBA09CA72C4F9AE02.roa (raw, json)
Hash identifier:          2dctB5QBtj79ZZUeTvzMi2oR0YTk/D1gf5LLN6hSYbg=
Subject key identifier:   8C:4B:F1:AF:24:CB:87:C7:61:FE:66:7D:7E:94:66:45:7E:1D:35:F0
Certificate issuer:       /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808
Certificate serial:       0681
Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/7CF84F084B9111EBBA09CA72C4F9AE02.roa
Signing time:             Thu 31 Aug 2023 22:29:33 +0000
ROA not before:           Thu 31 Aug 2023 22:29:33 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     133495
IP address blocks:        110.93.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl
                          rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 23:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1665 (0x681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808
        Validity
            Not Before: Aug 31 22:29:33 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64f1144d-de85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7d:17:04:13:05:81:51:1a:46:2a:30:8b:f4:
                    1c:44:e9:ae:20:a6:42:ce:30:e9:cd:f4:21:91:c4:
                    0d:af:aa:e7:aa:3c:98:1f:63:86:9c:b5:45:f7:15:
                    aa:ff:b6:cb:d8:c0:63:fe:82:f3:ea:1c:0c:71:4d:
                    66:50:77:72:e0:ce:3c:f5:8c:12:b5:eb:77:a8:5d:
                    12:ce:aa:b6:f6:ce:5c:07:4c:6e:9f:23:08:e9:de:
                    d9:bc:9a:d1:7e:ee:d9:ac:da:d3:73:2d:aa:c0:8e:
                    6e:0f:dd:47:c8:68:b0:ac:be:15:7c:cf:1a:1d:38:
                    5a:5c:ad:46:f6:d2:d6:80:e0:0c:90:fe:47:4a:d3:
                    2c:27:d8:89:e0:8b:ab:11:38:36:92:8d:84:b8:08:
                    74:92:7d:3c:4d:f3:b6:49:a6:11:21:bd:37:47:3d:
                    f3:2b:ac:6d:09:64:e5:38:d6:fa:96:a4:62:81:c0:
                    43:a3:22:34:10:d4:e9:49:f5:e8:46:31:2f:50:76:
                    ec:42:d6:68:4e:13:c0:23:bd:71:39:0a:78:e2:43:
                    7e:e8:4d:85:be:0e:f6:0d:28:14:8a:92:fd:79:59:
                    62:b4:aa:53:bb:80:de:10:a7:09:6e:06:bd:42:63:
                    f8:ac:e5:fd:a4:7b:5f:9a:2e:c5:e7:3c:cf:78:37:
                    55:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4B:F1:AF:24:CB:87:C7:61:FE:66:7D:7E:94:66:45:7E:1D:35:F0
            X509v3 Authority Key Identifier:
                keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/7CF84F084B9111EBBA09CA72C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.93.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:39:63:31:bb:40:7d:fa:67:28:dd:33:d0:37:0f:e6:cf:1d:
         d8:ef:64:a3:a4:13:2d:57:5c:c5:9f:b8:bd:a2:cf:e0:20:1c:
         a1:ed:aa:af:6c:3d:4f:78:d6:c2:55:8d:7a:e0:c9:68:dd:b2:
         4a:f8:fa:cc:d1:40:63:86:93:6b:e9:9c:ae:5f:c3:c7:4f:e9:
         4a:52:48:a8:a7:1f:95:8c:97:bb:48:28:64:32:08:88:ab:83:
         fe:64:d2:61:0a:24:17:fe:57:b1:32:11:c7:5e:0a:3b:bb:b0:
         83:35:49:1c:35:ae:19:7f:76:5c:c5:ed:2b:f7:26:bb:8e:75:
         d7:0a:95:3a:3a:11:63:ef:94:56:45:37:0d:c0:6d:9e:de:48:
         b2:f7:2b:95:b2:f1:6b:05:06:b5:e0:2e:33:0c:6a:ad:da:98:
         b3:66:49:fc:52:fd:64:48:b2:0c:22:8b:ea:1d:1f:c9:5d:0e:
         d8:f1:04:4c:58:ab:7b:ed:a1:30:e5:4f:fc:0d:9f:aa:39:46:
         a0:f9:96:11:00:07:a4:f6:3b:1a:61:f3:6f:0f:a7:6c:28:56:
         05:14:b9:89:8b:69:11:22:e4:84:c0:e1:86:1f:1e:e9:c7:e5:
         6f:f4:fc:56:55:93:c3:84:21:df:e4:38:97:da:1e:c1:7d:17:
         47:1b:bc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:32:59 2024 by rpki-client on console-fra.rpki-client.org