Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/9C3E2D18A98111EAB4B3FD50C4F9AE02.roa
File:                     9C3E2D18A98111EAB4B3FD50C4F9AE02.roa (raw, json)
Hash identifier:          LJTye2A8+UyEDVtUA1P1h2s5ynNht6/dnZPTBhtQ7ww=
Subject key identifier:   EF:37:13:5D:DC:84:54:F8:8F:C7:0E:E8:B3:CC:9B:31:0B:17:0C:99
Certificate issuer:       /CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147
Certificate serial:       07AD
Authority key identifier: 9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/9C3E2D18A98111EAB4B3FD50C4F9AE02.roa
Signing time:             Thu 10 Aug 2023 21:18:22 +0000
ROA not before:           Thu 10 Aug 2023 21:18:22 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     138022
IP address blocks:        103.120.32.0/22 maxlen: 24
                          2403:51c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl
                          rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1965 (0x7ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147
        Validity
            Not Before: Aug 10 21:18:22 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64d5541e-3cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:69:af:49:98:1f:2f:45:bd:14:e8:5a:bf:02:
                    4f:d6:8c:b5:53:aa:93:0d:fd:72:23:dd:64:e3:25:
                    9d:4b:0b:b6:73:fb:7f:c2:78:63:cc:27:4b:06:9a:
                    b9:d3:eb:17:1f:b4:a3:07:5d:2d:7e:2f:f8:3e:23:
                    61:e5:01:ed:3f:3c:32:4c:88:87:09:28:9f:82:11:
                    b5:05:7c:3b:e2:10:5a:96:b8:0f:06:1e:f1:8b:46:
                    71:11:d2:27:c3:74:74:21:09:55:96:23:c1:64:10:
                    25:bc:0b:0a:d2:a3:b2:1c:e2:a0:fa:04:64:28:e5:
                    19:01:e8:2b:7f:da:06:21:83:4e:10:26:25:f5:fb:
                    8c:6a:20:e4:0f:c0:01:32:fa:eb:6c:37:82:92:a1:
                    e7:80:40:dd:9c:15:15:e3:74:08:3a:3b:9e:5f:f3:
                    ed:8b:2d:2d:c9:a8:3d:ff:c6:c1:b3:15:a1:5d:4d:
                    97:77:14:34:7a:e2:f6:fd:99:a5:75:4d:69:83:97:
                    b4:36:cf:51:c6:d8:1a:00:3d:7f:b5:26:8e:10:43:
                    e0:0d:20:b8:db:d4:6f:84:6e:49:8d:0e:d4:62:c8:
                    21:f1:0e:a2:a0:db:ec:fc:33:8c:8a:53:21:54:23:
                    6a:f0:92:5b:3b:56:75:81:db:33:45:70:03:90:b3:
                    15:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:37:13:5D:DC:84:54:F8:8F:C7:0E:E8:B3:CC:9B:31:0B:17:0C:99
            X509v3 Authority Key Identifier:
                keyid:9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/9C3E2D18A98111EAB4B3FD50C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.32.0/22
                IPv6:
                  2403:51c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:9c:c9:87:cb:68:81:51:85:a9:87:69:5f:29:9c:0f:22:a8:
         95:5b:2c:58:4c:a1:38:4b:51:84:f3:dc:e8:a3:2c:2b:56:8a:
         9b:90:9c:98:75:1e:65:25:a1:3c:48:85:fb:e9:07:2d:3b:16:
         2d:cb:78:56:c1:11:6c:4c:04:df:8f:6e:dd:65:dc:85:ea:e4:
         a8:3c:ef:1c:3d:c6:de:f2:a8:68:60:3e:48:84:64:da:e5:b6:
         8a:5c:78:67:37:83:4c:9c:4d:57:bd:6a:d5:19:28:5b:35:d7:
         6b:fb:32:b7:80:7b:70:80:00:25:dd:9a:38:2a:7d:56:9f:eb:
         de:b8:40:d3:6f:fe:1e:0c:d0:e4:6b:a7:5e:1a:4c:ad:ba:1b:
         85:96:cf:91:94:06:ea:1d:97:52:3d:79:fd:71:7f:65:0e:d6:
         12:3d:49:18:ec:10:ee:05:7c:62:e4:68:1b:f7:2a:db:06:a8:
         27:aa:9a:d6:ac:ba:2e:3a:c7:ed:5f:6e:a0:65:f8:98:42:8b:
         21:62:c9:1f:16:68:41:b5:36:02:15:91:3b:b6:48:5c:5b:8e:
         f9:35:28:b6:53:7b:dd:8c:7d:86:ec:ee:f8:f1:59:3b:c8:11:
         3b:ec:8b:f3:e5:bd:67:60:0b:1d:a5:22:d8:a4:1e:7c:ba:1a:
         19:1e:8f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 22:37:18 2024 by rpki-client on console-fra.rpki-client.org