Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/980FBF380C8E11EC899E3211C4F9AE02.roa
File:                     980FBF380C8E11EC899E3211C4F9AE02.roa (raw, json)
Hash identifier:          6PsJWrPCESS72Cgsphwc7pgkinbPzCBr6HjEWyJ7RGI=
Subject key identifier:   10:A3:27:39:C4:D7:B9:40:F1:64:70:2B:55:24:0A:81:BC:CF:2E:CC
Certificate issuer:       /CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F
Certificate serial:       03D8
Authority key identifier: 51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/980FBF380C8E11EC899E3211C4F9AE02.roa
Signing time:             Thu 05 Oct 2023 01:02:33 +0000
ROA not before:           Thu 05 Oct 2023 01:02:33 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     137549
IP address blocks:        103.172.142.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl
                          rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 02:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 984 (0x3d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F
        Validity
            Not Before: Oct  5 01:02:33 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=651e0b29-b2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:63:fe:83:b0:ec:da:c6:86:97:2b:6f:f8:
                    5a:db:d9:d7:90:62:15:64:d0:ac:cc:c0:bd:2c:8b:
                    5a:13:00:19:05:1e:bf:84:b9:ff:5a:76:c3:06:20:
                    d2:93:b5:e0:58:08:3b:e6:47:83:06:0a:5a:cb:32:
                    45:6f:cb:ed:49:3c:dc:9d:38:75:93:96:d8:28:bf:
                    5e:5a:fb:5c:91:58:8f:bd:6e:04:b7:80:84:97:df:
                    7c:1a:bd:79:4f:bb:70:74:8a:29:ea:71:d3:4e:30:
                    16:b7:1e:79:f9:49:88:83:be:98:e7:44:fa:de:36:
                    dd:00:6f:4b:2b:6f:1c:fc:bd:01:74:69:30:c8:92:
                    8d:ad:9b:c4:1f:60:52:08:4d:6b:a4:17:d8:19:a9:
                    ec:d9:4a:be:bf:f2:c0:7b:9e:e1:f1:b7:39:7a:97:
                    b9:90:62:19:6a:23:09:e1:53:15:60:da:3e:d1:f1:
                    a1:ce:af:29:44:c7:49:67:5f:47:91:dd:5c:19:65:
                    51:f2:bc:b5:e4:ee:55:84:a9:a8:48:56:4f:1c:fe:
                    3d:c2:02:cd:97:b1:f8:90:97:68:ab:9e:74:a6:47:
                    6a:d6:18:21:a5:b3:7d:42:19:29:6b:43:44:92:3e:
                    25:b1:e8:4a:8d:71:da:1c:43:cb:8c:e0:65:d8:39:
                    38:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A3:27:39:C4:D7:B9:40:F1:64:70:2B:55:24:0A:81:BC:CF:2E:CC
            X509v3 Authority Key Identifier:
                keyid:51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/980FBF380C8E11EC899E3211C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:88:ec:38:55:68:3c:a5:05:6f:66:ad:42:db:10:69:8c:91:
         0a:97:c7:41:5a:f4:82:ed:7b:2b:99:2d:ee:1d:2f:47:ed:d3:
         e4:ec:f3:19:ff:0f:19:61:ac:53:05:9c:2a:54:2f:a9:a8:73:
         81:df:1c:43:5d:e9:de:71:4f:8a:df:d0:71:d7:8b:3b:a3:09:
         40:34:4a:8a:ac:ef:15:28:33:3d:49:82:d9:e1:9d:af:36:3b:
         e4:25:a9:4a:98:d9:e1:68:17:fb:95:22:03:cd:5f:93:f1:0e:
         50:4b:a3:a5:d0:d5:f0:b2:f8:53:07:a2:fb:04:c2:75:90:9c:
         52:3d:8d:d3:b2:a3:89:44:dd:fa:e5:86:47:f8:cb:92:ee:3a:
         42:cd:5d:5f:59:5a:84:e7:20:75:b2:87:40:61:0d:92:ff:f7:
         ba:4b:43:5e:d0:59:0b:8f:67:8d:ef:ae:fa:e2:f3:da:a1:fa:
         2a:3a:59:03:14:28:59:1a:e6:8d:84:50:21:5d:86:00:b9:4f:
         4c:38:6f:fd:6f:5a:4c:0d:3f:19:a1:32:ce:df:08:3f:d6:5e:
         2b:46:2b:4b:74:4c:eb:8a:d1:c9:02:a6:e8:55:22:94:24:24:
         4c:c6:03:8e:31:65:1f:3d:74:b6:f1:c7:8a:39:5a:ce:c4:e9:
         28:f9:bf:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:07:31 2024 by rpki-client on console-ams.rpki-client.org