Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/82230380996B11EE9AEF9314C4F9AE02.roa
File:                     82230380996B11EE9AEF9314C4F9AE02.roa (raw, json)
Hash identifier:          IuA38A6PtfZ45s5efy6Fg7R/ojs8GeETi8rs0c/o4+k=
Subject key identifier:   84:68:6F:52:B9:F5:3F:4E:A1:5A:B8:4F:06:01:65:04:CF:6F:C4:2B
Certificate issuer:       /CN=A91CA0C1/serialNumber=8C3557DB1DD5D2B465BD8115E353CE5DE2CC11D0
Certificate serial:       CA
Authority key identifier: 8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/82230380996B11EE9AEF9314C4F9AE02.roa
Signing time:             Mon 03 Jun 2024 07:46:57 +0000
ROA not before:           Mon 03 Jun 2024 07:46:57 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     139217
IP address blocks:        103.139.236.0/24 maxlen: 24
                          103.144.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl
                          rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 07:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA0C1/serialNumber=8C3557DB1DD5D2B465BD8115E353CE5DE2CC11D0
        Validity
            Not Before: Jun  3 07:46:57 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=665d74f1-7eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3a:8b:10:e0:ed:99:92:0f:b0:38:85:fc:6e:
                    d8:f9:c2:d2:db:4f:bd:48:ce:ba:e0:3f:ec:62:7f:
                    33:10:7a:d6:74:85:7a:11:8d:3e:03:4a:e7:c7:6d:
                    ce:90:bf:25:2e:33:0f:d8:a2:2e:c1:15:2d:34:0a:
                    fd:fd:33:a6:49:b3:8b:ac:ba:38:f9:2f:75:67:cd:
                    c2:8b:14:7c:8f:dc:59:b4:8e:cf:91:1d:30:44:38:
                    b8:8c:a9:db:58:da:bf:a9:15:01:e2:7b:b1:a7:99:
                    01:67:41:54:2b:f4:56:d9:2b:da:2f:96:4a:1e:9d:
                    4c:17:9b:df:d3:56:e7:95:0c:cc:7a:99:1b:9d:43:
                    0f:c6:49:ad:a6:9d:23:98:90:2a:86:d2:da:7c:5f:
                    e0:98:63:0a:c9:72:c1:b9:30:fc:38:c7:74:87:27:
                    72:c2:5b:bf:75:93:84:2d:7d:97:55:af:13:34:5e:
                    ef:b5:18:8c:d3:21:8f:a7:90:b1:c4:eb:84:58:ec:
                    fc:9e:34:de:e2:ee:20:d0:6d:fc:53:68:d9:b1:9c:
                    3e:85:3b:b0:7e:a5:0a:9b:1c:d6:ec:0f:ba:12:1d:
                    97:26:72:fb:c6:43:14:01:66:27:97:a7:d5:41:ee:
                    ad:4e:cc:ac:b8:49:0e:64:d8:30:f6:92:8c:95:77:
                    e7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:68:6F:52:B9:F5:3F:4E:A1:5A:B8:4F:06:01:65:04:CF:6F:C4:2B
            X509v3 Authority Key Identifier:
                keyid:8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/82230380996B11EE9AEF9314C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.236.0/24
                  103.144.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:7e:aa:02:24:f2:9e:f7:34:02:c3:c3:a2:d1:03:2a:0f:48:
         d3:d6:3d:7b:7f:00:e7:2f:6c:39:ce:52:c2:dd:66:99:c8:9e:
         f5:69:9b:4e:1d:ea:f3:1c:13:2c:d3:07:b9:b8:5f:ea:04:5a:
         cb:ee:16:30:4f:99:df:34:ec:6a:87:97:4e:7a:74:d2:c3:ef:
         99:98:7e:33:dc:50:9b:af:b7:56:ea:30:96:4a:e4:8d:03:e1:
         37:93:f4:9a:e5:9d:f0:cd:3f:dc:a2:39:ea:d5:3c:f8:74:aa:
         24:27:6f:10:44:80:f3:c6:ed:b2:e1:24:c9:64:35:24:3c:cb:
         59:dc:67:27:c8:87:0e:53:f8:33:5b:16:b6:e1:65:3d:6b:9b:
         5c:55:8b:d5:c0:ae:68:c4:d9:39:11:1d:a1:1d:e8:3a:3c:ab:
         31:51:4d:d7:f8:0d:8c:e2:c1:21:4f:2e:4e:fb:26:c2:c5:f2:
         01:00:0b:5a:69:96:1a:3a:84:d2:7a:1f:7f:92:ca:b7:87:fa:
         25:c2:e2:3a:df:7a:24:b3:ba:fb:77:2a:d2:89:33:70:23:36:
         6c:79:01:30:94:3e:14:83:88:03:b8:46:4a:42:aa:f4:d3:49:
         ee:4f:47:d5:bc:fc:6b:40:ce:eb:b5:9e:d6:16:79:9a:b4:e0:
         f0:22:46:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 09:41:08 2024 by rpki-client on console-ams.rpki-client.org