Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/E43DC97CB46F11EA889ACA09C4F9AE02.roa
File:                     E43DC97CB46F11EA889ACA09C4F9AE02.roa (raw, json)
Hash identifier:          if+QqLot7mzVlEm2o5G8M5hH0dHIMDE/mnwGY93BhIs=
Subject key identifier:   8E:3B:81:2F:4B:63:C5:9D:A2:44:55:8C:B1:45:85:46:48:8B:F1:09
Certificate issuer:       /CN=A91D624F/serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78
Certificate serial:       076A
Authority key identifier: CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/E43DC97CB46F11EA889ACA09C4F9AE02.roa
Signing time:             Sun 30 Jul 2023 21:18:17 +0000
ROA not before:           Sun 30 Jul 2023 21:18:17 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     136749
IP address blocks:        103.95.32.0/22 maxlen: 24
                          2401:5640::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl
                          rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 22:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1898 (0x76a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D624F/serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78
        Validity
            Not Before: Jul 30 21:18:17 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c6d399-cfb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:62:ab:b5:4d:ee:3c:f2:7f:ef:1d:40:36:
                    7b:ab:b6:92:3d:5c:c2:2f:1f:41:bd:a6:35:62:a8:
                    eb:46:19:bf:42:bf:85:df:bc:61:c2:9f:09:43:7d:
                    fd:aa:ca:cf:96:d1:fa:4b:43:22:30:6f:84:12:fa:
                    f0:08:01:eb:f3:33:ea:de:eb:f8:71:4b:6e:74:b4:
                    ea:2d:07:a9:18:3b:78:b8:02:53:c7:ff:28:b1:ba:
                    4e:d2:7d:7c:45:53:86:e8:74:b0:46:3a:07:04:75:
                    ff:8d:4c:42:6e:b9:03:94:ed:33:40:99:06:28:91:
                    a8:ab:f2:56:68:61:7f:33:f0:4c:f7:81:4c:ce:56:
                    79:19:ab:72:fd:7e:f0:92:8a:d2:6f:62:8f:bf:7f:
                    74:ac:ec:1b:2f:b4:7e:6d:86:f8:45:2d:b9:a3:07:
                    8d:7b:ec:2f:c8:6d:a4:47:5a:6e:59:49:7e:97:03:
                    36:86:ef:03:cc:42:fa:33:42:f0:fe:8e:eb:2f:a1:
                    3d:07:94:d9:fd:f8:f6:8f:a4:ae:d6:c5:d0:e9:d1:
                    c6:fb:00:16:84:6f:56:9e:26:fc:d6:bb:33:50:0c:
                    90:e9:23:a0:fc:51:a0:0e:e9:a0:fd:0d:8a:73:c5:
                    ed:ec:a7:58:84:62:36:72:99:6e:f1:3c:32:b8:30:
                    04:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3B:81:2F:4B:63:C5:9D:A2:44:55:8C:B1:45:85:46:48:8B:F1:09
            X509v3 Authority Key Identifier:
                keyid:CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/E43DC97CB46F11EA889ACA09C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.32.0/22
                IPv6:
                  2401:5640::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:73:de:de:3b:2f:c4:d1:2b:e2:5f:cd:aa:37:0b:13:14:c6:
         4c:f7:8e:fb:b9:aa:2c:ec:69:44:5e:81:f3:01:11:0d:c8:4e:
         d1:fe:68:a8:fb:31:9f:38:d0:92:63:09:d4:9e:a2:a8:01:67:
         fe:b9:fb:ab:4f:31:5c:65:85:4f:2d:86:91:1b:90:53:0c:c5:
         1c:23:b9:a4:aa:ed:c3:11:ea:b4:81:f8:4e:05:0e:e9:e9:3f:
         1a:cf:3e:d1:cf:8a:25:31:a6:c5:af:61:63:6c:58:94:38:d5:
         3c:8d:94:cd:c8:c2:10:78:1e:08:a6:83:01:2d:e3:51:99:9c:
         85:17:c6:5d:ce:9c:cf:2f:e9:88:46:e3:0b:22:6b:d8:9c:64:
         6d:fd:dd:e8:ef:79:e7:23:6b:1b:7c:2c:02:7f:95:09:4a:6c:
         58:54:9b:ec:8c:bd:d6:11:9c:37:80:26:bf:f2:0a:8e:3c:37:
         3a:a5:98:f8:0b:ac:e2:82:2f:17:e6:98:e2:f9:03:b3:9a:0b:
         e9:1d:c1:93:b4:3e:89:44:60:b9:82:7f:0a:8b:ee:46:d2:f0:
         57:2e:51:6f:ca:44:db:1d:64:7c:18:19:f8:86:94:fe:b7:fa:
         f4:73:2f:61:98:b1:7b:d3:6e:dd:da:0d:38:50:f2:66:06:bd:
         0c:7d:31:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 23:53:08 2024 by rpki-client on console-fra.rpki-client.org