Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/745A41CC2FA311EFBCD3546DC4F9AE02.roa
File:                     745A41CC2FA311EFBCD3546DC4F9AE02.roa (raw, json)
Hash identifier:          EkrtDpkzavq0TgOLvYAJ8lJoDqmjf5boZfLFArrteRE=
Subject key identifier:   93:1E:B6:CE:EE:EB:AF:36:DD:91:71:E5:60:31:66:FA:AC:E8:75:74
Certificate issuer:       /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
Certificate serial:       24
Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/745A41CC2FA311EFBCD3546DC4F9AE02.roa
Signing time:             Thu 27 Jun 2024 11:01:47 +0000
ROA not before:           Thu 27 Jun 2024 11:01:47 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     18013
IP address blocks:        103.231.84.0/24 maxlen: 24
                          103.231.85.0/24 maxlen: 24
                          103.231.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 11:33:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
        Validity
            Not Before: Jun 27 11:01:47 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=667d469a-b042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8c:1c:ed:06:7b:ef:98:fc:b2:bb:04:2b:03:
                    8b:b7:bf:ba:b5:95:53:9f:fc:cb:e9:e7:f8:b2:59:
                    db:f7:4a:57:4f:b8:7f:97:c0:84:f2:38:9b:0e:34:
                    ce:6c:c2:ab:e7:b9:51:c7:e4:26:16:d2:7a:0b:60:
                    a4:dd:da:e6:55:9a:23:76:3f:e9:59:68:04:5f:f2:
                    dd:a3:da:31:88:fd:2d:17:56:40:33:fd:e0:24:40:
                    6f:c0:93:ee:b0:61:80:0d:13:17:85:41:ce:aa:e5:
                    79:65:4e:23:fb:0f:bb:39:b1:a9:4b:74:fd:d6:f0:
                    b7:6a:07:26:c6:be:43:86:a6:4f:e9:d6:b5:5c:04:
                    a5:bf:54:85:80:e9:b7:f4:83:6d:56:f7:8a:50:9e:
                    9a:49:53:55:1d:b5:7f:ff:1c:1c:02:58:2f:41:51:
                    f0:6e:ae:ce:9b:e4:3a:fc:a2:27:f2:9b:0d:ce:c0:
                    31:ff:37:bb:69:83:0d:b4:8a:77:3f:64:1f:ce:32:
                    ef:93:98:ff:f9:ab:e2:fc:d0:e6:6a:58:bb:da:61:
                    27:db:92:29:3f:ac:55:66:03:2f:d2:af:a3:6a:2a:
                    3e:22:e6:45:cc:e2:a6:64:b9:13:a0:9e:9c:38:5a:
                    6a:47:98:bc:8e:2d:68:d1:27:60:57:49:e9:83:49:
                    57:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1E:B6:CE:EE:EB:AF:36:DD:91:71:E5:60:31:66:FA:AC:E8:75:74
            X509v3 Authority Key Identifier:
                keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/745A41CC2FA311EFBCD3546DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.84.0-103.231.86.255

    Signature Algorithm: sha256WithRSAEncryption
         05:5e:16:a9:78:dc:18:d4:9b:09:95:13:14:77:2b:97:e6:e7:
         db:4d:cc:ab:2b:51:42:ef:1a:12:84:eb:fb:cc:d6:81:1f:92:
         1a:8d:3f:61:34:c6:d0:d9:a6:8c:43:ac:83:f8:bd:84:32:b3:
         73:ef:71:66:85:f8:2d:38:a8:c5:06:32:00:cc:1f:91:c7:d5:
         78:91:33:4d:40:53:97:15:31:9c:e0:1b:e6:ed:8e:7b:13:a4:
         09:ae:ce:75:d2:03:da:92:42:14:a4:36:34:33:d9:c4:00:ab:
         67:e6:47:ef:d4:18:30:d6:04:c0:fd:ac:98:6e:1a:b5:b5:3b:
         fd:59:e5:85:58:fd:bf:45:4c:af:a5:18:0c:f3:b3:f6:31:fe:
         ef:81:52:c9:59:d6:e0:6c:02:2d:66:9e:a5:c4:e8:f5:8a:65:
         4a:49:f6:8e:ad:5b:eb:db:b2:45:06:a9:25:c8:ac:ca:fb:5a:
         1c:a3:b9:81:f6:41:95:74:41:37:39:0b:ba:8e:c1:83:6e:80:
         7c:18:6c:cd:47:2d:9d:f7:46:b1:27:e3:e2:34:39:5c:c3:dd:
         59:dc:67:6a:e3:31:21:af:03:e3:31:31:a9:ff:67:4c:2b:cb:
         6f:fe:e4:0f:08:ea:43:c9:5d:c6:a5:83:05:d5:4e:70:41:64:
         82:48:1f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 13:38:18 2024 by rpki-client on console-ams.rpki-client.org