Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/A8E34E9CB66611ECAF76DA4CC4F9AE02.roa
File:                     A8E34E9CB66611ECAF76DA4CC4F9AE02.roa (raw, json)
Hash identifier:          H61h5fXsvlRnlENkIrx+tFqMY/HM+pvGeCm6ugQKqtU=
Subject key identifier:   9F:1E:FD:50:00:4F:CB:37:0A:06:E5:44:D4:20:24:EC:7E:41:50:99
Certificate issuer:       /CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
Certificate serial:       01FA
Authority key identifier: C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/A8E34E9CB66611ECAF76DA4CC4F9AE02.roa
Signing time:             Mon 03 Jul 2023 02:31:55 +0000
ROA not before:           Mon 03 Jul 2023 02:31:55 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     133523
IP address blocks:        103.73.115.0/24 maxlen: 24
                          103.232.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl
                          rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506 (0x1fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
        Validity
            Not Before: Jul  3 02:31:55 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64a2331a-9f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:af:52:c0:f2:a6:de:a4:74:f7:38:4a:37:99:
                    15:e9:68:37:84:13:71:8e:8c:b8:53:14:90:5a:2b:
                    d8:1d:f9:f9:00:db:30:cf:b5:ca:02:bc:14:04:6e:
                    8d:7c:2e:1c:32:37:63:56:99:b7:f9:5d:5a:43:27:
                    48:5b:6d:22:f2:29:8b:08:18:e6:73:e2:b5:53:4a:
                    19:b6:da:7e:27:cb:a8:00:10:c6:1c:9e:6c:9e:b2:
                    c8:1c:c6:36:20:49:4f:82:b3:6e:d1:21:0f:b3:df:
                    97:e8:1e:75:10:f0:23:f2:f0:72:27:c8:dc:83:c9:
                    f4:56:8a:8c:c7:14:25:af:c9:f2:7b:1d:d1:00:db:
                    47:7a:04:eb:07:c7:ec:90:4f:83:c4:51:c6:24:bb:
                    27:bc:d5:dc:e1:9d:d6:cd:e7:c7:ff:69:64:e0:f1:
                    5e:f6:b2:a3:c1:b4:35:37:01:1d:74:0e:98:b6:fa:
                    07:eb:f8:bc:9a:56:e6:55:e6:c3:28:d5:45:37:00:
                    3d:f7:46:69:f2:f8:21:d7:11:da:6b:3c:13:bb:2d:
                    73:98:7e:f0:b5:0e:f3:b2:e1:20:13:b0:ae:92:a3:
                    5a:23:6f:6e:1f:87:41:32:24:f5:f8:0c:09:97:f0:
                    e2:bb:a5:9f:f0:a2:49:d6:3b:a0:4a:67:ad:6e:d8:
                    af:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1E:FD:50:00:4F:CB:37:0A:06:E5:44:D4:20:24:EC:7E:41:50:99
            X509v3 Authority Key Identifier:
                keyid:C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/A8E34E9CB66611ECAF76DA4CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.115.0/24
                  103.232.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:f0:aa:ea:c9:71:ff:bf:a3:23:b8:3d:84:96:8e:6c:0e:6b:
         55:1b:ed:36:12:1f:7e:dc:e8:36:8c:cf:b8:0d:93:41:95:55:
         8b:b3:65:e0:0d:d1:0f:cf:a2:8b:99:5e:5c:85:00:be:c9:41:
         d6:83:6b:a6:5f:e6:52:c0:a4:f9:e2:68:4c:c0:92:9d:8a:1c:
         04:d5:f5:97:69:de:5e:87:2d:37:77:40:cd:da:8c:55:0c:24:
         24:f5:42:39:47:e6:61:87:2e:7a:01:a2:10:0a:48:6b:76:c6:
         54:f0:ee:8d:ab:e3:c3:93:03:29:03:ad:d8:0d:e8:03:2c:9f:
         f6:de:b1:98:bd:01:d3:36:dd:3b:14:e6:ab:d4:19:76:04:71:
         7b:94:7d:27:0a:27:89:ce:96:5f:17:76:65:7f:9f:13:0a:1f:
         99:91:a9:77:7f:7a:36:4b:8f:be:28:b7:64:2e:70:a8:67:7a:
         aa:5b:b1:15:4c:0a:df:26:9c:ef:79:96:f6:e9:55:55:a9:f7:
         3c:36:2b:1a:31:c7:7d:11:fa:ee:a4:c3:55:ab:06:5a:97:58:
         db:dc:1a:27:75:f4:bb:f5:23:93:9e:2f:6b:cd:21:a9:a1:11:
         82:4a:69:fd:8e:5e:e9:3b:b2:f3:46:be:a9:ef:d8:4b:16:ef:
         6d:d3:2c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:48:44 2024 by rpki-client on console-fra.rpki-client.org