Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/BA69B6FABC2C11EA96657B4BC4F9AE02.roa
File:                     BA69B6FABC2C11EA96657B4BC4F9AE02.roa (raw, json)
Hash identifier:          RNINxFrQwPuuERXsrP312wcyCTJRUDXWpfeAQDP7E3E=
Subject key identifier:   4E:A8:B6:91:A1:63:56:2D:C1:FB:70:5F:AB:D9:63:6B:75:5B:58:69
Certificate issuer:       /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Certificate serial:       0758
Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/BA69B6FABC2C11EA96657B4BC4F9AE02.roa
Signing time:             Sat 02 Sep 2023 21:08:38 +0000
ROA not before:           Sat 02 Sep 2023 21:08:38 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     9311
IP address blocks:        103.240.81.0/24 maxlen: 24
                          103.240.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
                          rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 22:45:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1880 (0x758)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
        Validity
            Not Before: Sep  2 21:08:38 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64f3a455-a154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:76:88:a5:37:43:27:85:85:11:25:64:b0:
                    12:ed:05:c2:a9:e2:26:c6:80:a2:66:b8:6b:41:6e:
                    21:8c:ff:3f:f4:f5:09:d0:4f:25:c1:6d:ac:32:02:
                    ac:13:09:e7:08:40:3f:31:e8:1d:f9:7a:b0:b4:3f:
                    c7:96:e9:10:4a:5d:d1:08:1b:67:38:4c:37:f6:ae:
                    42:c9:26:2c:d5:99:df:1a:de:25:b4:4c:3c:2f:72:
                    dd:3b:18:25:9a:ff:8a:74:e6:38:4b:4b:81:21:5a:
                    56:6f:ba:20:b7:42:67:7e:c1:52:9f:d9:46:7b:be:
                    0f:a3:07:04:da:64:e5:c8:1f:e2:c6:71:f9:db:18:
                    d4:79:07:6f:ce:48:42:96:be:80:c7:be:23:50:22:
                    3f:b1:94:89:07:24:aa:e9:ba:3d:b6:7b:98:7b:b7:
                    06:7f:2c:e7:fa:ce:39:cc:8f:7a:1b:9e:d3:d4:1d:
                    18:3b:5d:08:31:26:e7:90:4f:d5:ee:80:6d:f8:8b:
                    c3:41:e0:d3:fd:4e:db:08:44:8f:82:90:e5:a8:1a:
                    e1:44:8e:a2:e4:18:75:d7:9c:e0:40:04:f8:0a:6c:
                    45:e9:9c:72:f9:45:42:ff:26:84:91:40:4c:f8:60:
                    a0:7a:75:39:92:77:88:c7:3e:48:65:2f:0e:e6:e3:
                    c3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A8:B6:91:A1:63:56:2D:C1:FB:70:5F:AB:D9:63:6B:75:5B:58:69
            X509v3 Authority Key Identifier:
                keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/BA69B6FABC2C11EA96657B4BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.240.81.0/24
                  103.240.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:6b:61:60:b6:f4:8d:31:d4:17:22:7d:b8:be:68:6c:9a:23:
         e7:0b:26:41:0b:89:06:e8:0c:6e:4a:48:41:5a:e0:e2:59:68:
         ee:7b:c8:b7:bd:4d:27:c1:df:fa:c3:14:8e:e1:7c:e7:d8:13:
         d6:93:a6:0b:e8:97:5f:0e:db:a3:57:fa:06:07:de:82:2f:56:
         eb:c7:31:b4:5f:b0:38:a5:19:78:1d:4f:99:87:31:9a:13:6b:
         57:a6:a6:7a:a5:29:28:1e:2a:44:7b:b4:94:ba:ff:dc:84:39:
         fd:f0:1f:7c:3f:4c:df:8b:19:a7:2f:ca:e6:27:dd:e2:e7:94:
         8b:0e:f6:4d:b9:fb:42:cb:3f:6d:68:80:9a:25:e8:aa:6d:47:
         f8:3f:28:3b:8c:1b:43:1d:4e:f9:e3:2f:01:c2:7d:30:d7:93:
         3e:b3:29:0a:f6:32:10:e4:2a:ae:37:c6:5b:62:fc:93:b6:87:
         51:5a:8b:29:9d:b3:36:79:25:e4:a1:24:eb:29:72:01:20:ae:
         04:8f:65:6b:08:06:2c:f4:a4:13:e3:c9:53:fb:26:2c:3b:2c:
         0c:b2:b9:c3:66:bc:9d:e3:94:32:e7:45:f4:6a:f9:dd:48:08:
         c6:be:94:e7:cf:1e:fe:db:43:57:8c:9a:6b:76:85:6d:e3:c7:
         4d:9b:38:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 23:53:09 2024 by rpki-client on console-fra.rpki-client.org