Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/1E1E9122565411EBA14ED510C4F9AE02.roa
File:                     1E1E9122565411EBA14ED510C4F9AE02.roa (raw, json)
Hash identifier:          qooh24L+CNcRluTxL7VRcWW065uNodiUV24Xt7Erymc=
Subject key identifier:   3E:30:58:75:86:7E:D6:27:E2:69:CE:05:EC:49:27:98:30:A6:8C:52
Certificate issuer:       /CN=A91E12AD/serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
Certificate serial:       0993
Authority key identifier: B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/1E1E9122565411EBA14ED510C4F9AE02.roa
Signing time:             Tue 22 Aug 2023 20:17:29 +0000
ROA not before:           Tue 22 Aug 2023 20:17:29 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     140866
IP address blocks:        103.141.84.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl
                          rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 21:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2451 (0x993)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E12AD/serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
        Validity
            Not Before: Aug 22 20:17:29 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64e517d9-c2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:41:09:05:55:9a:40:63:ac:4e:f2:80:c0:89:
                    ab:5b:55:b4:91:0a:23:4a:12:d0:71:dd:9f:19:32:
                    19:71:d6:e1:e9:9d:3c:b3:d6:f3:ce:d5:6a:16:e9:
                    64:e6:14:06:c7:08:8a:36:57:0a:71:d6:1f:6d:82:
                    93:a2:0a:a2:05:1e:71:01:2f:78:4e:94:07:b2:3f:
                    7d:e3:be:1d:a1:03:61:f0:4f:33:bb:8b:83:be:a7:
                    55:81:3d:3b:a4:1c:c2:b4:8a:85:f3:0f:44:c6:72:
                    1d:f4:51:e7:63:61:ee:69:91:e6:36:04:4c:7b:a6:
                    44:ac:d4:b6:88:2c:07:46:33:e9:49:55:b4:8d:1c:
                    67:7d:12:6e:ca:eb:c9:23:dc:be:c4:6c:68:3d:fb:
                    4e:af:59:bd:e1:84:25:d9:f6:4b:aa:15:67:6e:8b:
                    c5:e2:92:e2:99:cc:b7:49:ec:eb:8e:71:d8:03:aa:
                    7f:68:d9:54:37:8b:a3:9c:ee:42:1c:a4:f6:60:87:
                    92:cb:1a:36:10:04:d8:c4:e3:92:d7:c6:e0:37:51:
                    24:28:ff:c3:e5:6c:de:0d:2b:9d:9a:7c:75:d0:48:
                    88:98:53:2a:95:46:84:c1:48:15:0e:f1:5b:49:bd:
                    fe:29:b0:0f:71:bc:ad:83:ba:58:b1:5d:c3:5b:22:
                    3d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:30:58:75:86:7E:D6:27:E2:69:CE:05:EC:49:27:98:30:A6:8C:52
            X509v3 Authority Key Identifier:
                keyid:B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/1E1E9122565411EBA14ED510C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:db:9c:96:9e:5c:ab:33:14:53:b8:01:a9:ef:cc:2c:13:65:
         38:4f:db:9f:57:50:8e:76:41:3f:1e:1a:35:02:95:21:d1:bd:
         b1:94:d1:63:53:1b:cf:26:2a:a2:08:8e:7c:7b:40:4a:71:d6:
         f5:87:df:df:e0:8b:48:01:73:e8:0d:2a:63:45:0c:f9:ac:cd:
         e8:b9:35:fc:55:b8:0f:06:0e:2c:eb:d1:51:cd:cb:e6:75:03:
         9d:61:d2:92:d4:57:00:0c:d0:ff:67:32:1c:4e:7f:4a:55:27:
         b5:ea:cf:cd:7d:40:97:c8:87:9c:a2:e7:4f:e8:19:39:da:e9:
         05:d4:aa:77:04:36:86:0f:f5:9a:fb:06:3e:16:1b:88:eb:6b:
         3f:87:6a:79:18:65:e0:4a:96:02:9a:69:d7:34:01:8a:b1:dd:
         2e:35:ae:c4:be:96:55:69:3d:01:75:16:23:37:89:00:d4:20:
         09:b1:8e:cf:2c:46:3d:76:b0:e9:fb:9f:dc:7b:ea:32:4f:ee:
         c8:36:d3:6c:d5:aa:ab:e9:af:da:eb:6d:ce:1f:41:7f:67:6d:
         89:19:5c:c9:f9:06:9a:71:41:78:97:b0:8d:32:a8:fe:d0:5e:
         12:f7:f6:8d:f6:ab:8d:9c:89:19:51:36:1a:65:11:f7:01:05:
         c2:85:dc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:13:30 2024 by rpki-client on console-ams.rpki-client.org