Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/AB52C51AB96B11ECB44AC533C4F9AE02.roa
File:                     AB52C51AB96B11ECB44AC533C4F9AE02.roa (raw, json)
Hash identifier:          BFItKdByLIEkXoft9kFeiVrhIrvjybyyrxXKRRvzUHA=
Subject key identifier:   06:84:22:C6:57:A2:B5:33:F8:4C:F2:65:D1:FE:49:80:2C:ED:8F:DB
Certificate issuer:       /CN=A91E3D04/serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13
Certificate serial:       0D48
Authority key identifier: DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/AB52C51AB96B11ECB44AC533C4F9AE02.roa
Signing time:             Tue 02 Apr 2024 18:57:21 +0000
ROA not before:           Tue 02 Apr 2024 18:57:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     142128
IP address blocks:        103.137.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl
                          rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:51:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3400 (0xd48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3D04/serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13
        Validity
            Not Before: Apr  2 18:57:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=660c5511-ad19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e7:56:4a:f3:5e:8d:f7:ce:96:77:73:84:bd:
                    8b:a5:89:9c:46:28:ea:5a:db:8a:e7:8e:bd:e1:4a:
                    23:eb:15:06:38:46:e1:22:3a:ec:47:8b:a6:ec:46:
                    f3:2c:24:29:e6:69:53:5d:e5:a9:d0:61:62:c6:35:
                    0e:fb:91:ba:44:d4:56:37:de:ff:f8:9d:8d:aa:b0:
                    b0:c8:9c:19:25:be:54:9a:27:3d:fb:de:f6:39:6f:
                    66:2d:e3:a4:1b:02:2e:b7:65:7a:90:73:aa:56:dc:
                    5f:ec:f3:96:55:fe:97:94:c2:a3:5a:5f:28:78:10:
                    9d:87:97:1d:16:29:4b:23:e3:4d:03:ce:05:18:76:
                    43:54:55:04:65:de:2c:9b:a5:6c:22:07:38:8f:1f:
                    2b:f2:34:10:aa:90:dd:f9:3f:d0:95:36:5f:06:ad:
                    67:cc:ab:48:49:42:6d:a6:ea:ff:ad:dc:3b:d5:76:
                    c8:38:7b:d7:e4:96:f1:11:b4:1b:6e:12:14:aa:18:
                    b0:f4:40:6b:44:20:4e:7b:bd:32:b9:31:8a:52:da:
                    a2:bb:db:9f:93:15:1f:29:d3:39:2d:1d:33:13:b7:
                    b3:c5:7d:7b:13:0a:53:e0:95:46:22:ac:8e:b3:32:
                    1c:d8:84:90:11:92:b9:90:35:c0:11:a2:3b:cb:51:
                    ef:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:84:22:C6:57:A2:B5:33:F8:4C:F2:65:D1:FE:49:80:2C:ED:8F:DB
            X509v3 Authority Key Identifier:
                keyid:DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/AB52C51AB96B11ECB44AC533C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:cd:80:36:fe:0f:0e:4f:b2:73:fe:5f:db:e0:8f:ac:58:1f:
         b3:42:47:f0:c2:39:f1:7a:a6:bf:25:b6:d5:e6:4b:4a:23:5b:
         bd:d1:ab:a1:83:c8:06:47:45:2a:a2:e9:9f:73:55:45:ed:5b:
         2f:25:1e:c3:57:43:75:a1:bf:a7:a0:fe:ef:ef:4d:ec:32:39:
         06:e6:f3:15:94:2b:53:56:03:2a:fd:ef:82:7a:05:dc:15:38:
         56:a4:68:99:49:2a:46:c0:ac:bf:18:ee:64:6d:e3:16:fd:ae:
         14:48:06:ec:3a:6d:01:fc:69:bb:ef:83:e2:f1:37:90:98:37:
         f3:8f:1d:0e:63:87:dd:03:f9:12:41:ea:21:d3:11:13:71:82:
         ed:fb:40:32:08:6c:d9:1d:55:d9:df:5a:44:0a:7f:14:35:2c:
         cf:33:03:43:ed:97:a0:5f:e3:a8:35:54:d8:8e:d8:64:94:1d:
         bb:ac:bf:b5:b7:38:80:63:5b:43:86:ff:68:d9:81:36:39:09:
         c4:5e:99:c7:93:ec:f4:ae:4f:da:fc:44:8d:a9:c6:5a:bd:c5:
         63:f6:eb:b4:6f:2b:06:f0:22:dd:ec:b8:50:4c:bf:96:7b:5d:
         cc:84:4e:16:65:79:c8:5f:60:13:65:b3:f8:a6:c8:76:ac:0f:
         34:f2:bb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:04 2024 by rpki-client on console-fra.rpki-client.org