Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/F99707CEBAC511E9A77CDE7BC4F9AE02.roa
File:                     F99707CEBAC511E9A77CDE7BC4F9AE02.roa (raw, json)
Hash identifier:          hcuJWHp6XEHU5wGbcdL04ectukkqG896KFeajfmnvdg=
Subject key identifier:   E7:4B:5C:9D:66:63:33:3A:FE:1A:F7:6A:B5:DE:FE:F6:D2:FD:FC:49
Certificate issuer:       /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
Certificate serial:       13B0
Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/F99707CEBAC511E9A77CDE7BC4F9AE02.roa
Signing time:             Sun 04 Jun 2023 17:56:59 +0000
ROA not before:           Sun 04 Jun 2023 17:56:59 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        103.114.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl
                          rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Apr 2024 17:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5040 (0x13b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
        Validity
            Not Before: Jun  4 17:56:59 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=647cd06a-3fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7e:96:72:74:6f:a7:65:ce:d0:6a:ac:df:5d:
                    0c:7e:8c:04:97:b6:09:19:e8:22:ec:07:b5:b7:34:
                    12:13:97:3c:e1:b8:ae:fb:92:3f:83:f3:22:ef:f5:
                    f5:8d:6b:3c:67:2c:cb:93:5f:07:4b:15:33:8c:f7:
                    e1:89:17:a4:55:cb:9a:e5:ed:94:a7:0e:c7:83:6c:
                    33:38:5c:9a:3c:76:c4:6d:c2:fe:87:cd:ae:8e:66:
                    24:06:a7:68:2c:52:e7:7d:13:cc:5b:d5:51:21:7a:
                    5d:d6:8b:ea:07:ab:fc:bc:22:0c:f8:b3:b9:48:f0:
                    08:df:50:70:eb:cd:a9:58:fd:fd:5e:dc:e4:f8:20:
                    67:57:35:10:31:f5:f5:a6:09:8a:db:be:60:4d:f9:
                    5f:f9:0f:d3:61:46:19:8b:cb:61:bb:1b:7d:e1:2e:
                    ca:ed:0b:22:fe:8a:0d:83:48:26:b0:ea:f4:6e:b5:
                    12:2e:da:f4:f0:75:0c:5b:ff:23:de:d9:93:98:ce:
                    e8:d4:a9:e2:ea:e1:49:1d:34:56:be:a4:b6:16:55:
                    f5:c9:1d:48:fa:4a:68:d1:e2:55:96:b6:b8:78:35:
                    66:97:42:bf:11:42:f3:2a:18:a0:17:c3:d5:89:03:
                    11:2c:09:88:6f:f4:35:7b:14:8f:93:8b:ff:6b:d6:
                    2a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4B:5C:9D:66:63:33:3A:FE:1A:F7:6A:B5:DE:FE:F6:D2:FD:FC:49
            X509v3 Authority Key Identifier:
                keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/F99707CEBAC511E9A77CDE7BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:5a:07:f5:1a:88:32:af:6c:56:f0:cb:3c:71:ea:1b:aa:b2:
         78:b5:02:2b:36:22:3c:a6:82:2c:df:c4:c5:db:03:8e:5c:df:
         75:f1:f8:cf:64:7f:ab:2e:92:52:1f:dc:20:90:80:67:30:b0:
         49:e7:e0:2d:30:a1:a9:7d:f0:18:11:f5:c8:bd:96:1e:8a:29:
         0b:da:d1:1d:51:00:77:2c:07:d5:9d:cf:c7:5a:15:dc:53:f5:
         21:f4:11:25:51:52:1f:44:76:00:5c:87:53:47:41:b4:25:11:
         d2:a4:a8:ae:57:93:e2:cc:f1:85:65:d8:58:ab:43:60:4e:95:
         67:f8:9a:9c:55:7b:79:b4:12:02:b4:e9:4f:2a:86:56:02:59:
         93:4e:d6:ad:3a:9b:29:a2:e1:b7:c8:16:93:93:eb:85:55:a5:
         30:db:b4:fb:80:c3:dd:b2:2a:64:58:03:5d:f4:02:6b:b3:04:
         55:65:99:62:60:79:fb:54:72:5a:87:98:00:8f:05:82:b7:f9:
         88:4f:a9:a0:68:61:6a:9c:6c:da:12:9f:86:4d:f1:92:c8:90:
         a9:c1:7d:c1:ad:6e:b3:d9:c4:09:e5:da:e9:ba:3e:de:b4:89:
         a7:84:0f:da:6b:e0:05:ad:a1:27:cd:b4:93:ba:35:91:d4:3b:
         ad:ca:96:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:34:02 2024 by rpki-client on console-fra.rpki-client.org