Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa
File:                     F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (raw, json)
Hash identifier:          7adejz/nC+5zIuDRAPjPO4hjJwlSFKceHGTUyN/0ypE=
Subject key identifier:   A1:C4:43:87:86:81:5D:DE:CA:0A:88:C3:2C:84:62:E8:4B:66:69:7F
Certificate issuer:       /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
Certificate serial:       041C
Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa
Signing time:             Mon 03 Jul 2023 00:30:55 +0000
ROA not before:           Mon 03 Jul 2023 00:30:55 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     142558
IP address blocks:        103.169.100.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 02:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1052 (0x41c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
        Validity
            Not Before: Jul  3 00:30:55 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a216be-6555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ae:72:e2:84:c7:61:51:fd:6f:e5:3c:b4:8e:
                    70:ae:50:05:7b:0b:43:aa:8a:2a:1c:16:44:d4:88:
                    e7:08:19:55:46:47:92:c7:1c:f9:1e:bc:e1:4d:f8:
                    3f:82:eb:ed:9e:8b:41:45:4a:09:25:09:07:48:a3:
                    51:99:4f:43:01:b4:cb:81:4c:46:05:d9:40:47:47:
                    35:78:6c:97:8e:b6:5a:0b:26:83:de:a7:5d:a0:07:
                    43:ee:2d:dc:48:90:10:2f:83:9b:2e:e8:39:42:a8:
                    ae:13:a8:83:46:e4:c0:c5:de:a9:69:20:a8:55:8e:
                    36:92:82:41:c8:e6:f9:a6:e5:ed:66:36:33:14:6e:
                    2c:20:22:0d:98:cc:b6:0a:12:6d:ed:fb:cc:30:9f:
                    87:32:a3:f7:85:ff:ce:e8:00:a1:2b:d9:51:cd:f6:
                    27:48:fd:02:c8:31:ef:45:1a:50:46:34:48:e0:c5:
                    4e:c5:be:61:9f:6e:b8:18:d2:d9:da:19:44:f6:6a:
                    2d:d4:a5:6b:fe:12:23:6f:8e:c2:25:33:5d:7f:50:
                    db:db:70:01:b8:64:99:7b:3c:90:20:5e:f2:6c:f4:
                    d5:0c:ed:bd:20:07:0f:9c:bf:80:48:d7:69:5b:a3:
                    41:46:2c:64:d8:3c:1a:3c:1b:cd:a8:88:fd:b5:51:
                    b3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C4:43:87:86:81:5D:DE:CA:0A:88:C3:2C:84:62:E8:4B:66:69:7F
            X509v3 Authority Key Identifier:
                keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:68:ec:6e:4d:76:f9:80:74:2a:e2:54:57:22:d3:64:c4:ed:
         93:9e:2d:86:8e:6f:ba:70:7f:d3:03:48:6a:a7:32:50:9d:b3:
         ce:4a:f8:7c:c3:79:6d:02:03:48:1f:52:dd:ee:6e:ea:e4:d0:
         07:d3:9a:e8:30:30:bb:4c:94:34:36:ad:29:27:b1:32:5f:eb:
         be:b9:bd:f3:c1:f8:ba:30:4c:fc:57:44:84:a2:3d:55:71:a9:
         da:d5:da:1c:ad:69:01:e2:63:e9:d2:56:e4:54:59:07:15:fc:
         9b:ab:20:70:9a:91:95:8e:c6:36:fc:f9:c1:53:8f:16:51:3e:
         01:7d:62:54:ec:44:e7:6a:65:41:76:79:5a:f1:83:90:cd:b2:
         f8:70:a1:81:6f:c7:80:a9:a9:5b:37:06:53:6d:5b:6c:2f:a3:
         10:a2:bd:4b:03:b2:64:57:03:24:43:da:28:26:c0:46:e3:11:
         62:d1:b5:7f:37:39:f5:28:d7:51:47:28:7a:8a:09:e1:00:52:
         19:44:60:5a:77:98:dd:93:1f:ac:f1:29:f3:26:ba:e9:4e:5c:
         6e:7f:13:ff:77:ba:06:5c:ad:6b:20:ae:f9:9c:19:4c:47:49:
         86:ea:dd:5a:ea:c1:0e:30:d6:64:29:cd:1e:4c:e7:0a:41:d4:
         c4:c9:97:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:55:14 2024 by rpki-client on console-fra.rpki-client.org