Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/388802BC067711EDA1DEB529C4F9AE02.roa
File:                     388802BC067711EDA1DEB529C4F9AE02.roa (raw, json)
Hash identifier:          9JK39+YBCWgZM+DH+/r8YX8dHd7Tkhl9Fw94zVgc7kI=
Subject key identifier:   C9:F3:9D:CC:4E:99:82:C4:9D:B7:63:DE:B4:C4:13:47:E5:93:C1:82
Certificate issuer:       /CN=A91194E9/serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F
Certificate serial:       013D
Authority key identifier: 5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/388802BC067711EDA1DEB529C4F9AE02.roa
Signing time:             Mon 07 Aug 2023 03:23:52 +0000
ROA not before:           Mon 07 Aug 2023 03:23:52 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     134403
IP address blocks:        103.63.234.0/23 maxlen: 24
                          2001:df4:f400::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl
                          rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 04:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91194E9/serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F
        Validity
            Not Before: Aug  7 03:23:52 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64d063c7-d4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6f:cd:9b:f5:b6:75:95:6b:84:2d:9b:18:7d:
                    f6:59:95:e7:0b:89:15:be:9c:d5:c7:5f:3a:c3:72:
                    0e:3c:84:26:d0:7c:05:26:6f:c6:54:a5:32:45:eb:
                    4d:1d:ec:9a:9f:2b:b3:c8:bc:51:50:18:14:d1:d2:
                    73:d1:1b:41:5a:42:04:dd:4d:48:11:24:31:2c:0b:
                    ed:8d:cf:a6:7f:aa:d3:10:e4:60:04:66:8e:8f:04:
                    da:cc:8e:6d:b9:d0:8a:cf:17:11:c1:4f:64:0d:ef:
                    c3:8e:96:cd:66:68:b4:0a:48:c3:92:a1:5e:23:19:
                    78:4c:c9:1c:b2:60:4e:ee:ba:29:fe:00:63:bc:2c:
                    1d:0b:24:eb:e2:91:26:4b:aa:51:30:36:d3:3b:43:
                    e0:80:bf:2b:74:e9:85:c4:1b:3e:60:70:1f:58:ee:
                    43:aa:16:9f:bd:8b:51:ed:d1:3b:71:59:d3:e1:36:
                    78:2b:87:98:70:57:a7:40:e9:3e:97:8f:bb:03:ff:
                    73:6d:c0:51:93:13:02:4b:09:9a:74:5a:be:44:f6:
                    a4:38:da:b7:8c:dd:8d:0a:14:11:83:c8:cb:b1:8d:
                    e1:68:ce:2a:c6:94:e4:31:20:51:b4:49:18:f8:4b:
                    16:9a:f9:f7:dc:9a:21:2d:04:f2:43:b1:65:e3:4b:
                    c8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F3:9D:CC:4E:99:82:C4:9D:B7:63:DE:B4:C4:13:47:E5:93:C1:82
            X509v3 Authority Key Identifier:
                keyid:5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/388802BC067711EDA1DEB529C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.63.234.0/23
                IPv6:
                  2001:df4:f400::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:75:a1:4a:a1:1a:c7:1f:62:4e:97:90:02:cc:9d:01:43:5d:
         93:95:a8:e5:89:fc:77:b6:77:06:dc:17:e0:ba:16:68:57:c2:
         a2:c1:2e:7f:a4:a1:d5:1e:8f:c3:4c:25:33:58:fc:7b:ba:59:
         3a:e2:18:9d:f4:03:b9:79:05:db:eb:3c:5e:32:8f:75:9e:4f:
         b4:f5:f3:52:28:46:a5:a5:fc:5c:0f:38:77:40:89:8d:1d:76:
         32:b3:82:9f:1a:11:9f:6a:6b:8c:12:ad:d9:19:42:c2:54:ac:
         e7:6f:59:a4:47:ef:f8:f8:84:b3:c0:65:36:cd:a3:45:97:7c:
         49:a8:09:7d:bb:5a:16:d0:d6:80:5f:a8:c2:61:2e:36:dc:64:
         d8:33:2e:2d:60:28:ac:3a:ab:b0:e0:8e:cb:a2:74:99:87:dc:
         d8:60:13:f1:02:21:87:24:c5:37:53:84:d1:1c:2f:38:dc:5f:
         77:87:5a:df:57:db:dc:78:92:fd:a1:1b:22:74:c8:01:ad:e0:
         28:5f:f8:fe:37:49:f1:57:2a:2c:63:88:96:2d:1b:10:0f:73:
         a1:70:1f:4d:ce:51:2d:6d:b2:4a:80:13:b0:2a:03:06:f4:a0:
         d2:4a:18:1b:46:92:3b:41:5c:b0:4c:3c:2a:30:5f:8b:de:52:
         1d:f0:72:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:46:19 2024 by rpki-client on console-ams.rpki-client.org