Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/D1A6B6D0738E11ED8283FF53C4F9AE02.roa
File:                     D1A6B6D0738E11ED8283FF53C4F9AE02.roa (raw, json)
Hash identifier:          w4J4xAuvdERMPvfOUQHJ8THCJMJLk8tx9s5ftfLsDas=
Subject key identifier:   30:43:2F:7D:30:48:90:2A:A6:D3:99:7E:24:0D:36:4D:3B:2A:BF:91
Certificate issuer:       /CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639
Certificate serial:       0885
Authority key identifier: FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/D1A6B6D0738E11ED8283FF53C4F9AE02.roa
Signing time:             Thu 02 Nov 2023 21:28:46 +0000
ROA not before:           Thu 02 Nov 2023 21:28:46 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     139922
IP address blocks:        103.156.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl
                          rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 20:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181 (0x885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639
        Validity
            Not Before: Nov  2 21:28:46 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6544148e-131b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9d:7b:d5:2b:f7:ce:e9:fb:cc:b3:e6:07:85:
                    97:1f:b0:51:62:60:16:ba:e3:49:53:2b:ec:e2:7a:
                    ae:fe:e1:c8:01:71:32:74:ed:2c:2b:67:14:b8:e9:
                    f1:ac:a9:6a:cd:d5:2d:c4:e3:2e:a6:e8:49:e1:72:
                    69:33:df:e4:9d:d6:6e:9e:cb:f0:bb:93:3d:5b:78:
                    44:86:f6:e0:62:f1:e7:4c:6d:32:c3:91:3a:57:07:
                    c9:f4:17:c9:85:8b:4a:9e:c8:31:a6:1b:50:9a:ae:
                    ec:81:bd:5e:fb:04:25:e8:88:a6:68:d8:b2:a0:ef:
                    b2:21:bb:79:42:c6:11:3b:a7:ac:42:aa:2c:f0:cd:
                    88:ce:98:0e:a3:8e:48:1a:d0:d3:8f:32:b2:4c:e2:
                    52:e6:f8:d3:9f:a3:51:a3:af:01:f2:12:59:1b:03:
                    d7:b8:e7:58:b4:a4:ef:82:fc:45:54:5e:ce:c0:dd:
                    be:7f:6d:d1:64:a1:4a:77:cf:cf:68:2c:58:f0:28:
                    8d:e3:8a:2b:11:50:b5:c9:4b:a3:b9:1f:a8:30:3d:
                    a8:0e:b1:b6:47:b7:c1:f0:f8:1f:e2:7b:2e:72:40:
                    b6:17:32:15:44:fc:35:64:03:7b:02:ec:10:5d:21:
                    3a:ce:3e:2d:4f:0b:a8:48:84:da:86:c2:36:ff:97:
                    a8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:43:2F:7D:30:48:90:2A:A6:D3:99:7E:24:0D:36:4D:3B:2A:BF:91
            X509v3 Authority Key Identifier:
                keyid:FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/D1A6B6D0738E11ED8283FF53C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:db:09:18:a6:c5:93:0c:19:ac:4b:20:01:91:ec:65:c1:ea:
         a8:eb:9a:cc:c8:07:e7:dc:a4:4c:8c:16:51:bd:6c:0f:ba:77:
         8d:51:6f:21:86:e9:84:fc:fe:1f:86:6e:37:6d:16:fa:de:94:
         67:29:a7:4a:03:95:7b:aa:72:c6:24:30:5b:0b:24:7f:05:20:
         e6:82:4d:6d:2e:c6:ae:09:7c:a1:d5:f4:b3:65:6c:3d:c4:7d:
         11:4a:db:38:2b:17:c4:b3:fa:a2:31:a3:df:4a:7f:da:e1:c6:
         1c:97:21:1b:1e:03:fb:c9:ca:81:75:ff:2f:17:3c:29:23:6e:
         dd:f6:49:5f:3a:3b:e8:01:13:43:65:18:1d:af:35:31:ce:f6:
         73:6c:57:83:4c:a9:c8:98:ac:f3:ca:09:cb:af:2f:79:18:11:
         51:6c:9d:54:1a:e5:83:d9:1b:d0:56:35:96:96:1a:71:52:d0:
         93:eb:10:47:4f:30:3a:ab:4a:37:64:15:cd:70:0d:3d:f8:05:
         c4:59:f6:74:c2:1b:2f:8f:db:74:92:2d:00:bf:b2:5a:4c:d4:
         c5:7f:57:02:f4:9c:59:42:51:c5:67:61:dd:1f:a9:10:8e:71:
         88:f6:56:48:ed:9d:a3:e2:e5:34:7b:fb:19:77:72:6f:38:82:
         7f:78:3d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 23:33:51 2024 by rpki-client on console-fra.rpki-client.org