Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/E91BDAD0D6DE11ED88F30263C4F9AE02.roa
File:                     E91BDAD0D6DE11ED88F30263C4F9AE02.roa (raw, json)
Hash identifier:          4lo9uf5DKxwwcPDqUSZ+9SBJl0uUBGbrDJMOemG6f1k=
Subject key identifier:   85:2F:DB:4F:C9:42:B7:48:EE:EA:72:A6:E0:C4:A6:BD:6F:54:D0:3D
Certificate issuer:       /CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
Certificate serial:       05EF
Authority key identifier: 42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/E91BDAD0D6DE11ED88F30263C4F9AE02.roa
Signing time:             Tue 31 Oct 2023 23:51:08 +0000
ROA not before:           Tue 31 Oct 2023 23:51:08 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     137409
IP address blocks:        103.101.2.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl
                          rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Jun 2024 23:49:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1519 (0x5ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
        Validity
            Not Before: Oct 31 23:51:08 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=654192ec-6f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4c:36:82:66:94:20:73:ba:cd:32:ba:a6:ad:
                    2d:cd:b2:cb:dc:eb:26:e8:0e:7b:d6:cc:5e:cb:40:
                    9a:3a:1a:4c:24:78:18:89:a6:17:7a:a4:02:6c:66:
                    ec:29:c1:c4:21:92:1a:19:2b:12:f0:8a:47:17:fd:
                    7a:6a:d4:21:35:58:b9:4a:50:ae:7d:5d:43:a2:cd:
                    95:66:c5:fd:a0:99:8e:f5:45:dc:58:e3:2f:f4:65:
                    06:c1:00:d8:63:0d:6a:c2:0e:f0:ce:35:aa:d2:3e:
                    ed:58:e7:d2:ef:6a:15:e6:e7:e0:05:6a:bc:44:1a:
                    34:20:d9:86:a4:77:7d:7d:80:78:22:03:cf:6e:c3:
                    55:ca:6f:12:bc:65:46:bb:85:b8:6b:aa:a4:df:3a:
                    5f:33:53:92:4e:46:98:e9:8e:45:06:4d:28:b9:6f:
                    04:0e:6b:b1:f3:f3:a3:85:1e:61:a1:ad:0f:00:a2:
                    33:7c:ca:5b:bd:27:3b:88:b8:22:90:c4:2f:c0:a7:
                    7e:9e:75:56:c3:54:11:8b:5e:48:68:f2:83:38:83:
                    f8:0e:7c:6d:9e:fd:e8:df:b7:8a:9c:ec:4b:12:1b:
                    0d:eb:85:67:91:7e:7e:bf:4c:e9:37:27:34:a5:dc:
                    c1:58:95:34:4c:c7:fa:84:04:d3:b2:de:ce:21:d1:
                    86:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2F:DB:4F:C9:42:B7:48:EE:EA:72:A6:E0:C4:A6:BD:6F:54:D0:3D
            X509v3 Authority Key Identifier:
                keyid:42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/E91BDAD0D6DE11ED88F30263C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:b8:f9:6f:96:28:d9:16:de:68:23:d4:f1:f2:9c:bd:01:62:
         1c:74:3b:74:70:73:5b:8d:59:40:79:3c:fc:37:bf:e4:5e:ef:
         8e:fa:bd:21:07:d3:c2:71:96:64:37:dc:cd:44:f4:85:25:97:
         ff:f4:67:a6:53:c1:48:00:60:03:51:58:e7:14:07:17:7c:b8:
         a9:75:76:a8:89:f7:27:fc:a5:60:3b:cf:2b:f5:02:4c:5b:58:
         c5:83:06:72:53:b3:38:1c:95:39:38:f5:14:81:98:98:25:f7:
         ac:b8:3a:c7:34:96:d3:9d:e3:a2:7c:ca:08:c0:b7:72:e3:d5:
         04:1e:a1:c4:16:ce:56:7a:59:29:83:bd:ff:6a:ac:38:39:49:
         f6:fa:9e:57:39:86:ea:d6:b9:95:c9:8d:b4:0d:1b:ad:fd:ad:
         5d:c1:be:c6:96:a5:a4:20:77:02:da:3c:48:50:b8:00:ea:07:
         16:c0:a1:29:27:83:e4:8b:16:2d:24:0b:f1:01:52:6d:14:b5:
         fa:b7:28:cf:51:ae:f2:b7:58:f2:51:cf:12:aa:16:56:c4:85:
         48:62:0f:61:93:9d:26:5f:60:db:13:1e:30:05:37:c0:7d:46:
         1e:4c:b9:05:d3:f0:32:c0:34:72:79:24:4d:f9:62:34:6f:d3:
         e2:21:47:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 00:39:30 2024 by rpki-client on console-ams.rpki-client.org