Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/31A9E86E717711ED807F3C30C4F9AE02.roa
File:                     31A9E86E717711ED807F3C30C4F9AE02.roa (raw, json)
Hash identifier:          VbLa8+G2Kak4BsqZL0KLsN32nzloEodUrCMl/tmFbzw=
Subject key identifier:   F6:E3:1A:D8:64:4C:67:38:16:B2:18:12:19:9A:1B:A6:23:D7:BB:18
Certificate issuer:       /CN=A9136592/serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
Certificate serial:       014A
Authority key identifier: 8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/31A9E86E717711ED807F3C30C4F9AE02.roa
Signing time:             Wed 05 Jul 2023 03:12:25 +0000
ROA not before:           Wed 05 Jul 2023 03:12:25 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     63969
IP address blocks:        103.190.228.0/23 maxlen: 24
                          2001:df0:f340::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl
                          rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 03:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136592/serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
        Validity
            Not Before: Jul  5 03:12:25 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a4df99-f419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:16:37:b2:eb:8c:df:46:91:6f:d2:c4:34:61:
                    0b:7c:3b:5d:3b:74:1b:b3:68:55:1b:eb:93:fc:f2:
                    8b:fc:cd:d6:a0:2f:86:74:1c:22:a5:b9:c5:ee:7b:
                    41:ec:96:cc:49:ea:86:5b:07:c3:20:5e:a9:cb:9f:
                    51:80:6d:54:6f:e2:b8:47:bf:6b:cd:63:d9:5c:f2:
                    81:d6:3c:42:0e:aa:97:36:55:64:ae:0e:39:ba:e6:
                    94:9e:88:9d:49:4b:b0:4d:c0:e8:c9:2e:36:e1:a8:
                    b1:2b:97:3b:cd:0a:89:5b:6c:6e:67:4a:75:50:cf:
                    b2:e3:c7:37:a0:1d:4d:b5:d8:cb:97:ac:01:3c:60:
                    ff:0c:84:04:76:32:a8:0d:98:ba:66:0e:a8:4f:d2:
                    f4:96:74:d5:b9:20:c9:a0:26:9c:c7:1c:79:f7:62:
                    72:51:08:8d:a6:af:f0:3f:ac:e0:50:6f:37:2e:02:
                    6e:b0:a2:d2:57:b4:1c:b0:55:8d:77:b4:b8:17:1b:
                    d4:14:e5:ad:ae:ed:b8:ad:80:21:02:c2:54:d2:9b:
                    43:26:c2:7c:83:5b:95:cc:98:e3:10:e0:fb:a1:58:
                    b4:72:53:92:1c:35:91:5b:84:c0:ac:98:ac:8c:77:
                    7d:d1:2d:80:7d:39:b3:e2:93:c5:de:68:18:9a:01:
                    f1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E3:1A:D8:64:4C:67:38:16:B2:18:12:19:9A:1B:A6:23:D7:BB:18
            X509v3 Authority Key Identifier:
                keyid:8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/31A9E86E717711ED807F3C30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.228.0/23
                IPv6:
                  2001:df0:f340::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:97:0f:e3:ee:96:c4:6d:03:35:a6:9f:8a:1f:02:6f:eb:09:
         f1:9f:b2:b0:41:b1:9e:16:2a:88:a0:8b:2c:0a:39:31:20:27:
         ee:eb:98:9a:94:57:48:de:be:d6:df:e8:f9:76:5f:39:1b:2a:
         42:b3:b2:0f:7a:6f:98:d6:b2:c6:16:db:c5:6d:53:02:ac:56:
         d1:b2:3b:e4:90:c9:c1:b1:0a:44:ee:98:31:9b:5a:ba:99:3f:
         35:c5:b4:b9:cb:33:60:12:11:93:98:b8:d8:5e:7d:00:b4:ba:
         26:be:d2:2f:98:17:bf:e8:33:07:e8:a1:29:21:34:38:d5:7d:
         7c:e1:df:be:5e:de:69:c1:b3:ce:4f:00:a1:a7:45:bb:50:a8:
         f0:66:9e:11:bb:fe:9d:b9:61:70:a7:91:e0:d2:2b:5d:08:f3:
         bf:9e:ce:22:d1:09:79:4d:c4:cf:d9:06:d6:2b:99:6d:02:9f:
         7f:e5:dd:96:b1:96:08:8b:af:5b:cc:c7:11:87:fd:22:c5:7f:
         a5:2f:87:ef:1a:5e:10:51:73:c4:2a:a9:34:ee:91:b4:93:a7:
         92:d5:f4:86:a2:08:12:b2:7c:88:14:4d:d2:21:02:a3:6c:9e:
         a5:37:5d:ed:53:20:a8:3d:28:27:10:da:fd:8a:f5:85:99:29:
         82:df:2a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 05:36:28 2024 by rpki-client on console-fra.rpki-client.org