Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/0361CF86560211EB97A98D46C4F9AE02.roa
File:                     0361CF86560211EB97A98D46C4F9AE02.roa (raw, json)
Hash identifier:          eZp0ZKgVDOfYu6Z9u1hdNjyGvm1tn8fssJQyWdAbSMk=
Subject key identifier:   3F:DE:73:2B:9A:CA:D7:DD:E9:57:53:CD:F8:DB:7F:82:C4:42:D2:42
Certificate issuer:       /CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A
Certificate serial:       057D
Authority key identifier: C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/0361CF86560211EB97A98D46C4F9AE02.roa
Signing time:             Mon 31 Jul 2023 23:40:03 +0000
ROA not before:           Mon 31 Jul 2023 23:40:03 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     131230
IP address blocks:        103.68.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl
                          rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 May 2024 23:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1405 (0x57d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A
        Validity
            Not Before: Jul 31 23:40:03 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c84653-6842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:56:66:49:e5:4e:a0:8c:70:bd:89:5f:04:32:
                    04:86:c1:35:70:28:9b:30:ed:6c:65:b6:48:aa:65:
                    b0:61:db:85:58:7e:05:c8:9b:db:fd:6e:5e:33:53:
                    99:09:a7:b3:eb:75:d9:f9:8b:0b:1e:ff:3d:4f:a4:
                    fd:f1:80:3c:d3:23:37:9e:cd:cc:5d:72:44:fe:c8:
                    f4:0b:60:76:eb:bb:50:24:79:aa:2b:2d:a4:e1:e2:
                    f0:8b:03:58:db:4d:58:c5:96:0b:97:f3:87:a9:57:
                    1e:99:7c:d9:99:53:25:16:62:d6:12:9f:f3:aa:78:
                    8b:ec:a2:ef:62:fa:dc:85:bf:1b:19:a3:cb:b2:41:
                    d5:76:95:25:33:6b:9e:5a:33:3b:3b:67:e5:16:e7:
                    2e:55:be:a3:1c:5d:d1:b0:c3:69:16:e8:19:ad:39:
                    26:97:dc:fc:a3:d9:64:d6:bf:8f:77:e7:07:d2:c8:
                    8d:3f:65:d6:2d:3e:b6:32:46:00:19:42:ee:d6:b9:
                    14:69:68:a9:44:37:ae:55:cd:33:85:2c:6a:58:1d:
                    1d:a6:e4:62:de:0d:4e:7c:49:01:41:48:0b:f9:5b:
                    a2:9d:a1:c8:ff:d2:9f:c2:46:e9:fc:b5:63:aa:b0:
                    6c:0c:98:a0:1a:34:fb:ae:6b:48:f4:c4:34:c4:30:
                    92:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DE:73:2B:9A:CA:D7:DD:E9:57:53:CD:F8:DB:7F:82:C4:42:D2:42
            X509v3 Authority Key Identifier:
                keyid:C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/0361CF86560211EB97A98D46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:8f:2f:4e:a8:5f:22:77:e2:45:d5:d9:4b:1e:fe:fb:e7:f9:
         2b:13:12:db:09:89:48:d1:7f:6c:30:ef:92:be:a9:fe:5f:ad:
         04:e3:08:19:bf:5c:5c:64:8e:ac:be:62:7a:be:18:cf:7e:96:
         8c:fb:e2:aa:78:67:f4:14:cc:48:e4:94:6d:5f:3a:df:33:00:
         dd:70:a4:4a:f8:e4:15:30:8f:4a:b0:4d:2d:03:de:29:be:f1:
         a2:fc:5b:6a:0f:1a:74:8e:3e:1a:4f:86:aa:fd:23:8d:69:c0:
         cd:e5:30:e2:a8:ea:1b:bb:6c:cb:9b:68:78:5b:53:6a:78:c5:
         d5:e8:17:f6:ab:61:ca:c5:dc:6a:65:be:83:74:a1:7f:92:fd:
         b1:45:e2:b6:79:43:96:a5:6e:1f:3a:93:d7:9c:20:e5:e3:41:
         9f:d1:d2:51:83:e8:88:33:b4:d3:fd:14:52:22:08:26:63:6b:
         16:1d:f4:71:10:da:62:f1:3f:d4:f8:55:14:fb:03:e2:04:87:
         e2:d7:73:4c:06:64:3a:2e:9c:52:ca:25:20:51:73:43:43:39:
         bb:6a:97:20:12:47:13:c4:d9:60:2d:9f:5c:01:c4:b0:a0:73:
         60:bc:de:c0:3f:d7:88:0c:8d:07:7d:7f:fd:5e:80:83:49:50:
         93:b8:e6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:40:12 2024 by rpki-client on console-ams.rpki-client.org