Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/7FD99BE21F9C11EDA5DD9842C4F9AE02.roa
File:                     7FD99BE21F9C11EDA5DD9842C4F9AE02.roa (raw, json)
Hash identifier:          Xr81Jl7D8fOP4sYbNUFPiTyi1HaD8TvLvZIMKPt4m9I=
Subject key identifier:   F0:B7:AF:24:2A:CB:85:25:12:DB:B8:70:BC:3C:42:3D:CC:3F:7A:40
Certificate issuer:       /CN=A91427AF/serialNumber=D80FA9FA841255D5BDA72E52EC04FDFED7FE2D5B
Certificate serial:       1346
Authority key identifier: D8:0F:A9:FA:84:12:55:D5:BD:A7:2E:52:EC:04:FD:FE:D7:FE:2D:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/7FD99BE21F9C11EDA5DD9842C4F9AE02.roa
Signing time:             Tue 06 Jun 2023 18:27:09 +0000
ROA not before:           Tue 06 Jun 2023 18:27:09 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     400618
IP address blocks:        103.116.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.crl
                          rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jul 2023 17:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4934 (0x1346)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91427AF/serialNumber=D80FA9FA841255D5BDA72E52EC04FDFED7FE2D5B
        Validity
            Not Before: Jun  6 18:27:09 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=647f7a7d-839a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fb:17:86:43:42:02:f1:4a:54:b4:16:df:65:
                    8e:7b:d1:40:57:d0:9d:28:b8:58:fc:2e:5b:94:61:
                    0c:f0:03:be:48:20:a7:40:9e:ed:93:b4:90:cf:bf:
                    d3:f1:1f:1a:c5:40:a9:0f:ab:da:fc:39:af:e1:48:
                    ab:f0:cd:3d:da:26:36:7a:b4:ac:f4:0d:aa:3e:d6:
                    b0:9e:9e:df:c1:e6:00:f0:8d:33:9e:62:da:f7:be:
                    56:3f:a9:c3:8c:7e:c5:0a:6e:aa:9b:85:ab:1d:cc:
                    d6:51:15:fb:44:99:06:fc:81:a8:6e:c3:33:f8:ac:
                    71:dc:82:de:c0:c9:8b:b4:7c:69:ff:a4:b1:29:75:
                    c1:59:e5:94:32:c1:50:bf:b6:80:17:dd:b4:82:42:
                    1a:42:5b:f4:21:5d:68:fb:12:1f:a3:32:f1:73:c3:
                    a4:d3:91:df:38:54:5b:83:0c:0c:31:e9:d8:5c:00:
                    99:d4:c0:47:d1:f2:b0:e3:3e:ad:b4:2c:f3:b3:d7:
                    a2:f4:13:1f:3a:da:2a:0b:fa:8d:bc:5a:95:0a:89:
                    9b:89:74:40:b2:62:c7:c3:9d:02:6f:bd:21:35:e6:
                    bd:e0:7b:c9:83:7e:a3:2b:e3:6c:a8:22:27:d9:e2:
                    7e:90:a5:cf:6f:b5:7c:b0:2b:e0:92:87:ef:4a:c9:
                    f3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B7:AF:24:2A:CB:85:25:12:DB:B8:70:BC:3C:42:3D:CC:3F:7A:40
            X509v3 Authority Key Identifier:
                keyid:D8:0F:A9:FA:84:12:55:D5:BD:A7:2E:52:EC:04:FD:FE:D7:FE:2D:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/7FD99BE21F9C11EDA5DD9842C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:0d:da:f7:5b:6b:c5:b2:a5:a5:8e:31:a8:a3:9c:85:82:59:
         9b:01:1b:b1:0e:d8:55:0c:fe:28:79:ed:04:93:0f:9f:dc:85:
         7a:a9:e7:3d:88:47:00:43:52:ef:fa:ee:12:e6:9f:9e:43:68:
         12:ba:03:41:b5:e5:32:39:0b:b5:11:da:6f:f3:d2:e5:2a:20:
         ea:9e:03:f6:d8:7f:fb:0c:fa:5a:e0:5d:dc:9f:af:9a:25:4d:
         1f:04:e6:8d:2d:87:a9:b7:f6:a2:84:68:a6:1d:e7:f8:de:7e:
         d3:6b:a6:58:3e:c9:3f:91:c1:20:08:0b:60:4e:39:bb:a9:07:
         3d:5b:12:2e:1e:cb:54:fb:ea:aa:b8:0f:d2:4a:90:7e:e3:84:
         36:bf:ca:ce:a4:7f:01:33:00:fd:73:dc:05:41:00:19:0f:44:
         b7:8f:ac:95:27:a3:1a:fb:73:2e:70:64:c1:84:09:a9:1d:c2:
         97:f7:70:58:ae:87:7e:ee:f9:d0:09:53:d4:f3:c6:2f:be:26:
         0e:59:39:6f:c7:86:90:66:86:02:0b:ce:1d:ad:47:2a:ee:e1:
         5d:1f:47:9b:63:91:13:67:06:96:93:10:47:6b:a8:a1:af:13:
         cc:79:5d:9d:c6:94:49:e9:85:3a:af:e0:76:5f:7e:d5:e9:47:
         23:b7:2c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 22:33:42 2023 by rpki-client on console-fra.rpki-client.org