Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/27DCF5D6EBAC11EAA7A0FB1FC4F9AE02.roa
File:                     27DCF5D6EBAC11EAA7A0FB1FC4F9AE02.roa (raw, json)
Hash identifier:          jRflQFWPi4kV+bkPUeWKaZQD+rNBEQSCBurPT19qSAk=
Subject key identifier:   3A:EB:10:DC:9A:27:F3:FB:45:AA:68:1C:AC:93:A5:99:5E:BE:9F:6D
Certificate issuer:       /CN=A91495CF/serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995
Certificate serial:       06A3
Authority key identifier: BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/27DCF5D6EBAC11EAA7A0FB1FC4F9AE02.roa
Signing time:             Sun 10 Sep 2023 21:49:03 +0000
ROA not before:           Sun 10 Sep 2023 21:49:03 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     140986
IP address blocks:        103.154.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl
                          rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1699 (0x6a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91495CF/serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995
        Validity
            Not Before: Sep 10 21:49:03 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64fe39cf-3283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:71:4e:f5:bc:53:fe:32:6c:21:24:34:e4:a0:
                    52:ba:5c:fe:9e:ad:a8:0b:06:4f:0b:de:d5:04:70:
                    b2:e8:c4:ba:de:1d:0b:33:45:8f:35:45:13:5b:e3:
                    70:a9:84:b6:37:58:1c:8d:36:21:64:b7:f8:dc:2e:
                    56:f0:21:2c:ba:41:27:32:2a:d5:d4:69:ab:72:1e:
                    33:4c:61:b1:c8:83:04:a1:e9:96:4a:ef:8c:30:2a:
                    ed:39:e5:0f:16:1f:5d:ca:81:d6:43:a7:96:28:29:
                    6d:7f:cc:86:0f:6f:68:d9:52:f0:66:3a:df:37:7f:
                    c9:bc:00:38:27:4f:90:c1:b5:a0:59:5a:82:31:5e:
                    50:9c:fb:60:cd:d0:2c:8a:a1:d1:98:2a:a3:3d:f3:
                    4d:77:6b:9d:4b:7e:69:7f:f1:0b:0f:e0:18:15:f6:
                    07:14:c4:d6:6e:7a:37:e5:f3:b1:04:dc:08:7e:5d:
                    f3:b3:45:f4:27:ee:bb:62:a8:2b:a4:14:2b:62:b4:
                    9b:05:89:90:90:2a:75:18:ad:7b:ca:2d:6a:64:6e:
                    59:da:28:a6:5d:ca:01:52:5e:21:a2:53:86:cd:93:
                    b6:49:a2:a8:b4:f2:88:11:7b:60:34:cb:30:20:fe:
                    cc:e9:1b:c4:e5:4b:34:51:a6:f2:5c:31:aa:64:3f:
                    3f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EB:10:DC:9A:27:F3:FB:45:AA:68:1C:AC:93:A5:99:5E:BE:9F:6D
            X509v3 Authority Key Identifier:
                keyid:BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/27DCF5D6EBAC11EAA7A0FB1FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:c1:98:e4:e8:48:fe:6b:b4:b7:3d:e8:d9:76:09:09:42:7b:
         b7:40:3b:10:01:99:85:5c:52:1d:fe:39:a2:4c:6c:83:49:4d:
         e7:55:15:44:bf:c7:9a:e3:f3:fe:4d:ea:80:c7:e9:cb:60:7b:
         f3:d6:68:01:6f:66:63:5d:44:fb:bd:7b:cf:a6:c8:e9:19:93:
         21:75:f1:b2:31:41:48:0d:62:3f:67:d4:bb:3a:ee:d5:de:0b:
         ab:8c:00:f5:e2:75:8e:97:6d:0c:e3:a8:1a:87:eb:61:0b:33:
         ad:24:4e:6d:82:ac:b8:72:40:61:3d:42:71:92:ab:a4:5d:82:
         df:69:a6:02:82:42:31:e8:d4:79:3a:28:1b:71:94:5e:3f:b1:
         5f:b3:47:c7:99:b0:0c:a2:78:1a:0a:d4:81:45:99:de:b6:3f:
         cc:7d:f2:57:9c:f8:8e:68:54:e6:61:f3:8b:53:ec:b1:26:6f:
         2d:a0:00:36:0a:f1:90:bb:20:08:19:2b:33:94:fc:fc:1d:1b:
         81:be:a1:e7:69:1b:86:51:b8:42:48:48:73:6f:8d:d1:1a:2f:
         67:53:28:6c:78:ce:66:c6:34:52:27:7c:93:06:38:07:48:14:
         e2:ac:36:c4:38:5f:8d:e3:13:a2:96:5f:b6:d4:d5:0c:8a:94:
         67:3f:48:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 23:39:13 2024 by rpki-client on console-ams.rpki-client.org