Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/09513072DE3B11EC9F25BA5FC4F9AE02.roa
File:                     09513072DE3B11EC9F25BA5FC4F9AE02.roa (raw, json)
Hash identifier:          RSA/ql0lNyv9WyAk0d5FOAFZ5R84Y3YnmGvbKn1e7f4=
Subject key identifier:   87:85:63:FB:5A:D1:93:C9:CC:53:5D:0A:38:A1:63:D6:41:E3:1E:6A
Certificate issuer:       /CN=A91501FC/serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
Certificate serial:       0228
Authority key identifier: 41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/09513072DE3B11EC9F25BA5FC4F9AE02.roa
Signing time:             Tue 23 Apr 2024 04:06:57 +0000
ROA not before:           Tue 23 Apr 2024 04:06:57 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     137537
IP address blocks:        103.112.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl
                          rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 04:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91501FC/serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
        Validity
            Not Before: Apr 23 04:06:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=662733e1-824a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:74:87:6b:56:ae:44:63:18:51:21:90:b7:fd:
                    53:a6:d7:2b:80:34:cc:28:d5:bd:e9:81:9e:b0:5b:
                    ab:1e:d4:36:5b:af:50:d8:e3:4c:63:2a:f3:d4:85:
                    d1:aa:80:91:3e:40:0d:93:ad:4a:3c:38:22:9e:33:
                    1b:ff:fb:e1:c0:c4:2a:50:84:6b:e0:cc:d4:e2:f8:
                    12:d2:01:1e:00:1b:c3:dc:b2:00:46:f7:dc:63:5a:
                    2d:a7:df:1d:4c:ca:99:e0:d2:9a:64:88:9d:53:63:
                    c0:96:16:2c:65:c3:f0:40:88:c6:3f:6a:c3:e1:1c:
                    8c:80:2c:b7:27:72:ff:a1:6c:1d:94:23:fa:14:b5:
                    41:99:51:f7:ee:62:aa:02:df:1d:5e:92:f2:c2:9d:
                    2e:3e:76:c1:65:39:0e:ee:63:f7:b2:d1:b3:7c:53:
                    b9:3d:03:f3:8b:da:09:0e:7a:3a:9c:5d:e0:5b:7e:
                    be:bd:94:22:a0:3b:71:e7:6d:fc:9e:60:ae:80:54:
                    5c:1c:4b:8f:22:44:8f:0d:59:8b:7d:75:48:20:06:
                    ac:fe:b9:71:0b:38:87:b8:48:47:c8:b1:5d:5a:8c:
                    aa:e2:60:57:76:fb:43:34:35:0c:94:74:8f:c0:50:
                    8c:f5:b6:eb:71:00:4c:2c:b6:82:ad:52:97:5f:fc:
                    1e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:85:63:FB:5A:D1:93:C9:CC:53:5D:0A:38:A1:63:D6:41:E3:1E:6A
            X509v3 Authority Key Identifier:
                keyid:41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/09513072DE3B11EC9F25BA5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:97:ad:b3:38:d1:be:83:a2:50:37:74:b4:3a:2d:cd:bb:e4:
         e8:07:f6:8f:04:51:fb:81:0b:6d:e6:8b:6a:e5:47:bc:8a:41:
         2b:a7:ee:eb:b9:6d:10:c6:72:31:1b:80:a6:13:24:d9:ca:c9:
         ed:d3:a0:c4:51:96:d3:4d:f6:61:4a:31:53:5c:62:f4:6b:84:
         7e:0a:0d:3a:01:ac:61:cf:0d:37:d8:e6:05:45:cd:31:52:f6:
         03:b5:e6:37:7f:97:8c:00:9d:0c:46:f1:e3:47:c1:6b:52:1b:
         5b:22:f9:8a:be:42:1f:23:7b:ea:6e:82:8b:f6:06:e9:f7:6c:
         99:a6:8a:51:82:af:62:83:14:89:e7:00:e4:cd:c6:d6:82:0b:
         38:3a:fc:0d:10:01:d8:20:9a:e5:ca:67:c7:5f:f8:00:11:27:
         4d:42:eb:8a:36:eb:20:11:e6:a1:b7:63:f9:da:65:80:58:3f:
         d4:3a:b1:5e:92:39:aa:e5:0e:8a:64:71:af:71:d6:5e:a0:64:
         0e:b3:fd:84:af:bb:0f:a7:af:91:35:24:88:73:9a:a7:70:7d:
         0e:bb:00:a2:fd:e8:b5:c1:43:6a:aa:6e:a1:6f:a2:4e:8f:40:
         f0:52:ed:3d:7b:b4:95:e3:55:6b:58:96:c1:29:36:c4:d1:37:
         ca:5d:91:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:18:05 2024 by rpki-client on console-fra.rpki-client.org