Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/C310EE5AACD311ED84BAA06EC4F9AE02.roa
File:                     C310EE5AACD311ED84BAA06EC4F9AE02.roa (raw, json)
Hash identifier:          qWXVDjibiHtSIWksvfhSyOreQF5fIpHdHGrtQkZOi7Y=
Subject key identifier:   5A:2B:0A:78:06:FD:5D:4D:F6:04:E7:9A:E4:43:7A:DF:ED:03:CC:C7
Certificate issuer:       /CN=A916C4FA/serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6
Certificate serial:       6B
Authority key identifier: 96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/C310EE5AACD311ED84BAA06EC4F9AE02.roa
Signing time:             Sun 03 Sep 2023 02:13:40 +0000
ROA not before:           Sun 03 Sep 2023 02:13:40 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     136744
IP address blocks:        103.141.224.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl
                          rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 02:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4FA/serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6
        Validity
            Not Before: Sep  3 02:13:40 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64f3ebd4-0d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:02:d5:76:b1:f3:72:75:e7:e8:ee:39:2d:2f:
                    20:31:e5:86:ef:35:f5:16:1f:36:3a:c8:d5:d5:23:
                    6e:07:8f:3c:95:a9:f6:71:48:fb:a3:53:ef:a2:42:
                    11:74:14:db:d6:44:82:48:a8:a7:58:3f:d9:52:7c:
                    62:6b:db:5f:00:de:e2:91:c7:76:0c:a3:0c:ee:a3:
                    cf:c8:ba:c1:3b:9f:5a:07:49:35:e9:80:ff:16:f6:
                    5d:37:48:af:f3:56:91:1f:19:ed:94:ec:c8:be:b2:
                    d5:2d:39:e3:a4:c6:ed:5f:97:26:64:24:23:3a:a8:
                    9b:9d:15:50:bc:3d:f9:74:b3:5d:75:40:33:83:94:
                    c7:51:cc:29:c8:5e:13:47:df:ac:29:80:45:e3:38:
                    07:26:ed:7e:d0:42:1e:9f:28:ae:f5:3a:b2:1a:11:
                    e1:d6:1c:81:6d:ea:d4:a2:45:f4:1f:99:04:ac:56:
                    24:3e:17:55:cd:7e:19:b1:18:0e:5a:cc:d4:30:8e:
                    c4:ee:26:0e:5f:e9:42:85:e4:3c:de:80:0d:f9:d2:
                    8f:81:7e:81:8c:69:dc:8a:85:54:d7:44:58:b3:4b:
                    ab:48:d3:e0:ab:4c:54:19:7e:fb:06:45:c9:ae:8e:
                    b2:e0:c7:7d:5b:a5:38:f8:cf:c1:8e:ea:83:76:c2:
                    ed:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2B:0A:78:06:FD:5D:4D:F6:04:E7:9A:E4:43:7A:DF:ED:03:CC:C7
            X509v3 Authority Key Identifier:
                keyid:96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/C310EE5AACD311ED84BAA06EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:b5:d8:e6:99:8e:46:96:d4:9b:66:6b:83:6c:8e:4b:c3:95:
         80:82:b4:99:99:f2:98:53:96:dd:6f:ac:9c:d9:df:2f:54:22:
         ec:3b:b1:be:92:88:34:6e:cb:72:fe:f9:53:9c:35:87:7a:46:
         be:e4:5a:04:c3:f7:7a:f5:c5:45:d3:4b:59:82:33:38:be:6e:
         2c:93:4d:78:f3:69:90:ff:3c:32:7a:8d:55:13:a2:0a:53:07:
         b7:7d:39:bf:36:6b:b8:4f:5b:7e:80:16:11:46:70:d9:56:a7:
         0f:64:83:30:7b:9b:07:df:9d:98:8f:b9:9e:fe:5f:b9:cd:d9:
         f9:51:be:1a:8f:dc:da:1b:30:ab:dc:e5:d6:a0:ea:19:66:d6:
         75:79:52:d9:7c:86:e5:81:09:36:4e:16:ab:80:32:9d:00:9c:
         62:32:7b:1a:f4:12:ba:c0:53:45:86:9f:0f:07:e2:e9:83:1c:
         9b:27:c6:9c:f4:6f:7e:00:c4:80:5f:72:f8:d0:f4:0a:c3:4f:
         c0:ba:b8:8a:45:ac:12:bf:22:83:ba:14:a8:b3:9e:b3:30:0a:
         d1:0c:6e:38:27:5a:95:58:bd:09:f8:b1:0e:19:9a:e6:de:0a:
         0b:a4:e1:79:ba:63:44:e8:24:a5:87:b2:11:88:9f:0d:f7:b8:
         f2:cf:2b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 04:34:54 2024 by rpki-client on console-fra.rpki-client.org