Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/B3078DFAE1E411EAAD5D8545C4F9AE02.roa
File:                     B3078DFAE1E411EAAD5D8545C4F9AE02.roa (raw, json)
Hash identifier:          bVIigg8Ts3woBy0lelHvCn/+BeHP8YKbpv6ObCwEtMA=
Subject key identifier:   78:F1:67:A8:06:1D:E0:96:CD:99:6E:59:F0:6D:65:75:F9:F6:D9:18
Certificate issuer:       /CN=A91753AE/serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7
Certificate serial:       068F
Authority key identifier: 19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/B3078DFAE1E411EAAD5D8545C4F9AE02.roa
Signing time:             Fri 16 Jun 2023 22:54:33 +0000
ROA not before:           Fri 16 Jun 2023 22:54:33 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     140670
IP address blocks:        103.151.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl
                          rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1679 (0x68f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91753AE/serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7
        Validity
            Not Before: Jun 16 22:54:33 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=648ce829-2cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:82:8e:50:61:7f:ed:6f:40:02:49:3c:84:
                    2b:e9:1f:c3:be:3e:24:98:7d:ed:6b:b7:f1:b1:e0:
                    9d:3d:5a:21:08:d4:3c:4a:fa:80:ca:5c:78:47:83:
                    88:2e:13:4c:66:73:20:92:f0:ce:5e:68:c7:6c:7c:
                    be:74:94:6b:7d:dd:01:42:d5:c9:97:6b:df:7b:58:
                    a0:a2:89:06:a8:fb:6b:17:93:bb:85:f4:dd:4d:ba:
                    e5:e8:7d:47:68:ea:6b:56:77:fb:26:3d:5d:5a:8b:
                    78:8c:57:a0:4e:6c:2b:f0:ca:33:e8:04:69:cc:8e:
                    89:fa:2b:5d:6c:35:61:0e:5f:63:4a:a3:93:7f:eb:
                    63:6a:3f:46:0c:20:c3:4f:e7:bf:58:97:13:71:d5:
                    1c:19:7f:b5:6a:b9:c2:24:be:0c:ed:67:27:22:95:
                    c3:82:fc:3a:33:90:0f:01:61:a6:e1:bc:f2:6f:8b:
                    e1:85:fd:ea:f6:0c:bd:a7:c3:ba:62:ef:bc:e7:25:
                    9b:bf:60:f2:9c:15:41:35:fc:0d:f6:c4:dc:46:68:
                    0c:cf:52:2a:a4:8e:7d:4a:66:70:f3:49:f0:72:5e:
                    a7:9f:6b:7e:0a:b5:42:16:6f:80:a2:eb:aa:46:05:
                    85:3c:f2:97:33:1c:16:fd:c3:f9:71:4b:6e:fb:64:
                    12:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F1:67:A8:06:1D:E0:96:CD:99:6E:59:F0:6D:65:75:F9:F6:D9:18
            X509v3 Authority Key Identifier:
                keyid:19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/B3078DFAE1E411EAAD5D8545C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:ba:f7:d7:1a:38:f5:2a:71:cb:e8:28:53:be:c3:93:50:b3:
         18:8e:86:11:5a:c8:7b:75:4b:ef:0e:5a:24:f5:b2:07:95:40:
         1e:95:12:dd:f9:2a:c9:8b:b1:75:41:5b:9b:c7:39:a6:a7:87:
         b8:5d:d8:61:5c:eb:02:27:ea:e6:32:fd:6e:eb:4f:84:36:03:
         f8:75:fe:3c:c4:d6:03:68:c5:a2:38:1e:e7:fb:eb:1c:2b:49:
         84:ee:29:22:07:7b:78:7b:3c:d9:eb:09:84:db:e6:a3:66:a0:
         f6:09:71:de:a3:c8:dc:22:5a:d6:b2:c9:1e:18:2a:1f:62:2d:
         90:3d:12:a6:46:b5:b1:15:3b:21:07:7b:c6:9a:ac:ec:bb:75:
         cb:77:df:e3:f0:a1:40:22:ca:f7:1e:12:09:e8:46:ae:c3:53:
         bf:59:83:06:f5:ea:1a:5c:fc:6f:24:31:16:c9:30:c6:71:2a:
         d7:42:a5:f8:09:d9:81:29:4d:bc:ff:30:88:9f:47:93:1c:9a:
         a0:51:1b:55:d4:aa:4f:e9:82:8c:9d:ab:9a:3b:4f:ce:57:a6:
         56:15:7d:a4:76:c4:d0:2d:86:4e:31:33:da:ae:ba:a9:90:28:
         cc:cc:b2:81:6d:12:e3:27:f3:a3:6a:d0:5b:1e:87:d3:29:d0:
         fd:2d:70:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:15 2024 by rpki-client on console-fra.rpki-client.org