Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa
File:                     F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (raw, json)
Hash identifier:          Ze/5Ss1fPC8M1V3+E26f6JP5bbKklJOutErrb5oHX4Q=
Subject key identifier:   5B:56:A7:F6:F8:51:E1:D2:66:D3:FD:5B:1E:58:98:EB:4E:B3:8D:14
Certificate issuer:       /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Certificate serial:       0455
Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa
Signing time:             Sat 03 Jun 2023 02:40:48 +0000
ROA not before:           Sat 03 Jun 2023 02:40:48 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     132480
IP address blocks:        103.151.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
                          rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1109 (0x455)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
        Validity
            Not Before: Jun  3 02:40:48 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=647aa830-d673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:96:9b:3d:3b:ab:99:a7:be:04:bf:24:bb:e4:
                    4a:6a:e6:62:e0:93:88:bd:f1:b2:68:f1:c9:5a:ec:
                    55:9c:f0:44:73:6a:4c:ec:51:7a:97:57:8c:79:a3:
                    c3:2d:8a:63:3e:fb:26:ee:a3:f8:bc:f3:1f:d2:94:
                    76:41:21:35:3e:21:65:af:de:64:2a:0d:dd:31:08:
                    ed:e2:a9:9d:0e:8f:ea:24:99:4c:e6:a3:28:46:2b:
                    e3:d0:65:7e:c7:20:95:b5:8e:96:e7:75:59:54:bc:
                    b1:03:94:2e:b7:dd:41:9e:03:93:ac:08:8f:55:34:
                    7a:2a:ce:46:ce:d4:ea:cc:9c:22:cf:37:96:c8:12:
                    af:b7:f8:fb:2a:d0:ae:ef:39:b2:31:37:82:e3:a8:
                    b8:97:89:e2:14:55:d3:14:64:74:a6:d4:ce:38:6e:
                    ea:ca:7d:ba:b6:be:65:03:4d:7d:47:bb:a5:62:9e:
                    a9:56:82:4e:ec:f3:65:89:5a:32:a9:b1:25:7b:6a:
                    0b:46:4d:93:dc:81:8f:c9:c7:51:3f:76:59:c8:56:
                    75:f4:48:76:19:73:4d:de:bd:3f:b2:18:04:1c:13:
                    cf:67:60:e3:0e:e7:c7:20:f0:0a:d0:8a:bb:67:98:
                    6d:be:c7:66:2f:86:cc:39:80:a9:99:3c:30:f2:52:
                    d0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:56:A7:F6:F8:51:E1:D2:66:D3:FD:5B:1E:58:98:EB:4E:B3:8D:14
            X509v3 Authority Key Identifier:
                keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:58:e0:c0:8c:73:a6:bb:3c:48:cd:69:8f:92:7f:53:ef:08:
         ac:a8:a1:48:40:cb:23:28:ac:3e:1f:c4:7c:04:32:1a:30:46:
         83:0a:3a:88:7a:2c:c0:80:37:36:46:2f:48:4d:29:db:64:3a:
         4a:31:7c:7e:a8:ae:75:cf:db:39:34:86:32:95:75:dd:eb:76:
         3c:e7:c5:b1:dd:b1:b4:f1:29:a3:7b:bb:c8:40:7a:0d:30:60:
         9a:40:bd:9e:9c:83:ba:c7:d8:e5:eb:12:84:cc:f9:b0:e8:5c:
         ba:fb:12:29:64:55:8f:15:17:7e:bf:69:21:12:27:7c:41:f5:
         4a:ae:ac:e5:bb:e2:ce:b4:ea:4f:ee:f1:c0:61:c2:7c:88:2a:
         81:64:9d:fa:04:6f:92:0e:44:6a:b7:34:af:11:73:3a:1d:25:
         a1:2f:a5:a5:cf:f2:71:c8:1c:fe:3e:62:48:4a:3f:f4:af:5c:
         20:99:cc:ae:20:9b:19:27:ad:de:de:fb:30:7f:e4:63:48:23:
         b4:5c:db:80:01:c9:33:a6:cf:67:b7:4e:f2:30:7f:52:52:89:
         fb:14:8c:1b:a4:a5:33:82:84:41:55:b7:14:95:3b:93:d7:a6:
         a8:44:47:a7:18:1c:43:09:33:ff:2a:81:89:14:1d:a8:6f:84:
         c9:74:8b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:38:39 2024 by rpki-client on console-fra.rpki-client.org