Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/C93A47F63ABB11EE8A78BE4CC4F9AE02.roa
File:                     C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (raw, json)
Hash identifier:          OETeMQXD+FgpeuSCyMapXHWOjC3yDi7rTDX/4Fgvqc8=
Subject key identifier:   D5:6A:14:58:8C:07:06:E6:24:BC:2F:8F:0A:44:CD:4D:EE:AD:78:10
Certificate issuer:       /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Certificate serial:       83
Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/C93A47F63ABB11EE8A78BE4CC4F9AE02.roa
Signing time:             Mon 14 Aug 2023 16:01:11 +0000
ROA not before:           Mon 14 Aug 2023 16:01:11 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     150178
IP address blocks:        103.167.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
                          rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 05:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
        Validity
            Not Before: Aug 14 16:01:11 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64da4fc6-6323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8c:52:d4:35:46:18:91:87:92:2c:6f:48:fa:
                    22:be:88:92:e8:6d:cb:1a:1a:4b:c4:79:4d:29:c8:
                    a2:ff:9a:23:ec:a8:2f:30:6e:ea:ac:93:cc:63:07:
                    08:e0:44:c0:61:5b:90:52:f8:d7:50:fc:ab:5f:db:
                    8d:10:19:c2:9c:37:7a:86:41:27:9d:ab:66:aa:e8:
                    40:34:4a:2b:e0:58:3b:94:80:db:27:96:0b:ca:94:
                    73:eb:5b:74:39:6b:35:0b:3f:ff:d7:b5:59:c1:07:
                    0d:2c:c2:71:5b:20:c1:28:db:86:97:e4:ab:72:99:
                    4d:f9:32:a7:f9:8a:01:f6:cd:06:33:31:39:2e:4d:
                    09:c9:0a:25:b5:52:e2:4b:0b:d9:3b:bd:3c:ef:37:
                    83:6a:66:76:1c:40:55:e3:65:64:c2:76:e8:5a:99:
                    bd:0a:91:df:fa:39:1f:07:07:42:07:a1:f9:50:85:
                    59:8d:08:d8:17:1b:33:99:f7:de:bd:f0:52:86:4b:
                    09:a9:a4:8a:5b:a6:7d:50:29:d8:57:d6:ac:af:20:
                    5d:b4:be:88:a7:ea:b9:30:b2:c6:72:bf:9e:87:6d:
                    00:c3:f8:7e:55:8a:e3:86:e5:88:d9:63:0d:6e:db:
                    45:77:91:e6:d6:d7:ad:76:5a:40:06:26:13:96:ff:
                    bd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6A:14:58:8C:07:06:E6:24:BC:2F:8F:0A:44:CD:4D:EE:AD:78:10
            X509v3 Authority Key Identifier:
                keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/C93A47F63ABB11EE8A78BE4CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:a8:12:86:a2:f6:b9:6c:4a:1a:b2:be:81:b9:b8:6c:4a:13:
         34:26:63:43:a6:01:0e:e9:a4:af:d6:e3:6e:9e:f5:41:10:ec:
         a4:28:36:20:74:66:47:da:fd:5f:8a:9a:0b:e5:40:ae:39:56:
         fd:76:7a:e9:b6:93:98:d8:02:51:88:ab:cf:f8:3e:ce:42:4f:
         0a:a5:09:b1:bf:5f:7e:93:77:c7:4d:09:fc:b9:e8:6a:c3:c1:
         f6:2f:67:4f:22:38:59:ff:43:0a:14:8d:02:9e:01:42:c6:33:
         f3:6a:ad:10:e7:c8:0f:bf:1c:1e:58:30:34:92:27:01:6a:51:
         12:25:4b:8a:23:67:a0:57:29:f8:c2:67:a5:6f:ff:41:4a:80:
         d8:06:c3:2b:37:07:2e:2d:e5:c4:ff:4e:bf:e0:43:fb:76:c3:
         50:a7:7c:be:d3:33:19:1e:2a:06:38:45:d5:1f:da:f7:f7:69:
         3d:dd:17:9e:9f:b8:44:fd:8b:8c:39:93:c4:c4:e9:5a:7b:1a:
         da:11:63:34:40:cb:e7:2c:61:51:94:43:92:68:7b:5e:a2:a7:
         74:02:71:ce:ef:e7:59:f2:e4:df:9a:e5:e1:8a:15:26:07:87:
         51:44:1d:56:83:b1:07:29:6f:2d:5f:a9:a4:20:16:7a:2d:f1:
         06:4d:2a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:18:07 2024 by rpki-client on console-fra.rpki-client.org