Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D10DBCB2475C11EEBF5FB180C4F9AE02.roa
File:                     D10DBCB2475C11EEBF5FB180C4F9AE02.roa (raw, json)
Hash identifier:          Krb9ZcAkVTReFzizLQ3T9UA+S18Hy0Vo8CDdBjRYIGM=
Subject key identifier:   A9:FA:ED:36:47:B9:8F:45:3C:CD:E1:99:83:20:28:1D:9D:54:D2:C0
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       35DA
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D10DBCB2475C11EEBF5FB180C4F9AE02.roa
Signing time:             Thu 04 Apr 2024 15:20:56 +0000
ROA not before:           Thu 04 Apr 2024 15:20:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     134489
IP address blocks:        59.103.36.0/24 maxlen: 24
                          59.103.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13786 (0x35da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: Apr  4 15:20:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=660ec558-3921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:d4:5c:38:d4:aa:a2:38:0d:82:c6:e4:7b:
                    e5:96:3c:15:25:c9:d9:5a:41:3d:69:f0:d1:96:aa:
                    98:ff:ac:e8:e4:0c:1b:fe:83:c4:ce:fa:81:98:09:
                    1e:85:5c:f9:a8:ce:fd:9d:4c:e7:67:f0:f0:fb:18:
                    4e:4d:ee:67:b4:9e:3f:40:90:de:49:18:4a:d2:77:
                    ce:bc:f4:43:c9:05:74:c4:f0:56:b3:b4:e8:9a:a9:
                    67:ca:50:b4:7b:e2:f2:d7:dc:84:ae:7f:0e:75:2a:
                    6b:fb:c7:dc:1f:bb:06:d7:32:c2:73:4d:cd:9e:83:
                    0d:64:78:ea:0d:cd:f7:20:50:4a:96:b1:f3:b3:87:
                    e5:4f:07:e2:6e:eb:80:66:47:b0:a6:bd:7e:b3:c6:
                    fa:16:4a:23:5e:9b:b5:59:97:7f:33:f9:f0:c8:8a:
                    4f:65:26:0b:be:5d:b3:e7:2d:14:1a:aa:3a:4f:fc:
                    ff:6a:cb:a4:06:ad:4f:32:e7:24:58:c1:98:68:bb:
                    55:05:65:de:4c:3d:57:8f:4d:82:f6:94:ad:ea:f8:
                    c4:9f:27:8a:03:f6:86:7b:87:f1:f5:dd:1a:00:7b:
                    6d:4a:91:6e:29:37:d1:8d:48:7c:ef:72:b1:0f:dd:
                    1f:54:ab:82:15:8d:7d:6a:32:eb:32:3d:2f:58:e9:
                    28:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FA:ED:36:47:B9:8F:45:3C:CD:E1:99:83:20:28:1D:9D:54:D2:C0
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D10DBCB2475C11EEBF5FB180C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.103.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:31:8f:61:86:f1:78:7f:46:05:32:73:2d:fa:d2:e8:1f:0e:
         4b:37:5c:98:da:9a:6f:64:c8:e5:bf:08:92:25:b0:1b:1c:ce:
         d5:8a:80:0f:54:e1:d9:83:2a:45:b5:7d:98:36:38:7a:ad:a8:
         a5:2a:5e:b8:07:06:69:1f:11:da:48:31:0e:04:b7:7e:58:2f:
         32:fe:16:b6:bb:df:f1:59:4c:52:d1:b2:dd:0c:20:6a:0f:4b:
         d1:17:5c:99:b0:e0:ec:38:ff:0a:50:e3:46:ea:b6:ef:66:47:
         75:d3:9d:e5:50:f1:5e:fe:8c:2a:b6:c9:b9:b2:7d:25:de:80:
         d7:03:64:32:c8:06:c7:2f:d3:d1:4c:a9:b0:d1:18:d7:6d:ed:
         a7:6d:bb:39:89:54:1c:46:80:8e:75:5f:14:50:21:8c:47:3c:
         78:57:1f:25:bb:18:24:c6:b0:bd:e2:6a:40:86:7e:da:0f:ae:
         ca:ad:f8:8e:4f:d4:dc:91:d4:c4:0f:dd:6f:19:cc:25:58:4b:
         1c:b8:c8:b3:db:0f:fe:74:f5:59:fc:a5:3d:80:51:fd:65:2a:
         c8:0c:35:b4:fb:2f:05:a7:5d:b0:b9:9f:32:07:47:6f:c5:73:
         16:79:fc:a0:b9:cc:32:24:c4:a6:fa:97:83:a9:89:bc:7c:64:
         07:ed:2f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:45:47 2024 by rpki-client on console-fra.rpki-client.org