Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/C7EAFB5AB62011EC9060CD0FC4F9AE02.roa
File:                     C7EAFB5AB62011EC9060CD0FC4F9AE02.roa (raw, json)
Hash identifier:          D+ZlHwdaikSqimshlMtOdjKO4cUt9Td5TIsVlTRcXrE=
Subject key identifier:   50:F0:04:72:30:2A:AF:C3:4C:21:86:90:67:7A:69:30:DE:69:AF:6C
Certificate issuer:       /CN=A91A09DE/serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
Certificate serial:       02DE
Authority key identifier: 18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/C7EAFB5AB62011EC9060CD0FC4F9AE02.roa
Signing time:             Sat 01 Jul 2023 01:51:27 +0000
ROA not before:           Sat 01 Jul 2023 01:51:27 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     131316
IP address blocks:        103.50.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl
                          rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 02:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 734 (0x2de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A09DE/serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
        Validity
            Not Before: Jul  1 01:51:27 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=649f869f-491e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a1:94:41:27:f1:9f:d7:72:ed:73:ca:b0:26:
                    9f:db:dd:71:fa:d9:ec:06:a2:f5:d8:10:0d:65:6d:
                    de:ad:16:3b:71:66:07:70:f8:da:0c:1d:03:85:47:
                    63:4e:b4:3b:a7:4e:93:3d:f4:4c:a2:63:ef:bd:12:
                    ae:77:55:18:47:38:45:e2:e5:44:bd:88:d1:95:76:
                    84:66:49:15:0f:40:e6:3f:da:03:dd:74:6b:0f:2d:
                    7e:74:2c:13:cb:d3:e2:c4:0c:ce:7a:3a:84:bd:85:
                    66:8e:20:8c:7e:95:01:2b:f8:8a:79:9f:61:da:9d:
                    e9:82:fc:e5:4e:86:c4:8f:68:5c:a3:f9:91:fe:4e:
                    ff:41:2c:64:ff:d1:24:26:d0:9f:5c:c6:22:bf:ff:
                    f7:fa:66:5c:91:8f:3b:18:df:10:d7:3b:f0:68:0f:
                    91:ee:9c:aa:df:8a:0a:4d:98:44:9b:13:a9:f1:d7:
                    6d:f3:63:74:c2:47:59:c9:07:e4:6b:d6:10:f4:0f:
                    c7:76:2a:7b:5a:4d:c8:e3:a4:2e:e2:38:41:f8:2d:
                    be:57:b8:8c:d7:cf:a5:22:a3:c4:c7:52:2c:11:25:
                    24:5a:68:cc:2b:70:8e:fa:f3:97:c5:8f:1c:41:36:
                    1c:ce:3c:98:3c:0a:69:8e:48:ab:a3:68:32:eb:b3:
                    65:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F0:04:72:30:2A:AF:C3:4C:21:86:90:67:7A:69:30:DE:69:AF:6C
            X509v3 Authority Key Identifier:
                keyid:18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/C7EAFB5AB62011EC9060CD0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:3f:c2:b4:a5:63:c4:b1:63:64:54:f6:cb:93:5a:35:1c:33:
         e6:fc:bc:64:33:cf:9a:8b:48:f6:d4:f7:4f:d0:e1:fd:33:24:
         9e:3c:bb:31:7a:69:d2:39:c3:59:3b:29:eb:72:7c:7f:16:0e:
         a7:26:cc:2b:e0:ed:ee:90:88:fe:62:92:40:52:4b:da:1c:6d:
         50:2a:c5:cf:05:c1:e3:05:17:91:66:42:49:a1:01:16:b0:e0:
         07:d7:cb:fd:2e:ed:e0:a7:ce:61:5c:fa:36:a3:09:0f:63:7d:
         a4:e3:46:22:84:27:5b:df:9d:b6:f5:f8:af:33:ea:44:3e:8e:
         d7:1c:b7:ea:fc:8d:74:9c:3f:6b:5c:9b:61:0a:98:fb:e0:f0:
         25:08:bf:4a:b6:26:5e:99:8d:83:ce:af:19:c6:72:c9:57:74:
         90:bd:80:0c:e1:04:f6:ae:fc:a4:0e:59:a2:63:a2:d7:2c:b5:
         f9:57:16:48:f3:e2:cf:f2:31:ef:6e:b8:28:23:b2:40:82:91:
         87:70:96:e7:f9:f4:4e:0e:b1:08:f3:8c:3d:33:e5:51:fa:f5:
         95:d8:7d:72:c0:4d:49:f9:2d:4b:44:a2:65:33:18:f0:59:bb:
         58:80:39:37:84:66:0d:bd:9c:60:d2:6a:e7:3d:1d:b5:88:21:
         eb:59:f6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 03:49:58 2024 by rpki-client on console-fra.rpki-client.org