Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/06D9E242335211E79AC36F87C4F9AE02.roa
File:                     06D9E242335211E79AC36F87C4F9AE02.roa (raw, json)
Hash identifier:          wicxmyDsQY1EUaRSvIw0q7r/W3oZXB3XiX+qbwHrohc=
Subject key identifier:   1D:8A:18:E4:3B:C3:20:B5:5D:92:D0:A1:12:27:C8:42:FF:AD:55:BA
Certificate issuer:       /CN=A91A279C/serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C
Certificate serial:       19EC
Authority key identifier: 0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/06D9E242335211E79AC36F87C4F9AE02.roa
Signing time:             Wed 08 May 2024 17:04:59 +0000
ROA not before:           Wed 08 May 2024 17:04:59 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     64515
IP address blocks:        103.87.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl
                          rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6636 (0x19ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A279C/serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C
        Validity
            Not Before: May  8 17:04:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=663bb0bb-3631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:92:24:a7:82:2d:4b:cc:61:1d:a5:b3:be:f8:
                    10:83:f9:ae:cc:7f:c7:01:5f:f6:c7:78:32:a7:2c:
                    e4:79:78:8b:57:54:00:66:87:5d:cf:8b:12:6a:cf:
                    59:2b:c0:08:5f:16:30:e2:7e:d8:02:8d:6f:92:45:
                    9c:23:ff:21:d3:34:fc:69:6f:7b:73:4a:9d:a2:07:
                    46:fe:8e:f2:e5:fd:b7:b6:8b:f7:ca:bb:57:db:ec:
                    0e:75:2f:c5:89:33:2f:62:a7:de:73:8e:b3:23:98:
                    ea:d9:a5:1c:e8:c3:1d:29:44:e3:81:0b:35:35:b9:
                    58:78:b3:0d:b8:6e:65:36:a1:2c:de:d4:11:f0:27:
                    c8:4c:1a:26:95:0e:be:fa:06:bc:7b:4e:77:3a:a0:
                    14:e7:c9:02:f2:fb:8e:90:01:6d:17:be:68:c8:42:
                    c1:4b:89:4a:c0:84:f3:0f:95:32:fd:47:4d:13:b3:
                    2b:89:c9:6b:46:d7:54:58:b5:2e:0a:7c:62:50:08:
                    fc:a3:e5:11:c9:f1:3e:2c:2d:62:8b:93:c5:74:7f:
                    87:a2:1b:34:4a:f9:f8:23:d9:90:10:3b:0f:1f:dd:
                    dc:d5:51:3d:a0:94:3d:f1:2c:e4:95:8a:41:e9:0b:
                    28:65:ac:3d:77:f6:8f:6d:8b:5a:30:e2:29:70:1d:
                    fb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8A:18:E4:3B:C3:20:B5:5D:92:D0:A1:12:27:C8:42:FF:AD:55:BA
            X509v3 Authority Key Identifier:
                keyid:0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/06D9E242335211E79AC36F87C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:3e:cb:4d:15:87:d2:c9:4c:75:ac:5c:2b:5f:b3:cc:3e:05:
         ec:dc:03:6e:25:1e:0e:e2:c5:41:95:ff:a1:87:7e:33:4a:e6:
         be:d1:2c:b2:75:19:6e:9c:87:f0:14:1a:eb:e3:14:67:7a:25:
         e0:94:06:18:15:cf:21:d1:44:fe:1b:69:19:4a:07:8e:6d:ee:
         44:5d:c4:69:d6:91:d1:20:cd:93:02:a8:04:68:c6:df:19:09:
         f1:68:6e:ff:33:a9:5d:6b:09:4b:32:0b:24:5a:24:53:d2:92:
         49:4d:bb:31:5f:5f:2a:8c:dc:63:c1:fd:c6:ac:67:0a:56:68:
         44:91:20:87:83:35:50:fe:97:3f:c6:06:aa:ab:2f:bd:5e:11:
         2d:8d:b0:48:92:4c:76:14:7d:63:d9:5c:3a:03:6b:5a:21:fa:
         b7:f9:b9:c8:17:7d:31:1d:a2:8f:86:1b:2b:e6:bb:8e:f0:8e:
         93:61:a6:47:a8:3c:a6:a0:08:74:35:b1:ec:43:6d:c1:bf:c8:
         dc:23:9b:3f:63:45:e8:31:5d:9e:d0:2e:dd:35:18:b2:9b:8e:
         24:13:2a:db:61:38:69:6c:83:a4:b3:13:a7:a5:af:29:5d:fa:
         39:a4:ba:f7:d9:3f:54:d4:4c:dd:f2:fc:a9:cb:b1:61:13:56:
         aa:39:49:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:37:33 2024 by rpki-client on console-fra.rpki-client.org