Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/496096EE41A311EABAADCE0AC4F9AE02.roa
File:                     496096EE41A311EABAADCE0AC4F9AE02.roa (raw, json)
Hash identifier:          qxIEJ9q4++BUQfNl/x9T14VLLuH+zqgDIVc9RNJF+8o=
Subject key identifier:   00:93:A4:29:4F:5C:6A:14:CB:23:6F:CA:37:ED:F3:14:FA:90:64:0F
Certificate issuer:       /CN=A91A3456/serialNumber=290C4010FADC476947E0093F43F7004F0D7C5C1C
Certificate serial:       09BF
Authority key identifier: 29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/496096EE41A311EABAADCE0AC4F9AE02.roa
Signing time:             Mon 14 Aug 2023 20:17:20 +0000
ROA not before:           Mon 14 Aug 2023 20:17:20 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     136808
IP address blocks:        103.97.44.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl
                          rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2495 (0x9bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3456/serialNumber=290C4010FADC476947E0093F43F7004F0D7C5C1C
        Validity
            Not Before: Aug 14 20:17:20 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64da8bd0-e088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:33:c7:e7:5e:6f:99:58:6b:6e:20:a5:4f:f6:
                    48:c8:00:7a:dd:c5:e6:3d:42:5f:6c:a3:9b:38:90:
                    56:26:8f:9a:08:ef:cb:18:d4:a1:d7:f5:87:3b:e8:
                    f6:c4:ad:a4:6b:66:b8:69:01:4b:c7:b6:5d:66:06:
                    b2:58:7a:94:c5:3c:46:1c:e9:d0:c2:d8:71:e2:d5:
                    ef:22:e1:33:0d:e9:8a:a6:e6:75:bd:af:65:66:96:
                    67:7a:67:3a:03:d6:e5:53:43:2e:25:0c:a0:bb:bd:
                    32:86:24:19:aa:ee:67:4a:ae:89:22:a2:3e:6d:65:
                    60:00:b3:41:f5:4a:57:9d:5f:0f:4a:7c:87:70:af:
                    9f:22:aa:44:2a:b8:17:61:95:e9:b3:ec:92:5b:e1:
                    3c:29:4d:f0:f7:f2:a4:57:a1:9f:8a:10:94:55:8a:
                    eb:b3:8d:75:c5:bf:e4:8c:74:fc:74:4f:4c:ab:a8:
                    4d:fa:fb:ad:f9:71:06:0d:d0:2f:f1:a1:20:32:25:
                    99:1d:58:5b:a0:0e:83:89:42:b1:89:6f:9b:b6:98:
                    18:ea:58:8e:7c:16:5c:ec:89:aa:89:ca:4f:f7:67:
                    93:e0:7c:22:ae:c6:fe:a3:01:9f:ed:f5:5a:ad:97:
                    ae:e7:7e:11:28:7b:0d:f0:d4:d8:98:c9:ef:0c:ad:
                    45:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:93:A4:29:4F:5C:6A:14:CB:23:6F:CA:37:ED:F3:14:FA:90:64:0F
            X509v3 Authority Key Identifier:
                keyid:29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/496096EE41A311EABAADCE0AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:20:10:b5:34:ed:f1:18:36:f1:9d:72:4e:08:d1:3f:ab:39:
         2f:4e:a0:ed:2e:ea:b1:0a:c9:a0:cb:ce:e3:e9:d7:ed:d7:9b:
         53:b7:ea:28:7a:8e:c7:af:8a:94:70:6c:1d:2f:87:13:9c:d2:
         fb:76:8f:9e:e2:ec:11:c5:46:17:14:6d:37:2f:03:58:8c:33:
         78:c3:a4:04:c1:a0:2a:c2:bb:15:b1:1f:05:01:ec:57:62:49:
         28:61:d9:c5:4e:59:57:c9:20:8f:09:a3:5f:bf:b8:85:91:e2:
         05:91:44:41:7d:bf:63:09:73:f8:db:5c:b9:41:8b:e8:de:db:
         dc:e1:92:a9:d3:1b:5d:cd:1d:aa:80:a5:32:c2:6f:aa:c3:78:
         72:94:f1:f3:60:3d:57:50:b2:1c:c0:5c:fa:00:66:91:6f:b6:
         a6:ac:08:32:59:c5:44:98:29:6e:76:ff:c8:c1:2e:ce:9f:2a:
         72:60:51:5a:12:a1:8d:24:5a:10:37:bf:1c:5f:db:db:b1:7b:
         c0:45:3d:aa:39:b6:6f:58:d7:fe:9c:95:ee:94:97:66:fc:6c:
         2f:c3:e6:6c:c3:7a:77:2c:df:f2:52:9e:c5:08:27:12:d5:33:
         45:b8:a6:44:d9:67:b2:1d:8c:8c:ff:a5:30:58:65:ec:04:98:
         3a:6d:b5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 21:45:29 2024 by rpki-client on console-fra.rpki-client.org