Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/294325DC699711EEB317603DC4F9AE02.roa
File:                     294325DC699711EEB317603DC4F9AE02.roa (raw, json)
Hash identifier:          V9haeggPzUIY6sFu0B8QRKjXMw3aLSoBwqJcKUV/6sw=
Subject key identifier:   E5:E7:E2:E0:6B:EC:0E:F0:68:C9:62:A9:8E:BC:6B:BA:24:BD:E4:5E
Certificate issuer:       /CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
Certificate serial:       02
Authority key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/294325DC699711EEB317603DC4F9AE02.roa
Signing time:             Fri 13 Oct 2023 07:07:25 +0000
ROA not before:           Fri 13 Oct 2023 07:07:25 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     151813
IP address blocks:        103.131.134.0/24 maxlen: 24
                          103.131.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl
                          rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:44:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
        Validity
            Not Before: Oct 13 07:07:25 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6528ecad-d205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:07:5d:c8:fe:d4:4e:17:b8:30:e1:42:ec:3d:
                    95:ad:56:bd:bc:74:13:c4:94:f9:6d:56:be:31:2b:
                    11:04:3b:7f:3b:28:f7:84:ac:9b:33:e0:6a:3a:0c:
                    87:02:c0:41:8a:5d:6f:13:b6:31:64:0a:75:ea:ae:
                    75:6c:48:ab:bb:45:92:d8:fb:1b:b3:3a:54:f1:5c:
                    63:bc:be:69:1b:24:5b:4e:5c:f4:83:53:54:62:33:
                    d7:a8:1f:9d:7c:31:70:54:d0:29:4b:fa:04:1c:e1:
                    55:70:44:0b:e8:c2:a7:83:01:ef:cc:d3:36:d9:5b:
                    b9:19:60:8e:24:03:13:82:a1:22:06:26:95:70:76:
                    ce:4f:16:e8:31:cb:af:6a:3e:13:4d:6d:55:68:a2:
                    6b:f1:09:0f:af:7c:43:f8:87:e2:51:1d:19:df:48:
                    1c:4a:b8:d1:68:f0:bc:12:2c:fd:70:0e:d8:3f:c5:
                    72:aa:82:54:cb:7b:3b:db:33:6d:ea:33:2b:40:84:
                    5e:23:0d:11:c9:d8:65:4c:21:71:82:49:01:45:c9:
                    43:b8:f7:1e:8f:a2:0f:11:66:7e:12:26:05:20:c6:
                    16:49:ed:e4:96:af:fd:33:30:cb:94:cb:f7:dc:a4:
                    c8:d0:d9:3c:f1:0a:3d:46:a5:fd:e5:57:5f:66:68:
                    cd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E7:E2:E0:6B:EC:0E:F0:68:C9:62:A9:8E:BC:6B:BA:24:BD:E4:5E
            X509v3 Authority Key Identifier:
                keyid:41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/294325DC699711EEB317603DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:bd:d4:6a:d8:b3:28:ec:e4:7a:44:a0:23:3a:20:aa:35:0c:
         ed:7e:a7:d5:fe:50:ea:c2:63:36:46:2c:09:17:2c:5b:17:9e:
         61:46:82:26:4d:9a:97:16:3d:a9:a8:6c:57:36:fc:95:bf:3e:
         ba:d5:6b:5b:4a:eb:d3:5d:e3:b7:a8:02:0a:00:e9:7d:05:a4:
         25:33:d9:41:15:23:66:c2:03:42:ae:87:b1:4a:8e:04:e0:db:
         0d:fb:50:03:29:bb:f4:e6:87:63:1f:23:c1:44:ed:1a:77:91:
         98:c7:eb:e1:85:2d:99:0d:77:18:45:05:04:88:2e:3e:9a:0d:
         66:f8:da:3e:a4:d1:03:5e:94:22:98:84:1b:9f:27:7e:2f:df:
         f2:18:b4:ed:af:ce:ab:da:af:75:d4:d0:e3:e2:af:f0:69:70:
         ff:30:5d:4d:74:92:ae:7a:ce:5e:3a:be:39:d0:46:40:5a:fa:
         f9:1e:f2:ea:0a:16:6a:b7:b7:43:e6:d8:64:1e:4a:f3:cf:fd:
         02:aa:42:ff:5b:31:23:fe:2e:09:43:83:a7:e3:7d:77:89:0a:
         bb:c5:92:a0:38:5a:42:39:3c:15:c6:48:93:f2:9e:1b:fd:b0:
         d8:68:70:14:1f:e2:60:35:d4:e0:97:21:db:8a:a2:c3:3e:18:
         dc:57:03:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:29 2024 by rpki-client on console-ams.rpki-client.org