Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/84CFF0D6D2F311EEAFCF3273C4F9AE02.roa
File:                     84CFF0D6D2F311EEAFCF3273C4F9AE02.roa (raw, json)
Hash identifier:          nV4OBvwRrJdylzdOW41rd2aqo+qtt32bz867vmceVQE=
Subject key identifier:   08:41:55:3D:9C:B8:D0:64:8B:22:D0:A7:43:B9:73:1D:EA:DE:FE:7A
Certificate issuer:       /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
Certificate serial:       0B42
Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/84CFF0D6D2F311EEAFCF3273C4F9AE02.roa
Signing time:             Sat 24 Feb 2024 09:03:38 +0000
ROA not before:           Sat 24 Feb 2024 09:03:38 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     150748
IP address blocks:        103.100.234.0/24 maxlen: 24
                          103.100.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl
                          rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Jun 2024 19:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2882 (0xb42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
        Validity
            Not Before: Feb 24 09:03:38 2024 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65d9b0e9-62b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:98:64:c6:3d:89:14:d6:36:3f:ea:73:3b:21:
                    ac:4f:0a:33:1e:56:46:01:15:01:a5:c7:ea:1f:c5:
                    55:25:69:3b:03:98:9b:5d:36:53:63:3e:cd:54:a5:
                    3c:0c:79:0d:e6:13:57:5b:89:5f:f2:f1:9f:e2:3d:
                    bc:02:a1:c8:10:cc:97:b7:e2:fc:92:37:44:fc:e7:
                    b8:19:b3:10:e5:62:22:fe:82:3c:9c:0c:9a:6f:da:
                    ec:b0:f6:2a:3d:70:13:89:1c:5b:df:d0:a2:cf:21:
                    62:ee:48:34:ef:b9:10:06:8d:83:53:49:d8:ce:b4:
                    2d:3f:01:b6:65:8f:db:66:b9:6f:23:9a:f2:56:23:
                    e9:04:b5:35:d0:c9:7b:a8:88:3d:ba:f2:d0:a5:0a:
                    77:a6:a0:17:f6:7b:d3:2c:a3:ec:a6:b4:2d:8d:5c:
                    42:1b:3c:17:a0:62:8a:3e:13:2a:48:1f:97:27:03:
                    26:25:c4:f5:ae:c1:b4:53:dc:16:1d:14:81:8b:4b:
                    13:e0:da:c3:96:dc:76:a7:3b:ae:a7:52:89:95:e2:
                    3f:b0:0b:a9:f2:d5:61:df:05:25:05:03:64:43:c1:
                    33:78:6d:cb:3a:d5:76:2a:30:f2:76:cd:1a:03:2f:
                    6b:49:c7:07:40:ed:41:d5:7f:42:99:67:7f:ae:a0:
                    a3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:41:55:3D:9C:B8:D0:64:8B:22:D0:A7:43:B9:73:1D:EA:DE:FE:7A
            X509v3 Authority Key Identifier:
                keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/84CFF0D6D2F311EEAFCF3273C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:b7:78:66:4a:ad:9c:97:85:01:a3:fe:90:2c:10:61:8c:f7:
         fe:b9:76:f9:db:9a:f4:7c:99:f1:7d:d8:75:05:4e:45:88:0a:
         ed:aa:27:29:46:a4:96:a3:1d:ec:b9:a0:87:d2:a3:af:ed:e6:
         58:81:99:90:63:e3:d6:e6:67:e5:bd:94:7b:40:92:c4:b3:0f:
         8b:5c:19:52:ec:fc:e8:b4:2e:ed:c2:95:62:b5:07:9e:f8:a1:
         3c:91:16:58:15:b8:fb:84:cf:6d:8d:ed:41:25:92:69:4d:40:
         25:80:3e:ee:fc:79:d5:79:f3:1a:90:64:f0:88:23:83:b1:f4:
         44:a8:05:e4:4b:bf:08:53:a3:67:fa:af:ff:af:4e:f1:eb:90:
         5a:ac:14:f7:a0:81:63:d3:89:1e:a0:af:cf:62:2e:15:4c:25:
         2d:34:21:d9:56:ab:d6:af:71:6b:5b:97:26:2c:14:55:b6:c7:
         c3:bb:85:83:83:27:6a:a7:b5:83:95:4f:9c:3e:c0:37:7b:cf:
         50:a9:ae:96:10:88:33:b8:2a:7d:0d:7a:5b:87:3c:6b:8e:9f:
         ab:e0:e3:39:ea:87:6d:39:66:20:85:9e:c2:35:f0:63:bd:c8:
         66:06:19:ef:35:fe:58:16:7a:d2:26:a0:6a:e9:21:9a:6f:4c:
         74:64:a0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 20:59:18 2024 by rpki-client on console-fra.rpki-client.org