Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/99A9DD187D2811EDB440254EC4F9AE02.roa
File:                     99A9DD187D2811EDB440254EC4F9AE02.roa (raw, json)
Hash identifier:          wTMFCzsM4vCSJV6PjP3FOm6ZO7W2h7xmmGhUzYHfvqI=
Subject key identifier:   39:1C:2B:22:64:83:16:AD:CA:18:39:DC:C9:91:06:9E:12:F1:41:75
Certificate issuer:       /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7
Certificate serial:       04BC
Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/99A9DD187D2811EDB440254EC4F9AE02.roa
Signing time:             Mon 30 Oct 2023 14:36:10 +0000
ROA not before:           Mon 30 Oct 2023 14:36:10 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     142565
IP address blocks:        14.128.8.0/24 maxlen: 24
                          103.230.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl
                          rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1212 (0x4bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7
        Validity
            Not Before: Oct 30 14:36:10 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=653fbf5a-0a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:04:3e:d6:16:0c:81:6f:00:d9:90:47:67:d7:
                    56:e8:c4:60:ef:f4:51:f2:e2:90:a2:6d:3c:59:41:
                    0c:52:78:dd:04:0e:0e:87:6c:d6:88:c6:43:89:6d:
                    a5:62:4c:7d:aa:96:d8:d2:58:86:36:53:24:0c:83:
                    1b:d1:33:b1:d9:a8:ad:6d:50:82:e1:35:f9:a8:f4:
                    d4:55:ea:50:ee:a4:04:d0:72:5e:c5:c2:6c:c2:04:
                    91:dd:eb:96:d0:1d:39:aa:a4:e5:42:28:47:f3:29:
                    4d:85:64:89:27:b0:10:f9:06:c9:6d:4b:b2:6e:15:
                    94:fc:eb:60:a7:c4:12:8a:7b:37:52:a9:a2:77:5c:
                    72:64:ba:d2:da:fa:b8:c2:be:05:6c:ca:93:d3:e9:
                    b1:fe:a5:71:1b:99:3c:04:c8:54:b3:be:aa:40:08:
                    de:31:db:9d:53:5f:e4:9c:18:74:2b:bf:53:4f:8f:
                    af:b3:89:4e:e9:47:97:c8:81:d7:83:02:6d:2e:35:
                    7f:c7:9a:e4:13:03:4a:87:af:7a:13:cb:ec:ed:b5:
                    72:09:36:67:81:b7:0c:da:23:d7:3e:e2:15:1b:06:
                    59:4c:2f:d4:c0:83:89:33:99:db:b7:be:b2:2d:c6:
                    cf:93:26:bb:2a:fc:99:a8:ef:bc:be:a5:00:e2:af:
                    70:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1C:2B:22:64:83:16:AD:CA:18:39:DC:C9:91:06:9E:12:F1:41:75
            X509v3 Authority Key Identifier:
                keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/99A9DD187D2811EDB440254EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.128.8.0/24
                  103.230.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:e1:66:2c:13:6b:77:45:59:91:46:5d:a7:11:62:71:d3:dd:
         33:04:c6:b7:19:38:d0:d2:49:25:3b:48:35:2d:8a:3f:d6:f4:
         98:47:cb:96:2d:4c:f8:01:01:b7:6d:fb:3f:32:c9:39:b5:28:
         cc:d4:a6:62:5d:f4:30:fc:4c:d2:0c:e2:c8:f4:e0:81:d7:67:
         f5:49:02:6d:d2:b5:92:ac:02:82:fb:51:cc:6f:41:68:68:61:
         89:42:ad:9e:30:20:d6:e0:b2:d5:ea:22:6b:e5:ce:1b:98:38:
         30:41:dc:a4:80:ce:bd:95:43:80:3f:78:74:51:e7:51:16:85:
         b4:8f:1f:9f:7c:10:bc:f6:33:ab:6d:07:8c:8e:68:31:6e:4c:
         4a:1a:eb:91:8f:c7:90:65:34:02:95:b8:93:1b:ca:08:4d:75:
         b7:c9:fc:54:46:60:69:2c:37:fd:41:1c:8f:80:d4:61:d9:95:
         01:f5:dd:20:62:59:43:c9:8c:46:86:a8:6e:b6:36:53:61:73:
         a8:04:0b:fd:93:32:d7:6f:f3:14:66:55:ec:cc:30:2a:48:ec:
         55:7e:cf:03:52:b5:e2:01:78:15:0e:40:cc:25:bc:02:12:72:
         aa:64:cc:81:25:4a:e9:4d:05:77:f5:54:f5:cf:19:2d:c0:3b:
         e6:b3:0a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:01:44 2024 by rpki-client on console-ams.rpki-client.org