Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/E9874B2A16D011EF90793868C4F9AE02.roa
File:                     E9874B2A16D011EF90793868C4F9AE02.roa (raw, json)
Hash identifier:          ViBEiXsjPtwDWgjWAoRfyKQaAhEvEFxJcWrERgHGyz4=
Subject key identifier:   DB:B3:54:E8:9E:9F:59:36:7D:D6:2F:01:F4:20:1E:2E:20:BE:5A:A7
Certificate issuer:       /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial:       C0
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/E9874B2A16D011EF90793868C4F9AE02.roa
Signing time:             Wed 03 Jul 2024 06:07:35 +0000
ROA not before:           Wed 03 Jul 2024 06:07:35 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     400619
IP address blocks:        103.112.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Sep 2024 03:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
        Validity
            Not Before: Jul  3 06:07:35 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6684eaa7-db6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ff:e4:5d:e5:89:e9:1d:0c:b5:9d:f5:87:19:
                    20:2e:6c:b9:7d:d1:ba:7d:f7:42:cc:b5:20:78:97:
                    cd:48:18:18:0a:3f:7c:35:c9:69:d7:4d:b8:dd:2b:
                    a2:24:12:26:91:d0:1b:4b:85:ed:d5:3c:4b:e2:30:
                    36:e3:e6:17:01:8f:b3:7d:b1:c0:30:60:9e:2a:87:
                    f1:4c:86:95:27:ba:02:64:fc:ae:2a:e0:e8:a7:d8:
                    6d:13:38:ab:99:e9:0d:87:e3:db:6d:ab:7f:b9:7a:
                    89:5b:cd:5d:24:89:52:bb:38:bf:b2:97:04:3e:88:
                    15:74:55:99:04:70:a7:06:e2:06:eb:e7:9d:0e:55:
                    16:34:e2:ab:85:fc:3c:ea:a7:1d:c7:b3:0d:6c:3f:
                    49:dc:e1:40:45:a3:c7:66:f5:b9:d1:df:a0:9c:30:
                    1b:2c:b3:67:53:04:83:11:8c:d9:27:45:55:77:f5:
                    bb:d9:93:8d:86:b6:ea:78:8e:51:9c:92:aa:90:bf:
                    1e:1c:96:86:7d:e4:13:35:e3:98:bb:e6:8e:e4:98:
                    80:7e:f7:23:1f:ee:12:0e:c6:73:95:25:49:c1:be:
                    03:b6:29:21:db:11:11:ee:e3:42:fb:be:c8:c6:de:
                    9d:38:4d:d2:0c:08:76:8b:1d:cb:bc:3d:8c:b5:32:
                    a4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B3:54:E8:9E:9F:59:36:7D:D6:2F:01:F4:20:1E:2E:20:BE:5A:A7
            X509v3 Authority Key Identifier:
                keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/E9874B2A16D011EF90793868C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:c9:6e:b0:66:f8:19:52:05:11:66:41:04:89:5a:2d:43:35:
         e9:57:b9:b4:93:2f:a0:85:aa:a4:80:26:b5:e4:a2:8a:d7:c9:
         ec:b4:ee:d8:36:60:3f:43:19:c5:c9:78:57:8a:0f:cb:3d:c9:
         ef:80:66:b3:c1:3c:74:4f:3a:94:a5:03:18:1a:10:e5:f6:23:
         d5:6b:a1:82:b6:92:a9:e8:48:c7:d4:c6:79:83:0a:47:e5:cc:
         59:d3:02:06:7f:bc:8a:95:d1:41:48:81:93:93:05:c6:9f:a7:
         c7:09:e8:c4:a5:5e:2e:65:df:79:5e:07:3f:36:72:98:13:18:
         c8:54:d2:7f:60:ad:72:2e:0d:1e:f7:94:16:a3:8e:2e:53:ff:
         7e:40:a2:c4:24:9e:e4:b7:80:bd:d9:99:d7:89:b7:14:fb:ce:
         df:53:6c:5c:8d:34:4e:21:78:c1:71:d4:55:f3:95:71:84:b2:
         73:cd:42:1f:ea:17:c1:26:35:3f:7f:9c:8d:16:80:e0:b5:e9:
         9b:01:95:2d:fc:c2:b5:f4:ca:00:a3:d3:57:79:cd:8d:62:fc:
         f9:97:a0:52:81:19:91:9a:dc:ea:18:ff:f6:0b:fe:62:94:ab:
         0a:9d:0b:bc:16:6a:79:34:8f:10:3b:e0:2f:31:80:99:ae:67:
         5c:2b:91:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 04:47:07 2024 by rpki-client on console-fra.rpki-client.org