Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/371ADD3E9C9811EDA6AEF053C4F9AE02.roa
File:                     371ADD3E9C9811EDA6AEF053C4F9AE02.roa (raw, json)
Hash identifier:          sISmWlhb7frmntFzQwKgfTRrCjDzhLN0MV33XdrzWCk=
Subject key identifier:   B8:EE:13:30:EB:14:38:F3:DE:F0:FD:53:9E:64:D2:DB:99:2E:C0:73
Certificate issuer:       /CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195
Certificate serial:       080D
Authority key identifier: 21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/371ADD3E9C9811EDA6AEF053C4F9AE02.roa
Signing time:             Thu 08 Jun 2023 22:34:00 +0000
ROA not before:           Thu 08 Jun 2023 22:34:00 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     137385
IP address blocks:        103.151.30.0/23 maxlen: 23
                          103.151.30.0/24 maxlen: 24
                          103.151.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl
                          rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2061 (0x80d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195
        Validity
            Not Before: Jun  8 22:34:00 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64825758-d875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ee:09:6b:bc:aa:4c:8a:6e:4f:f2:c2:5f:cc:
                    cd:3f:31:17:bf:47:ba:93:97:a6:5b:13:7d:49:c9:
                    be:1c:1a:84:4d:d8:1c:25:aa:7a:b7:01:eb:73:75:
                    15:23:48:07:93:8f:29:6a:4f:f1:c3:1c:63:ef:5c:
                    0d:ca:a3:50:9d:01:15:49:47:78:53:df:36:82:22:
                    b7:cd:8c:c6:00:9d:c0:b5:51:20:58:13:40:60:99:
                    24:72:e2:b0:64:83:8f:ac:8b:64:97:bf:4b:1c:73:
                    11:59:5f:5f:18:b9:06:2a:8c:83:14:4f:9b:35:d0:
                    a4:b5:b4:42:d2:c7:0b:9b:53:76:76:df:89:71:b5:
                    51:7e:f1:49:7d:22:36:10:b5:b6:5f:bd:d7:7a:58:
                    12:ae:81:b1:1d:2c:6b:e8:bb:a8:49:3b:c0:45:36:
                    18:71:c6:08:48:c1:8c:6c:ce:05:b2:75:66:b8:3a:
                    be:7a:17:50:1d:97:9b:43:75:b6:c0:ca:fb:bd:d4:
                    77:1e:d8:65:75:07:18:d8:9c:06:43:a9:bb:98:ea:
                    ca:9b:2d:9b:96:60:e6:4a:1c:bc:a6:4a:d7:bb:ff:
                    b0:a4:ae:c4:c2:0d:33:64:c3:98:ac:1b:6b:07:ef:
                    1e:d1:8c:b1:ca:c7:39:e0:7d:c3:c3:d5:25:a2:09:
                    23:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EE:13:30:EB:14:38:F3:DE:F0:FD:53:9E:64:D2:DB:99:2E:C0:73
            X509v3 Authority Key Identifier:
                keyid:21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/371ADD3E9C9811EDA6AEF053C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:dd:84:31:b9:56:1c:1f:06:fc:ae:91:e9:ef:28:eb:30:7e:
         f8:75:be:f1:a3:f1:dd:91:60:ea:a5:f1:02:49:bd:b3:c1:84:
         55:b9:49:7b:36:a3:ea:3d:cf:ce:d9:01:2a:83:3b:b8:6d:3a:
         08:e8:d8:0c:7d:50:e0:ae:bb:40:7c:c8:60:60:8e:7c:66:29:
         1e:02:5a:ec:f5:32:bb:74:9d:0a:92:33:fc:9a:d5:db:9d:ce:
         d1:94:2c:3b:c6:af:cd:52:9e:4c:f8:7b:47:8b:4a:d7:5a:b7:
         9f:c4:45:4a:0e:ed:55:39:95:64:f7:69:b0:79:e0:e1:1a:b5:
         87:ca:fc:08:28:b1:90:f4:f1:19:0d:c6:4b:78:27:b5:79:07:
         b7:40:ec:e2:31:3a:37:3e:a7:c9:f7:72:d4:70:a7:03:5d:0c:
         21:44:df:98:cf:ea:b4:ff:47:21:54:e9:62:dc:df:57:dc:b6:
         5d:ef:f9:29:b7:69:9c:21:cd:58:33:da:50:12:69:d2:cc:bf:
         5f:77:c3:f7:98:bf:e6:32:9c:61:70:c5:7d:8a:91:44:29:36:
         7c:e8:94:32:af:c3:c1:3d:91:5e:14:73:24:d1:ec:d2:63:6e:
         13:13:24:d8:d0:7d:6a:4e:b9:fd:31:1b:b1:51:8d:80:1b:73:
         3b:d4:e1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:23:38 2024 by rpki-client on console-fra.rpki-client.org