Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/A7153AC6E1AE11EC87A73482C4F9AE02.roa
File:                     A7153AC6E1AE11EC87A73482C4F9AE02.roa (raw, json)
Hash identifier:          CULEAxRk/cOOT8TNNDoPeowBShxc+lwOcJsw6aNB1dY=
Subject key identifier:   14:77:D3:E7:21:6D:56:8D:AE:88:1F:E0:F7:BA:E7:8B:85:A0:69:99
Certificate issuer:       /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial:       041B
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/A7153AC6E1AE11EC87A73482C4F9AE02.roa
Signing time:             Sun 25 Jun 2023 01:58:05 +0000
ROA not before:           Sun 25 Jun 2023 01:58:05 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     55933
IP address blocks:        103.214.172.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
                          rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 02:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1051 (0x41b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
        Validity
            Not Before: Jun 25 01:58:05 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64979f2d-f143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b0:1e:01:50:13:c8:15:95:ed:12:2e:21:23:
                    84:02:1f:6f:40:42:c9:84:b6:38:8c:5f:14:4b:32:
                    50:c9:83:32:7d:de:c3:f9:13:40:6c:55:99:54:29:
                    30:8b:4b:98:bb:cb:cb:1e:ab:b6:e6:e6:f5:65:5f:
                    bd:09:ba:0a:26:e5:b3:6e:2e:c1:db:1a:41:82:0a:
                    3e:0a:e8:9e:27:8c:ed:be:28:32:09:89:12:6b:68:
                    82:8e:40:71:e2:f0:1b:4a:ac:e8:f1:85:37:64:13:
                    5b:5c:ef:3b:34:ab:5e:de:b2:b5:fd:f9:89:ed:a7:
                    c3:f3:d7:93:79:c8:8c:24:32:ae:51:58:47:b6:8c:
                    70:ee:ff:57:de:bb:56:0f:c8:f3:e0:51:c5:69:e6:
                    78:18:b9:60:95:8e:fd:cd:09:c1:29:64:1f:0c:80:
                    8a:26:e2:5d:3f:7b:84:9e:02:49:1c:61:7f:d2:d7:
                    74:4f:7e:c1:ae:8e:17:8e:29:34:56:0e:1a:c8:38:
                    55:b2:01:70:95:fc:5b:74:1c:dc:a4:69:1c:21:4a:
                    75:b9:fb:80:6f:ba:a0:21:9a:86:f5:d1:39:45:a1:
                    fc:a3:3f:8d:05:3f:fc:ca:93:e0:3b:33:b6:d5:9a:
                    7f:31:67:00:0d:b4:e1:8b:b1:e2:15:49:52:17:7c:
                    07:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:77:D3:E7:21:6D:56:8D:AE:88:1F:E0:F7:BA:E7:8B:85:A0:69:99
            X509v3 Authority Key Identifier:
                keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/A7153AC6E1AE11EC87A73482C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:35:11:8a:f3:af:90:27:5f:aa:8d:ed:64:82:29:ff:a4:8c:
         04:f5:59:84:6b:2f:bd:2a:10:89:8b:cf:65:cb:fd:dc:40:dc:
         fa:f0:c4:bb:98:ba:f4:98:db:d8:ce:76:e6:c9:2e:68:ac:a8:
         dd:59:c4:4c:9c:36:34:8c:1d:ac:c3:50:88:8e:14:b9:6a:a7:
         83:0d:6c:07:36:87:d3:54:0a:32:77:2b:de:ca:73:fb:53:50:
         c5:02:a6:58:15:91:05:36:ac:44:8e:cf:ed:0f:4c:20:f3:31:
         9a:f8:27:8c:6d:7b:4b:63:3b:2d:14:fc:09:06:ba:04:bc:69:
         1b:26:19:ca:ff:be:21:34:31:e2:1b:a0:df:8b:9d:83:b9:a3:
         08:60:6d:89:7f:61:ae:45:30:e6:62:20:46:af:6f:e6:da:6c:
         c9:20:79:80:ab:98:f9:28:00:ec:6a:87:59:e4:6c:fa:05:eb:
         45:5b:9c:8f:55:eb:6c:cf:e4:ec:8d:36:a5:5c:a8:f0:c4:6b:
         38:b0:8f:cb:20:b6:b4:8e:8d:07:8d:cd:16:88:44:e1:37:fc:
         a1:eb:de:bb:b2:16:7e:d5:2a:b3:15:6d:06:5b:cd:3f:5d:c8:
         aa:90:6a:8a:e5:f2:bc:c2:f4:28:2f:be:34:ca:be:85:33:93:
         9a:28:7a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:55:17 2024 by rpki-client on console-fra.rpki-client.org