Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/4FED5C22A1C311EC960A4D2BC4F9AE02.roa
File:                     4FED5C22A1C311EC960A4D2BC4F9AE02.roa (raw, json)
Hash identifier:          plPjyHrKXGdUsptouUaMNiyEhCokiA+2tsLjpY32BvU=
Subject key identifier:   24:99:F7:F1:77:C8:AA:65:9B:B3:41:5E:5E:A5:53:74:68:FC:C0:E4
Certificate issuer:       /CN=A91AE9FF/serialNumber=4DE151B0C8A2184125C658E32731CDA1AA234700
Certificate serial:       0237
Authority key identifier: 4D:E1:51:B0:C8:A2:18:41:25:C6:58:E3:27:31:CD:A1:AA:23:47:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/4FED5C22A1C311EC960A4D2BC4F9AE02.roa
Signing time:             Wed 03 May 2023 05:26:12 +0000
ROA not before:           Wed 03 May 2023 05:26:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        103.181.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.crl
                          rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Apr 2024 03:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE9FF/serialNumber=4DE151B0C8A2184125C658E32731CDA1AA234700
        Validity
            Not Before: May  3 05:26:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6451f074-13f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:90:df:eb:cc:c7:a0:7a:60:e3:b6:43:d0:05:
                    94:dd:0f:77:fe:42:ec:c9:c2:f6:17:f8:aa:32:d3:
                    94:30:56:a2:c9:3b:9c:93:8f:99:7b:35:c0:eb:03:
                    7c:88:0f:2e:06:f2:d8:b7:3d:a9:8a:46:f1:7b:4b:
                    c8:fc:98:c7:44:e7:d8:6c:83:4d:c8:f0:78:9a:47:
                    5e:d2:09:ec:68:c4:2a:48:90:5f:11:b7:c5:ad:49:
                    97:0a:9b:22:f5:f5:53:73:8e:15:da:7e:e0:84:8e:
                    84:62:ce:68:a5:b5:b7:02:24:94:72:48:27:8a:85:
                    20:17:ec:0d:d8:4e:fc:fc:93:4d:c1:44:cc:2d:6b:
                    58:6f:ee:02:bb:79:99:07:69:41:3d:da:b1:ba:12:
                    31:75:39:3f:df:5d:ec:1b:ad:a0:3f:09:0e:ec:06:
                    f6:c3:b9:4f:6b:4a:d5:b4:19:20:cb:12:0f:1a:83:
                    b3:af:01:ee:2b:e3:19:6a:d0:d6:d9:97:fc:00:18:
                    dd:2c:a1:f7:1a:61:30:3d:a7:49:20:5c:a8:93:f7:
                    7e:90:3b:2e:d9:df:72:12:d9:8f:ef:17:4d:e9:ea:
                    62:88:62:b9:76:ad:e9:80:42:b4:6c:80:19:b9:09:
                    27:65:08:66:c3:6d:29:ff:b5:d3:48:bf:27:49:11:
                    f8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:99:F7:F1:77:C8:AA:65:9B:B3:41:5E:5E:A5:53:74:68:FC:C0:E4
            X509v3 Authority Key Identifier:
                keyid:4D:E1:51:B0:C8:A2:18:41:25:C6:58:E3:27:31:CD:A1:AA:23:47:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/4FED5C22A1C311EC960A4D2BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:28:7d:23:77:84:62:60:ab:a9:89:dc:7d:9a:20:be:e8:f5:
         65:d6:30:08:0f:81:eb:36:90:48:6d:33:71:26:97:00:d9:3c:
         e7:f0:8b:2e:e9:bb:ea:25:0f:8c:3a:07:ba:97:89:1d:b5:c4:
         54:25:7f:3f:53:6f:21:13:d6:27:4c:e5:34:1e:4d:8c:be:d4:
         05:51:59:46:f7:e9:d7:06:59:1b:b2:ab:b4:31:88:49:f8:4c:
         f8:94:8a:2d:c1:bb:43:df:d3:aa:3f:7e:97:67:e1:3f:74:28:
         86:e3:b7:ca:6c:2a:c6:71:ec:46:68:88:57:be:7d:84:4f:f4:
         6e:23:dc:32:63:3f:2f:9a:cc:23:3d:82:ef:50:1b:2a:f1:e8:
         46:b2:e0:31:e5:9b:50:6f:fd:69:19:c8:7b:bd:1b:55:b9:81:
         24:cd:d6:d8:35:33:52:07:32:48:dc:93:df:d5:b8:4a:a3:75:
         cc:f8:fb:04:30:53:ce:c1:83:3d:ee:1d:ac:dd:ac:9e:10:c1:
         7f:28:c1:d8:49:88:b2:2a:a4:a7:39:72:8d:bb:7e:4f:c9:24:
         4d:04:2d:a7:6c:c7:e0:62:bc:6c:b1:4a:f5:41:2f:77:b0:1d:
         a6:42:7d:65:25:5b:42:2f:e9:f0:fb:80:1c:b2:8e:fe:6b:3d:
         a0:3e:af:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 04:02:45 2024 by rpki-client on console-ams.rpki-client.org