Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/E7AA9622DAFF11ECA67DA10BC4F9AE02.roa
File:                     E7AA9622DAFF11ECA67DA10BC4F9AE02.roa (raw, json)
Hash identifier:          dqRmi+7f3BCSJyYwVKePPtxxrf7fTU7A/wo6R2esOQc=
Subject key identifier:   2B:68:BA:B5:45:C5:5D:3A:32:41:7F:8C:AF:47:37:2D:FF:E7:A8:EB
Certificate issuer:       /CN=A91AE9FF/serialNumber=4DE151B0C8A2184125C658E32731CDA1AA234700
Certificate serial:       02F5
Authority key identifier: 4D:E1:51:B0:C8:A2:18:41:25:C6:58:E3:27:31:CD:A1:AA:23:47:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/E7AA9622DAFF11ECA67DA10BC4F9AE02.roa
Signing time:             Wed 01 May 2024 04:06:37 +0000
ROA not before:           Wed 01 May 2024 04:06:37 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     138153
IP address blocks:        103.183.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.crl
                          rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 02:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757 (0x2f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE9FF/serialNumber=4DE151B0C8A2184125C658E32731CDA1AA234700
        Validity
            Not Before: May  1 04:06:37 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6631bfcc-d1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:98:a4:58:52:ad:c1:54:ba:af:37:5f:46:87:
                    33:06:b5:59:ff:c5:d6:c2:3b:4a:41:e3:2b:68:19:
                    d7:86:f2:00:4f:1a:6b:13:74:86:f0:8b:87:6e:ac:
                    6a:89:a6:1e:c4:b6:c6:cf:2f:2b:32:5d:49:48:80:
                    7a:0c:5f:71:04:e4:44:68:91:cd:3e:f9:db:52:52:
                    53:b7:b8:0d:49:c7:9c:6d:1b:c0:b4:67:89:49:bb:
                    4f:14:c7:96:57:2c:62:5a:fd:ec:e8:b4:26:20:47:
                    75:da:fa:07:19:06:2d:6d:36:ff:f4:6e:30:f7:85:
                    49:45:44:1c:ee:27:98:1f:d9:1b:f3:39:b0:eb:2a:
                    5a:0d:0a:34:58:7e:16:67:de:73:d6:87:a3:58:95:
                    69:d3:ee:a5:09:a4:46:29:19:dd:97:cb:f5:5c:a1:
                    2d:6e:23:33:ab:ff:34:24:2c:63:b3:f0:ba:3b:c4:
                    a4:7e:cc:25:da:f9:1a:4d:04:ff:56:af:e4:f1:18:
                    c3:05:8e:68:fd:64:14:ff:71:55:85:94:09:96:03:
                    aa:b4:64:f3:25:cf:c0:e6:8c:d2:98:44:63:72:76:
                    ae:b2:12:fa:55:2f:4c:3e:88:0a:ec:90:49:0a:2a:
                    a1:aa:a2:b2:6a:c1:99:15:30:c4:f8:6f:cf:d1:a2:
                    6f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:68:BA:B5:45:C5:5D:3A:32:41:7F:8C:AF:47:37:2D:FF:E7:A8:EB
            X509v3 Authority Key Identifier:
                keyid:4D:E1:51:B0:C8:A2:18:41:25:C6:58:E3:27:31:CD:A1:AA:23:47:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/E7AA9622DAFF11ECA67DA10BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:5c:09:c6:3b:67:8b:77:63:4b:9f:67:74:d4:7b:ee:9a:b8:
         b0:f6:a1:b2:01:be:00:6a:53:e9:48:78:ea:0d:d6:a0:8e:b1:
         10:ef:6a:2b:dc:89:16:87:df:2d:3a:bc:99:7d:3f:d1:df:e5:
         1c:d9:a1:73:e6:70:4c:d1:34:52:fe:4d:d5:29:db:0f:00:02:
         a2:0b:c7:4b:3e:df:86:d5:a4:ca:6c:80:7b:a8:ca:6b:45:fa:
         37:1a:db:9e:65:75:ac:51:a9:7a:cb:62:95:b9:20:96:29:63:
         44:1f:3b:83:72:63:70:9b:a5:0f:47:ed:b1:11:c2:da:bf:72:
         d3:0f:43:c5:6c:1b:83:3c:b9:0c:1c:48:02:0f:f6:00:de:56:
         e6:1e:a0:ce:8c:89:e1:c9:b4:9f:5b:73:b0:38:c1:17:c9:38:
         ca:83:28:57:40:25:08:5f:d5:b6:49:48:0a:85:7d:e4:ff:29:
         d9:75:60:06:7e:17:38:b2:23:c9:44:2b:3c:2f:a4:2c:48:10:
         54:8a:f8:21:7c:08:4f:82:b0:5c:d3:32:47:35:40:48:c8:58:
         ae:87:a6:bf:db:6a:30:f4:6c:b0:63:8d:d9:33:a6:20:5b:d5:
         7b:e5:3d:97:1b:bc:19:9d:77:e8:ec:31:97:0b:b2:99:78:c4:
         a1:ef:fb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:53:39 2024 by rpki-client on console-fra.rpki-client.org