Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/4072F91E9C8211EC86AE3D68C4F9AE02.roa
File:                     4072F91E9C8211EC86AE3D68C4F9AE02.roa (raw, json)
Hash identifier:          227U+Y7IsViWC5xL5UQ7nk+j/lM05o1xqA9lAXBDVrY=
Subject key identifier:   83:EB:D4:9B:CF:7E:AE:65:27:70:6A:C3:9C:05:A9:5D:A6:1F:C9:87
Certificate issuer:       /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A
Certificate serial:       0B26
Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/4072F91E9C8211EC86AE3D68C4F9AE02.roa
Signing time:             Thu 12 Oct 2023 19:27:11 +0000
ROA not before:           Thu 12 Oct 2023 19:27:10 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     139009
IP address blocks:        103.143.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl
                          rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 19:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2854 (0xb26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A
        Validity
            Not Before: Oct 12 19:27:10 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6528488e-245b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:93:8a:27:d3:0c:36:3c:eb:0d:ef:29:7b:c0:
                    ac:98:56:52:ff:6e:51:26:85:06:4f:40:93:ff:f9:
                    d0:89:40:40:60:1d:8b:83:97:ab:b1:69:b1:f8:5e:
                    76:91:1d:eb:35:d8:3f:05:f8:5d:2b:1f:98:df:b4:
                    4a:16:c9:e2:14:50:0a:f3:a6:10:aa:a4:79:ab:4f:
                    19:75:da:8b:57:72:91:bf:7f:b0:e1:6b:f7:ed:bd:
                    54:8f:62:17:de:da:15:9d:43:7d:d7:8e:ba:4f:e1:
                    8a:69:04:1d:7c:68:81:61:4d:27:15:2c:2c:14:62:
                    7e:83:91:76:4f:4b:20:5a:22:b4:20:b7:0a:f8:f0:
                    e3:50:c2:9f:27:51:38:ce:d1:3e:31:d9:02:ab:c9:
                    7a:23:d0:82:ad:75:e0:39:8e:1c:46:c4:99:0e:ed:
                    59:76:28:ac:19:43:a1:6f:d8:92:60:ca:54:f1:52:
                    0c:c7:d2:8e:68:44:9a:cc:03:37:1f:b7:8f:f6:ea:
                    00:94:d4:c0:5d:4e:64:c1:17:64:5b:45:78:81:cd:
                    39:ce:88:4d:54:c6:7d:67:de:9a:9a:e6:e1:91:68:
                    06:b1:75:11:5a:b6:bd:14:10:b4:c7:16:eb:78:3b:
                    50:c4:bc:8b:50:d6:32:e7:b1:ad:cf:88:35:ba:0a:
                    3e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EB:D4:9B:CF:7E:AE:65:27:70:6A:C3:9C:05:A9:5D:A6:1F:C9:87
            X509v3 Authority Key Identifier:
                keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/4072F91E9C8211EC86AE3D68C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:46:1a:2a:c1:52:f6:7e:ac:b8:6b:b8:dc:2a:8f:81:72:2b:
         ac:7e:e9:3a:12:f6:b6:39:55:8f:88:f6:d2:df:7b:23:65:19:
         01:bc:5f:6f:0d:f0:c3:2d:f8:b0:62:59:0a:8a:d5:7a:12:13:
         c6:12:bb:f1:1d:d0:e3:a6:48:ba:b3:57:73:7a:5a:82:2a:90:
         db:68:f5:04:b2:7b:4d:3f:3d:78:c5:ba:d1:87:1d:b4:79:44:
         e4:91:c7:21:db:36:9d:b1:87:b0:73:52:34:c1:c3:60:c4:b9:
         7a:ea:9c:73:b4:9b:59:10:e0:0d:f0:d0:ba:3e:89:b6:47:78:
         80:fd:4b:fa:7e:d8:92:29:cc:91:f4:3a:12:3d:11:77:c2:a0:
         61:19:14:21:22:e9:a5:21:d2:46:d9:14:30:50:0c:46:c2:f6:
         f2:5a:52:f7:e7:ad:26:66:14:99:a2:49:6d:cc:88:75:73:e5:
         e1:e7:f9:d8:bb:13:70:ea:eb:93:45:d2:ff:03:c9:54:43:91:
         8e:8a:d1:a1:13:52:88:83:08:74:26:56:c6:d2:7a:fe:d7:5b:
         18:a6:55:25:f6:6b:f5:8c:c4:58:81:8c:29:76:4f:e7:e4:86:
         92:a3:a9:14:4d:23:3b:50:71:70:2d:69:94:35:97:19:e0:3a:
         2a:ac:ef:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 21:45:30 2024 by rpki-client on console-fra.rpki-client.org