Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/418D45209C8211EC86AE3D68C4F9AE02.roa
File:                     418D45209C8211EC86AE3D68C4F9AE02.roa (raw, json)
Hash identifier:          eSbQcGhw0ukTZJ0/wZICc6CuamExZ02/K90pQlli4GA=
Subject key identifier:   53:11:14:0E:19:2E:29:0E:AE:CB:DB:A6:40:33:34:81:B7:3A:7B:D6
Certificate issuer:       /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A
Certificate serial:       0B25
Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/418D45209C8211EC86AE3D68C4F9AE02.roa
Signing time:             Thu 12 Oct 2023 19:27:10 +0000
ROA not before:           Thu 12 Oct 2023 19:27:10 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     134371
IP address blocks:        103.143.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl
                          rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 19:26:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2853 (0xb25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A
        Validity
            Not Before: Oct 12 19:27:10 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6528488d-ea75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:44:d3:82:be:fc:ac:2a:6a:77:77:a2:ae:
                    dd:b3:a5:10:51:5f:02:ba:20:7a:5e:fe:bf:26:c3:
                    55:39:4e:40:42:b1:83:30:b7:9f:21:33:b7:41:db:
                    1e:f5:fb:6b:74:6f:be:9b:46:ba:87:1f:b6:01:3a:
                    db:66:36:47:dd:5b:6c:64:9c:3e:a9:be:12:99:a9:
                    6e:b4:56:d1:4b:32:e6:df:80:4e:70:9b:0c:7c:6a:
                    bd:2b:b1:b8:de:ff:48:d1:88:f1:16:b2:95:97:37:
                    ba:0c:ef:2b:ad:61:f1:69:b7:99:d2:31:39:7b:7f:
                    d9:02:6a:8d:7b:43:4e:b3:ab:11:38:ea:a7:c5:db:
                    47:f6:9b:7e:66:b1:20:52:aa:9e:54:e8:71:a2:dc:
                    f1:37:2e:54:00:ef:d0:aa:80:5f:c3:0b:fb:9b:d8:
                    e9:37:04:4c:89:56:39:d2:6a:e5:a4:1f:7a:bc:bc:
                    46:18:d6:c5:de:8b:03:5e:00:81:93:01:70:7e:16:
                    df:70:c2:3f:35:dc:ea:8b:b7:f2:64:85:be:07:e9:
                    95:e6:ce:3f:44:b5:65:c5:fd:9c:a0:d7:66:55:a1:
                    0b:e9:83:12:93:6b:6c:0b:7d:50:c4:1f:91:11:1c:
                    e7:07:fe:c7:52:1c:a2:06:06:c0:ec:17:90:5d:d7:
                    23:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:11:14:0E:19:2E:29:0E:AE:CB:DB:A6:40:33:34:81:B7:3A:7B:D6
            X509v3 Authority Key Identifier:
                keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/418D45209C8211EC86AE3D68C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:ef:10:ae:ca:81:94:fe:89:20:fb:ad:8e:b2:0c:97:cf:23:
         23:3c:9c:0b:63:3f:ed:ec:7c:a3:34:61:3b:cf:5b:0b:ee:04:
         a5:66:3f:6a:ba:d9:03:34:41:37:d2:dd:75:62:34:e1:41:49:
         b7:3b:f8:57:b8:9b:0a:fd:3c:6f:8f:2f:4a:50:6b:44:3c:1d:
         15:0e:fb:01:a4:93:90:9f:e4:79:01:7a:3d:df:49:da:21:91:
         41:23:5b:52:90:95:f9:fe:f7:35:c6:8d:c8:55:f1:e8:4a:77:
         0e:05:3c:cf:78:1e:08:4c:06:1d:e4:fd:65:ba:4a:05:b0:ff:
         ad:27:cc:2c:12:0b:82:b1:08:d5:34:71:e4:f8:e0:3f:ef:d7:
         ea:e2:89:1a:78:be:57:de:87:da:43:2f:6a:57:04:0c:c2:80:
         0c:f0:6d:13:3b:e5:83:24:c5:75:27:83:02:b5:6d:9e:33:68:
         13:e5:e9:85:55:c4:17:4d:31:4a:de:53:14:14:f2:ca:36:b1:
         72:29:f5:ac:41:9d:93:d4:6e:13:82:9c:81:06:0b:01:88:40:
         b2:10:42:9c:76:24:ab:be:a9:72:36:cf:79:90:45:e4:bc:67:
         3c:95:3a:30:23:42:28:b6:1b:08:fa:5e:3a:f7:ce:f2:85:ae:
         b5:21:f6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 20:25:50 2024 by rpki-client on console-ams.rpki-client.org