Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/31CCE602BCE311EA953FBB5EC4F9AE02.roa
File:                     31CCE602BCE311EA953FBB5EC4F9AE02.roa (raw, json)
Hash identifier:          DXatxoET1+Gd2NPAgN9lssfdJ/wZs+mLGS3RWjHmUKs=
Subject key identifier:   29:8B:A6:9D:FE:02:21:CA:E8:C0:F4:1A:58:82:E7:73:02:6D:3E:C7
Certificate issuer:       /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
Certificate serial:       2FEB
Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/31CCE602BCE311EA953FBB5EC4F9AE02.roa
Signing time:             Fri 02 Jun 2023 16:12:19 +0000
ROA not before:           Fri 02 Jun 2023 16:12:19 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     10021
IP address blocks:        103.10.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl
                          rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 May 2024 15:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12267 (0x2feb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
        Validity
            Not Before: Jun  2 16:12:19 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=647a14e2-7432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0e:7c:1d:0e:1d:4e:b0:88:5c:b3:67:5f:9e:
                    66:ee:b0:ba:95:f1:ee:17:81:de:55:d5:a9:10:e0:
                    96:14:56:34:19:e1:16:4c:ff:fc:e9:7c:8e:2f:bb:
                    61:9e:56:f2:27:b6:d9:46:3d:ed:88:74:86:e2:d1:
                    c3:e0:42:0b:75:62:6f:d6:ba:f4:5a:24:c6:a9:ad:
                    c3:72:2a:d3:1f:25:0d:81:c4:d6:eb:bc:4c:61:42:
                    b4:10:13:fe:65:12:63:0c:cc:08:6b:22:54:4d:c4:
                    9a:64:33:54:36:37:01:76:7c:83:27:bd:89:42:35:
                    10:db:bd:e0:3a:8d:90:af:fe:03:2f:fe:97:79:88:
                    45:1d:bd:fe:b0:8e:e4:7e:89:03:4f:7b:29:82:90:
                    64:c7:4e:21:5b:ab:fb:0c:fa:a8:1f:24:8e:5e:d0:
                    e0:c7:8a:e8:45:47:93:8b:2b:57:b4:32:35:7f:44:
                    0e:c7:d5:9a:18:70:bc:ef:d2:10:a3:9a:de:55:78:
                    ea:51:6c:72:9f:94:39:2f:99:f3:11:79:2c:e0:e6:
                    ec:d5:b3:c0:92:ef:1e:fe:5d:5b:7d:27:61:83:43:
                    0e:c8:28:03:cd:b2:67:09:c9:9d:43:20:b8:cb:14:
                    c6:a8:92:04:bb:ff:0a:ce:0f:59:67:9e:b4:d8:d3:
                    1a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8B:A6:9D:FE:02:21:CA:E8:C0:F4:1A:58:82:E7:73:02:6D:3E:C7
            X509v3 Authority Key Identifier:
                keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/31CCE602BCE311EA953FBB5EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:c7:1a:ab:8c:5c:0c:3a:78:dc:1e:d6:73:25:a8:b2:45:1f:
         32:19:5e:04:4f:a8:2a:d5:f5:1b:74:0e:fc:c8:3a:fc:2c:c5:
         40:11:f0:01:f3:89:0e:ba:d9:4c:8f:15:fe:a3:24:a0:60:62:
         3a:db:6d:71:d8:31:00:46:87:8b:11:3d:ba:39:33:0f:b2:23:
         de:39:36:05:51:3b:e4:05:a8:91:c1:f5:79:ba:c2:ef:14:5b:
         62:6c:2d:9e:79:68:52:28:14:fd:27:24:9b:7b:56:6c:ae:ef:
         01:b3:84:e7:7a:92:69:fd:c9:bb:b0:6a:25:1a:19:a8:71:7f:
         67:3a:22:f5:7f:1a:ce:b2:6b:71:7c:1a:e9:db:49:81:48:b1:
         72:f4:81:f7:7e:8b:36:25:d4:c4:d2:d8:48:6b:e6:f7:98:c2:
         1a:21:0a:7a:41:47:d4:74:c8:40:94:71:04:db:17:56:c4:c1:
         d7:cd:66:be:33:df:7b:c5:1d:04:43:0b:c9:68:9a:6a:af:32:
         d9:d5:be:7f:df:e4:86:41:eb:26:83:b7:55:bb:0b:a3:e9:b4:
         97:ec:01:57:2b:f8:91:66:a6:70:c1:cd:6b:30:a2:b3:e0:cd:
         b3:3c:63:41:21:b9:15:05:15:bf:e3:01:da:e8:66:ba:1d:5c:
         56:73:9a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:23:57 2024 by rpki-client on console-ams.rpki-client.org