Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/3F2B1C3AB48E11EBB0455C2DC4F9AE02.roa
File:                     3F2B1C3AB48E11EBB0455C2DC4F9AE02.roa (raw, json)
Hash identifier:          zLBxXDVmPsLIMkQgOn3H3bBv/zGoHa9kv878IFQiD8c=
Subject key identifier:   9C:0D:BB:60:F1:2F:B6:E5:05:F2:74:EA:AB:51:4E:B1:E1:3C:8E:8C
Certificate issuer:       /CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
Certificate serial:       0527
Authority key identifier: 9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/3F2B1C3AB48E11EBB0455C2DC4F9AE02.roa
Signing time:             Thu 15 Jun 2023 00:27:42 +0000
ROA not before:           Thu 15 Jun 2023 00:27:42 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     213035
IP address blocks:        103.151.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl
                          rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 00:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1319 (0x527)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
        Validity
            Not Before: Jun 15 00:27:42 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=648a5afe-9d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:de:b0:5a:c6:49:d9:81:46:dc:5d:56:ce:8b:
                    7b:45:ef:e0:58:d7:fb:11:a2:e0:60:74:e1:c2:9d:
                    d0:3e:af:3d:0c:66:8c:77:9d:a1:98:06:15:21:f8:
                    43:66:ff:44:5c:8b:61:5c:3d:8c:bf:6a:ca:d3:d8:
                    4e:8b:7f:b3:cd:ba:5c:db:c6:2c:20:5e:d1:16:4c:
                    c4:00:ec:ee:72:d5:88:28:6b:ba:70:ba:76:81:a4:
                    fe:55:db:d8:18:8b:9c:fc:10:34:92:63:6e:b2:f2:
                    ac:31:2a:63:0d:c5:38:ae:cc:95:d5:33:9f:73:e0:
                    49:2a:d3:aa:ee:47:08:30:6e:ef:e9:e4:6f:4c:a0:
                    a0:58:a5:d1:1d:03:be:c8:67:1d:45:d9:4b:0d:65:
                    bf:11:17:4a:71:7a:95:e0:fb:c6:79:e3:94:64:a5:
                    7e:b9:06:85:bd:6e:f0:25:15:aa:c9:da:cd:80:c9:
                    9e:45:5e:e8:b7:d0:be:53:79:9e:96:49:d4:75:b3:
                    1c:88:2a:08:f2:04:a4:26:09:dc:0d:e7:2d:8f:8e:
                    69:9e:c8:75:e4:ce:14:96:ed:b1:74:4e:35:39:dc:
                    f5:8b:b7:26:f5:da:fb:17:ea:e0:30:8f:15:1e:53:
                    e9:d4:1b:dc:7d:69:16:b6:f2:71:b3:57:f6:3f:20:
                    e8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0D:BB:60:F1:2F:B6:E5:05:F2:74:EA:AB:51:4E:B1:E1:3C:8E:8C
            X509v3 Authority Key Identifier:
                keyid:9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/3F2B1C3AB48E11EBB0455C2DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:1a:be:6a:83:07:92:e6:78:a9:9c:ff:7d:99:62:2d:1f:8c:
         01:6c:92:ae:8d:4b:e8:24:dd:6f:db:f6:fe:40:cf:dd:e7:ab:
         71:7b:89:c9:2e:dd:57:73:c3:46:dc:bc:fd:b0:8d:49:70:9e:
         13:84:a4:35:b3:16:ed:7c:78:db:55:36:02:88:45:8f:1d:88:
         68:7e:37:cb:86:69:16:59:dc:38:01:9d:bf:06:93:b0:b2:32:
         3e:06:cc:4f:90:76:90:51:b4:7c:4c:5c:c5:f7:c7:5f:34:50:
         ff:d2:78:c5:d0:7a:57:18:e4:44:d2:55:09:f5:32:7d:b2:b6:
         6c:83:34:2e:87:e7:fc:58:6a:6e:36:2e:11:66:1b:27:0c:87:
         9c:79:9d:e9:9b:8c:f8:52:6e:18:38:42:dd:fa:53:be:b2:f5:
         12:d8:c7:ea:4b:b5:1b:ce:03:02:f3:56:14:a0:80:2f:ce:af:
         ab:e0:f9:a2:1f:a8:91:a5:b8:26:fb:10:b4:ab:71:d1:d1:28:
         8f:86:69:aa:f4:11:59:16:19:10:bf:a7:71:0a:6c:e2:0b:80:
         1b:d2:a8:4f:5c:64:d7:6a:03:03:af:de:72:e9:6d:ea:47:69:
         22:7f:20:e3:62:94:85:0b:82:04:16:b6:59:6f:59:ba:48:34:
         a4:30:a1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:20:20 2024 by rpki-client on console-ams.rpki-client.org