Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/6D39AFB00A0411EE9FEEAB44C4F9AE02.roa
File:                     6D39AFB00A0411EE9FEEAB44C4F9AE02.roa (raw, json)
Hash identifier:          /qJsDggjlX8kCVjkMifhy3HzpLPfyW63xOi3PYDL/Iw=
Subject key identifier:   0C:E6:DB:28:C3:97:96:8C:80:DE:6E:12:F5:4C:7E:82:85:C9:3F:50
Certificate issuer:       /CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
Certificate serial:       0526
Authority key identifier: 9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/6D39AFB00A0411EE9FEEAB44C4F9AE02.roa
Signing time:             Thu 15 Jun 2023 00:27:42 +0000
ROA not before:           Thu 15 Jun 2023 00:27:42 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     210542
IP address blocks:        103.151.40.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl
                          rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1318 (0x526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
        Validity
            Not Before: Jun 15 00:27:42 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=648a5afd-020f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ba:84:e1:b5:cb:f4:3c:bc:03:fa:64:f1:a8:
                    e5:67:3a:07:97:ac:7b:e8:c7:80:20:fb:eb:38:72:
                    5f:24:04:b5:33:c8:ec:e5:f8:80:4b:4f:fb:66:0f:
                    d8:52:02:b3:79:50:e7:6f:56:bf:a4:8f:16:79:e2:
                    64:72:6c:bb:df:ff:8c:9e:1f:18:a5:d6:8b:06:90:
                    1c:0a:97:4c:50:66:94:34:10:64:09:84:d7:a0:38:
                    77:f4:e2:b6:fc:bf:a9:f7:e0:77:a2:ce:aa:7b:32:
                    64:a2:e0:6c:a2:7b:91:a4:80:51:d6:5c:2f:fd:79:
                    a5:a4:56:44:01:b7:e5:35:0c:46:b8:53:9c:fc:9f:
                    47:c1:6b:dd:f8:13:93:b5:e9:34:22:78:45:4f:a2:
                    44:46:e8:58:18:3f:ce:ef:f3:be:38:52:01:c9:24:
                    86:b4:20:31:60:89:c8:73:d9:e4:ad:78:6a:0d:c0:
                    36:d2:de:f3:93:a5:13:22:6f:d7:46:39:0d:27:1b:
                    7c:b7:ba:18:3d:44:ed:9a:d4:77:24:a7:fe:dd:1a:
                    c7:03:c0:6d:8f:a2:3d:8d:b5:00:69:d9:bb:ef:13:
                    67:36:42:59:a6:0d:8f:45:cd:08:8e:3a:f9:23:a0:
                    ae:35:e7:2d:75:c2:e8:c0:1b:b8:64:79:3c:16:88:
                    d4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E6:DB:28:C3:97:96:8C:80:DE:6E:12:F5:4C:7E:82:85:C9:3F:50
            X509v3 Authority Key Identifier:
                keyid:9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/6D39AFB00A0411EE9FEEAB44C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:ab:c8:6a:16:56:1d:a2:41:b2:4e:5b:ff:b7:ec:b6:03:2c:
         14:3b:91:31:91:c7:25:a7:4f:25:23:83:29:2e:98:dd:50:e0:
         e1:d9:2e:cb:ef:7b:81:9e:6a:a6:36:08:ad:2e:c3:01:29:58:
         ba:78:ca:86:95:c8:a9:85:85:99:f5:15:72:47:7c:45:40:44:
         76:66:2d:77:85:98:7e:da:c5:00:56:f3:ed:84:8c:5a:6e:9a:
         18:a2:c2:66:3c:52:b4:f3:dd:f4:ae:6b:24:2e:21:06:ab:1d:
         23:25:b7:ed:95:8b:74:91:3b:5a:69:57:c1:7c:bb:4f:82:dd:
         a1:ab:f6:bd:af:ec:95:f7:c5:8f:1d:8e:3e:f7:4b:9c:8f:4c:
         6c:cf:f0:59:eb:37:4f:ab:c1:5a:25:4b:89:83:26:67:1e:c6:
         e9:64:6f:72:9a:4e:98:f1:a3:e7:44:22:b0:e0:12:47:0b:ee:
         59:0a:a5:c2:6c:98:4f:40:3c:75:e1:d1:9e:fe:2a:89:15:b2:
         c7:3c:8b:9d:7e:ad:08:83:a0:7c:6c:53:61:d9:7e:76:9f:02:
         d5:eb:c0:64:05:15:18:17:94:1c:50:03:35:1b:8e:1b:0f:48:
         4b:8c:34:62:af:f9:be:e3:46:36:08:4f:f2:f1:58:06:64:ab:
         d2:d0:70:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:07:00 2024 by rpki-client on console-fra.rpki-client.org