Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/BC630BAE84FC11EE9887345FC4F9AE02.roa
File:                     BC630BAE84FC11EE9887345FC4F9AE02.roa (raw, json)
Hash identifier:          HKes2c/mu/stmt2Gj7jYGxcfITdkDU7yK/r1/eYcQTI=
Subject key identifier:   04:1F:75:81:85:89:71:26:94:64:64:3E:E4:D8:F6:98:E8:F0:78:88
Certificate issuer:       /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
Certificate serial:       0F
Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/BC630BAE84FC11EE9887345FC4F9AE02.roa
Signing time:             Fri 17 Nov 2023 03:52:32 +0000
ROA not before:           Fri 17 Nov 2023 03:52:32 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     45671
IP address blocks:        103.67.94.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl
                          rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 06:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
        Validity
            Not Before: Nov 17 03:52:32 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6556e380-7ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a2:c4:1d:90:48:38:02:5f:fb:0c:24:15:6d:
                    49:db:8b:5a:85:df:cf:39:9c:62:da:4f:ad:76:63:
                    67:ba:19:73:5d:94:78:61:0f:76:3b:43:80:56:e9:
                    9f:62:9b:b2:65:a5:52:91:28:47:fd:e8:a0:8f:5a:
                    dd:58:60:62:15:8f:8b:bf:06:d3:f2:f6:78:56:26:
                    cd:f1:c9:5d:1e:d5:54:ab:62:2f:2a:cf:ac:7f:65:
                    f6:7c:7a:b6:18:c8:fa:9f:77:59:38:2d:ef:8a:4a:
                    87:f6:43:1e:ac:07:55:e9:d7:5c:d1:28:eb:68:9f:
                    55:06:c0:a1:25:91:20:86:58:7e:45:2f:ac:09:50:
                    94:cc:80:d3:54:81:9c:fd:02:84:4f:dc:d3:4a:92:
                    32:5e:5e:da:31:b2:df:de:31:6d:bc:44:4f:78:9c:
                    46:52:4d:15:f1:a7:97:22:f9:6f:55:72:24:2f:98:
                    28:de:54:f9:13:07:04:62:59:99:df:d9:cf:cb:12:
                    67:8c:33:df:67:60:5b:5a:23:80:00:4c:29:72:1c:
                    a0:aa:12:38:6f:fd:dd:98:5f:4c:fa:b3:f5:0d:2e:
                    ff:2d:ec:b6:e8:b1:c5:d4:04:ae:5a:ab:52:f0:74:
                    51:f7:6b:5c:6a:38:ec:74:66:9b:b8:1b:bd:33:b4:
                    df:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1F:75:81:85:89:71:26:94:64:64:3E:E4:D8:F6:98:E8:F0:78:88
            X509v3 Authority Key Identifier:
                keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/BC630BAE84FC11EE9887345FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:d9:b8:8e:ae:b2:c3:95:a4:a7:cb:4b:41:b7:5b:06:a6:7f:
         ee:c8:36:11:99:83:ca:68:f7:f0:bb:c1:a4:44:ea:ca:8a:80:
         66:c1:d6:e9:59:44:89:81:dd:8d:ce:58:de:bf:96:70:9e:fd:
         8c:2c:28:4c:2f:9e:d5:a9:a8:41:c3:7d:a2:ed:42:94:38:84:
         74:e2:46:a6:00:91:a6:7d:ca:42:98:56:98:a2:08:d5:a6:e8:
         ae:de:9c:42:65:cf:f1:03:24:f5:bf:c7:ec:46:3d:e0:29:3c:
         1b:31:f2:07:65:30:ea:e3:8e:ef:f6:93:52:93:40:fd:da:36:
         50:17:99:b7:5b:34:0c:f2:ae:8f:c7:80:5b:20:3a:fd:d5:db:
         fc:6c:7e:a1:03:2b:eb:31:1c:cc:a6:bb:6d:c8:29:92:e0:4d:
         b7:f9:07:de:cf:ff:7e:57:2d:e9:9e:e5:e9:62:4d:25:1b:36:
         fa:1d:93:a4:ae:35:22:8e:bd:0f:a6:d2:99:38:c4:cb:f6:e1:
         14:a0:d5:4b:f7:38:08:41:45:f0:b2:f8:18:0e:54:61:87:91:
         81:44:45:61:46:ee:47:dd:ea:84:15:64:70:9c:aa:0c:ee:22:
         43:3f:60:b1:3a:e3:4a:cc:bb:e3:ad:76:c5:8f:b5:75:a9:b2:
         1b:7d:bf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 08:13:21 2024 by rpki-client on console-ams.rpki-client.org