Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/0EB7AAC0F32211EEA6B7BD5CC4F9AE02.roa
File:                     0EB7AAC0F32211EEA6B7BD5CC4F9AE02.roa (raw, json)
Hash identifier:          xC+rsEZBpa06x2ovskS7diIy6ai6DQ/vSdDtj5lpXp8=
Subject key identifier:   6D:39:EF:F4:28:41:8C:72:75:24:BB:3B:CF:21:65:7B:7A:F9:B6:94
Certificate issuer:       /CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Certificate serial:       0D35
Authority key identifier: 37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/0EB7AAC0F32211EEA6B7BD5CC4F9AE02.roa
Signing time:             Fri 05 Apr 2024 07:56:50 +0000
ROA not before:           Fri 05 Apr 2024 07:56:50 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     1239
IP address blocks:        103.83.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl
                          rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3381 (0xd35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
        Validity
            Not Before: Apr  5 07:56:50 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=660faec1-b390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:2e:41:c9:c4:10:60:c3:61:a0:e9:79:66:
                    19:7e:70:d8:20:8d:51:2f:2e:9f:d1:4e:aa:5e:9c:
                    7b:a0:06:b9:42:77:be:8a:6f:2e:4e:4c:ac:f4:52:
                    d9:79:5d:83:a8:d8:cc:f0:bd:3b:e4:9c:24:e8:7c:
                    e1:a1:68:ce:19:f9:ec:b4:9e:cc:3d:36:39:04:41:
                    d6:2e:2d:dd:04:b5:5e:0f:9f:cf:e2:bb:e3:f0:8b:
                    23:cb:1b:54:1d:58:36:45:d5:a3:f8:9c:44:42:2a:
                    c3:b8:e7:96:7f:1a:86:e6:af:0a:23:fe:02:0b:19:
                    94:cd:86:47:b3:b3:b3:a5:f5:56:44:51:b6:67:63:
                    a2:a2:ff:0d:8a:a7:2b:a0:56:54:30:aa:17:64:e1:
                    c1:8c:b8:7b:40:8e:2d:20:47:b2:13:f3:d7:0a:eb:
                    22:7c:21:06:c7:a6:82:3d:eb:33:63:b3:d3:bb:7c:
                    bd:af:61:53:8d:4c:09:bf:3b:3d:91:d9:6c:59:cc:
                    aa:55:cc:0e:da:ee:1f:78:a8:9c:85:dd:e7:45:33:
                    5d:e5:bb:21:1e:98:0f:83:d8:31:c2:bd:31:25:7c:
                    a9:de:72:8f:be:2c:0d:9c:55:9f:89:4e:32:45:ef:
                    00:ee:41:69:31:e2:75:bc:cf:6f:34:64:f6:1e:b6:
                    47:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:39:EF:F4:28:41:8C:72:75:24:BB:3B:CF:21:65:7B:7A:F9:B6:94
            X509v3 Authority Key Identifier:
                keyid:37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/0EB7AAC0F32211EEA6B7BD5CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:48:3d:b5:77:fc:74:ef:73:e6:35:df:7f:df:a4:d1:34:e2:
         27:9f:4d:b6:d6:7d:9a:2b:65:d6:1e:37:44:70:45:94:78:a4:
         6e:de:b6:14:bf:bd:df:d1:f1:11:55:52:24:fd:12:26:cc:b0:
         58:22:f3:47:b5:68:8b:ec:1b:a3:43:44:8b:60:96:73:f9:29:
         9d:e3:21:63:05:9d:68:f6:fd:4c:85:74:f7:8b:51:5b:07:0b:
         86:41:65:31:ae:f9:60:2d:b3:96:21:84:e4:e1:37:c3:a4:e5:
         94:94:d9:c4:8c:6d:77:70:cb:ee:10:d1:e7:6f:bf:57:ba:f6:
         26:1c:7e:b4:f2:d8:c3:60:88:5d:33:e3:27:fe:34:b8:d6:de:
         46:e5:42:1b:f7:d2:aa:90:96:46:7a:d5:50:1e:0a:36:dc:12:
         ca:2e:b0:4a:66:ff:3d:d0:df:c4:d8:2b:2f:d9:cc:ac:c5:9d:
         64:cc:56:9b:01:2a:b8:0a:82:ef:3f:a8:98:11:e0:9c:fe:08:
         fc:8f:27:2f:a2:a2:1a:75:97:39:75:ce:6e:8e:77:e8:ea:f7:
         b8:8b:09:2e:93:8e:bc:7d:47:67:7b:61:79:9f:9d:f8:6d:3f:
         6c:c0:cb:f5:1f:8d:20:61:b3:8e:75:62:52:a3:dc:74:aa:2a:
         f2:33:99:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:04:03 2024 by rpki-client on console-fra.rpki-client.org