Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/B4A14106974911EEBAFA257BC4F9AE02.roa
File:                     B4A14106974911EEBAFA257BC4F9AE02.roa (raw, json)
Hash identifier:          8sLoIeCKa+LBQU6M3xgcWt70Xa8ypzI1STCtNIDj7w4=
Subject key identifier:   0A:0D:0F:15:F4:53:AD:5E:52:9B:AD:AD:89:C1:02:C7:8D:76:A9:65
Certificate issuer:       /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
Certificate serial:       BF
Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/B4A14106974911EEBAFA257BC4F9AE02.roa
Signing time:             Thu 28 Mar 2024 18:57:19 +0000
ROA not before:           Thu 28 Mar 2024 18:57:19 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     139901
IP address blocks:        103.134.24.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Jun 2024 18:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
        Validity
            Not Before: Mar 28 18:57:19 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=6605bd8f-33d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d7:64:2b:7c:96:b9:48:10:f0:7e:9d:49:92:
                    62:30:ce:28:38:07:85:21:04:91:1f:48:c9:8b:f0:
                    79:71:ea:4e:ee:62:e7:58:a0:48:de:2f:4d:5c:05:
                    30:56:13:87:79:c2:4e:2c:9c:08:72:b1:9c:32:c5:
                    04:c4:93:c1:f6:17:dc:12:d6:de:a8:58:e6:ed:89:
                    ea:64:47:1e:9b:00:4e:28:c0:32:36:01:e7:02:4b:
                    16:cd:5a:ad:a6:50:c2:44:6e:c1:fe:8f:9c:67:f7:
                    48:cf:b7:37:be:8b:0f:23:b8:6e:19:7a:96:f1:99:
                    cf:6c:c2:71:7d:be:e0:0c:65:b1:03:04:c2:b3:30:
                    96:5e:d7:4d:ef:be:05:52:ca:c8:4f:79:cf:b7:cd:
                    c9:5d:e3:dd:96:d4:f9:17:7c:1a:f1:49:d4:82:19:
                    d1:49:7f:e0:e9:bc:d8:33:38:eb:5e:a5:9d:08:6a:
                    4b:fe:0d:7a:39:1e:2f:9a:7a:86:31:6a:db:14:8c:
                    cf:17:39:a7:71:11:61:64:9a:de:55:21:d5:9e:9d:
                    70:f6:25:3b:3e:a5:16:14:ad:02:3f:68:4f:5e:d0:
                    e7:3b:cb:00:9a:aa:13:6c:78:76:57:24:21:0e:d7:
                    b6:bd:4f:a1:c2:80:f2:e7:65:09:18:af:b4:03:be:
                    c7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0D:0F:15:F4:53:AD:5E:52:9B:AD:AD:89:C1:02:C7:8D:76:A9:65
            X509v3 Authority Key Identifier:
                keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/B4A14106974911EEBAFA257BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:44:f7:27:66:a4:ec:0e:2b:ee:da:da:9d:e9:07:3e:8e:94:
         b3:8a:1c:8e:d4:b7:73:2e:9d:80:f0:e8:b2:99:67:dd:4b:af:
         53:6b:e8:01:ed:62:ec:cb:8b:aa:48:21:b1:cc:3d:3a:3b:13:
         4d:0b:3e:a4:97:37:f2:56:b5:cc:56:12:80:24:21:84:dd:33:
         ea:31:1a:5a:d4:a9:49:95:1c:d0:24:fa:61:9d:34:83:16:8e:
         29:56:d6:bf:61:e4:46:fd:37:0b:c4:0c:17:cb:c5:11:4c:2d:
         a0:97:a5:60:2c:ad:59:24:99:80:60:36:fc:78:82:62:2f:a2:
         8d:7d:58:fc:43:ad:ff:c0:4c:64:8b:36:8a:7c:96:ce:cd:34:
         d9:fc:db:50:dd:ba:df:2c:42:2d:09:88:5a:df:7f:7d:9c:44:
         c6:ff:d3:7f:14:e3:3f:e0:5e:a1:2d:b5:31:b0:9f:34:0b:4e:
         f4:aa:97:73:d2:9a:cb:53:8f:00:23:60:90:12:e8:2b:86:ed:
         21:76:a8:3c:47:19:fb:85:58:27:ab:eb:16:e6:19:41:57:f3:
         53:e2:78:62:09:7a:45:88:e6:fa:f3:15:47:19:ec:a3:2a:37:
         64:3f:06:74:80:2a:98:af:5f:22:a7:89:f1:f2:1e:04:e4:72:
         3e:e7:7b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 19:58:57 2024 by rpki-client on console-fra.rpki-client.org