Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/0A469648099611EEB1AA195CC4F9AE02.roa
File:                     0A469648099611EEB1AA195CC4F9AE02.roa (raw, json)
Hash identifier:          Im+M9fgmaJ15bCeDM4NQAzXHfirsRyj1DzqNZWZQT2Y=
Subject key identifier:   DB:B1:2C:3D:D1:4F:A2:BE:C5:99:2F:5A:5A:84:92:18:13:DA:21:56
Certificate issuer:       /CN=A91C769F/serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6
Certificate serial:       0F
Authority key identifier: BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/0A469648099611EEB1AA195CC4F9AE02.roa
Signing time:             Wed 05 Jul 2023 05:14:42 +0000
ROA not before:           Wed 05 Jul 2023 05:14:42 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     136744
IP address blocks:        103.140.156.0/23 maxlen: 24
                          2405:40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl
                          rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 06:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C769F/serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6
        Validity
            Not Before: Jul  5 05:14:42 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a4fc42-4d94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:82:a8:7d:98:6b:9e:17:5c:47:04:11:7c:7a:
                    c6:b2:ab:67:a0:9f:1e:8c:af:28:22:2d:f1:4d:ff:
                    4f:8b:5a:45:a6:ac:15:cf:a6:e1:12:41:75:22:97:
                    d2:be:d6:b4:a1:12:70:f3:09:60:65:e2:6b:60:7e:
                    4a:24:8d:86:4f:d3:92:a3:9e:83:07:d9:2c:c2:e0:
                    86:94:9c:bb:bd:34:8e:2f:de:35:74:4c:93:cd:93:
                    b0:15:31:b7:5f:d4:c6:1d:6b:ec:c8:54:16:1b:cd:
                    d9:f3:50:8e:cf:17:90:8e:25:ab:1b:5e:00:ef:8c:
                    b3:d0:63:b0:91:53:ee:ee:70:4a:ec:7b:5a:5c:7b:
                    c5:fa:94:06:61:c6:56:c7:f7:a9:55:5c:78:d4:30:
                    f8:1a:fe:80:f2:94:14:fb:68:6a:a3:76:2e:6b:df:
                    81:b0:7e:24:c7:b1:04:c1:82:cc:16:59:a2:7c:9f:
                    8c:37:ef:d9:77:38:85:ef:59:aa:22:69:1f:53:80:
                    6e:f8:48:9a:d8:88:03:b9:5d:06:22:93:3d:9e:5d:
                    e3:3e:16:5f:b8:e4:19:02:03:9f:74:0c:ac:6a:06:
                    d6:0c:1b:fe:1f:3d:f1:00:da:8f:f3:33:81:97:65:
                    02:19:70:ea:b9:03:11:f0:30:24:8c:66:85:e9:56:
                    de:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B1:2C:3D:D1:4F:A2:BE:C5:99:2F:5A:5A:84:92:18:13:DA:21:56
            X509v3 Authority Key Identifier:
                keyid:BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/0A469648099611EEB1AA195CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.156.0/23
                IPv6:
                  2405:40::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:a6:07:ff:56:32:8d:4e:7e:6c:6f:10:68:7a:bc:ae:e8:44:
         91:25:7e:5b:3a:fa:29:5d:02:2c:b9:9d:9e:2c:2d:6f:12:93:
         92:e7:2e:2b:1f:fa:c1:08:3e:98:28:a0:d8:ea:2d:91:6c:d3:
         82:2a:b7:26:da:49:b9:53:ef:c2:d0:a0:da:98:7b:42:2d:9f:
         54:1e:30:97:ac:85:4b:b6:90:85:ad:a6:bc:e0:ea:c8:c3:88:
         e1:a9:b9:c6:1f:33:a4:58:62:75:30:b8:e3:2f:39:f3:89:24:
         47:14:47:fe:43:01:7f:5a:7d:eb:98:a2:13:0f:34:e6:e8:d8:
         08:ec:af:b9:ec:6b:be:27:8a:cd:4c:ee:68:6e:a0:4c:2c:6b:
         ea:8e:11:b5:44:05:5d:44:2c:a5:e0:02:0c:3d:a6:af:4e:bb:
         f8:dd:25:bd:95:50:46:aa:33:4b:1d:a4:87:c0:6c:a8:ab:c8:
         53:6f:f3:52:51:7b:63:43:19:df:1f:cf:3a:2a:63:2e:09:27:
         ba:0b:d8:b6:b8:32:a9:4a:c5:98:e6:3a:18:8e:b5:c1:a8:b5:
         f5:0f:3a:c0:82:73:09:1e:d5:c8:45:6b:f4:9c:98:6c:60:a6:
         d7:10:06:09:eb:5a:f3:4d:68:34:bc:49:f3:70:0b:91:f8:0e:
         8a:9c:72:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:39:12 2024 by rpki-client on console-fra.rpki-client.org