Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/9F5F0EC6135911EBBC97C718C4F9AE02.roa
File:                     9F5F0EC6135911EBBC97C718C4F9AE02.roa (raw, json)
Hash identifier:          LwyG3cBK685X5Hy6zcxvokAuNx9OxDQ6PWKOHUrID2Y=
Subject key identifier:   F9:E9:20:9B:F4:9D:D2:F4:F2:73:EC:25:BC:E8:BD:AD:A3:A4:6E:AA
Certificate issuer:       /CN=A91C799C/serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761
Certificate serial:       065E
Authority key identifier: DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/9F5F0EC6135911EBBC97C718C4F9AE02.roa
Signing time:             Tue 14 Nov 2023 23:10:36 +0000
ROA not before:           Tue 14 Nov 2023 23:10:36 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     141356
IP address blocks:        103.156.178.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl
                          rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 21:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1630 (0x65e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C799C/serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761
        Validity
            Not Before: Nov 14 23:10:36 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6553fe6c-1ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5b:29:e4:7a:32:0a:74:57:aa:a8:03:61:c3:
                    b4:2f:47:5b:b3:a1:44:3e:05:70:6c:b7:5d:8f:d0:
                    01:6a:97:3a:ed:b6:3f:6c:e5:30:0e:af:36:f8:30:
                    1c:69:19:52:1e:98:9d:d1:3c:7a:f4:79:ec:b2:06:
                    f3:c8:e8:ba:e2:b5:f5:08:f7:75:1b:f4:6a:31:34:
                    52:70:87:1d:4f:2b:a9:78:4b:48:b1:3f:76:3d:9b:
                    83:69:5d:42:bb:e9:b1:25:89:99:cc:07:a1:d3:e5:
                    8f:6c:ef:31:59:f5:bc:9e:fa:d0:59:88:e6:39:0d:
                    79:0f:7b:8c:38:66:7a:06:87:2a:c3:e0:a4:a0:c9:
                    49:ec:d4:7b:e8:0c:e8:06:51:49:4e:d0:a4:46:72:
                    89:a0:ef:40:76:39:61:aa:c7:f9:37:29:e8:25:9f:
                    d6:dd:99:74:0e:9a:dd:4d:55:cc:db:b8:bf:5a:6c:
                    e9:14:87:f6:23:de:cf:4a:36:4c:75:a8:96:fe:c3:
                    2b:fc:c1:41:fe:61:6c:ac:40:30:1d:5e:a7:85:cb:
                    b2:c8:1a:58:1d:0d:c9:db:92:0b:86:2e:3d:52:de:
                    c1:9b:3c:72:a2:51:9c:5a:98:18:91:db:e2:33:e2:
                    a8:e8:19:c1:67:36:17:5a:69:35:95:46:33:d1:bc:
                    fb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E9:20:9B:F4:9D:D2:F4:F2:73:EC:25:BC:E8:BD:AD:A3:A4:6E:AA
            X509v3 Authority Key Identifier:
                keyid:DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/9F5F0EC6135911EBBC97C718C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:87:ef:32:72:f8:34:cd:9c:c1:69:66:61:d4:3c:20:ff:db:
         7e:58:73:fb:8f:59:b7:84:e7:1e:ab:42:46:63:35:08:41:b1:
         46:c9:a3:ca:9b:88:cf:83:47:58:68:4e:4b:2e:b4:45:9e:6a:
         2d:4e:71:f0:4e:0e:81:e3:27:77:2b:c1:55:1d:97:9c:f7:5d:
         38:d0:6b:6b:42:e3:5a:df:7b:65:ea:83:b5:1b:b2:0c:e7:c8:
         f7:d4:cb:bd:89:94:be:de:19:01:df:fa:70:83:41:0d:79:3c:
         17:34:ac:d5:ae:c7:2b:2b:b6:54:89:ba:2e:80:87:3a:85:a9:
         93:da:18:7e:0b:89:e0:ee:e0:2f:93:c1:a1:5d:02:23:96:9f:
         69:8b:aa:23:d2:cd:f9:80:f0:ca:a6:56:e0:da:5d:0b:ff:38:
         9e:df:ec:87:cb:07:6e:dc:cd:fa:2a:29:d2:a1:aa:a6:cb:53:
         ce:9c:f2:f8:91:5c:1f:90:4f:f8:58:b6:4b:cb:58:f5:41:9c:
         51:40:8b:2d:47:81:f3:a1:68:9f:34:45:4f:42:b5:4d:ab:38:
         05:87:e9:56:fe:3c:a5:68:6c:2b:58:36:cb:27:ce:6d:24:2d:
         5d:ce:49:2b:a8:f2:88:3c:9c:2d:e2:51:b6:20:7d:8a:9f:e0:
         36:e4:b1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 00:31:21 2024 by rpki-client on console-fra.rpki-client.org