Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/E14490BE9C9511ED8014F84CC4F9AE02.roa
File:                     E14490BE9C9511ED8014F84CC4F9AE02.roa (raw, json)
Hash identifier:          /MgtQcweIAcBhK7+0nnabZoBWUotTZ+eRWCRE/XqRM4=
Subject key identifier:   79:E4:68:D8:D2:AE:F8:30:D7:00:FC:FA:EF:5B:6A:67:85:A5:DF:E7
Certificate issuer:       /CN=A91C9670/serialNumber=F766DE5ECBCA7967052B96DB6F1782BD8FDA6D74
Certificate serial:       0403
Authority key identifier: F7:66:DE:5E:CB:CA:79:67:05:2B:96:DB:6F:17:82:BD:8F:DA:6D:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/E14490BE9C9511ED8014F84CC4F9AE02.roa
Signing time:             Fri 25 Aug 2023 00:41:59 +0000
ROA not before:           Fri 25 Aug 2023 00:41:59 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     135098
IP address blocks:        103.170.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 May 2024 01:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1027 (0x403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9670/serialNumber=F766DE5ECBCA7967052B96DB6F1782BD8FDA6D74
        Validity
            Not Before: Aug 25 00:41:59 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64e7f8d7-72fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9e:08:49:95:2f:64:e0:92:dd:05:5a:79:8a:
                    7f:12:6d:de:0b:5f:8c:c3:d2:61:71:be:63:6a:a4:
                    eb:c1:13:99:4e:2d:3d:15:3b:8d:1c:e3:dd:d6:ea:
                    14:fc:8f:bf:6c:a1:8d:a9:e9:ec:a7:1b:ad:49:8e:
                    f5:d2:68:f3:b9:b9:e7:10:43:f7:78:9b:a8:68:e4:
                    80:0b:11:d8:ba:3e:6b:9f:cf:bb:b7:d5:bb:fe:d4:
                    77:b7:9a:e6:e6:2e:6f:2a:2e:91:a5:7b:43:03:a3:
                    81:2d:84:83:ad:9f:75:29:50:30:c2:46:75:21:2b:
                    83:2e:02:3d:c0:f9:6c:e3:f7:3b:22:3c:71:00:ce:
                    21:cb:a7:49:6b:9f:14:61:e6:53:4f:cd:69:8f:ec:
                    64:30:b5:3c:e6:4c:db:f4:b1:38:d7:3a:1a:ec:0d:
                    f8:1f:89:0e:98:df:0b:b1:df:64:d3:1d:56:45:6d:
                    65:45:15:4f:db:02:16:f0:68:79:8b:13:ad:ae:63:
                    18:ed:0e:40:10:d8:b6:c6:53:12:ce:22:42:7f:32:
                    7b:5d:a0:d8:e0:66:76:e5:aa:23:83:41:5b:f8:6a:
                    3d:31:0c:60:9b:60:32:9e:7a:41:b4:2d:3f:93:44:
                    84:3b:21:81:5a:25:2c:f2:c9:5a:db:f8:c4:86:a4:
                    28:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E4:68:D8:D2:AE:F8:30:D7:00:FC:FA:EF:5B:6A:67:85:A5:DF:E7
            X509v3 Authority Key Identifier:
                keyid:F7:66:DE:5E:CB:CA:79:67:05:2B:96:DB:6F:17:82:BD:8F:DA:6D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/E14490BE9C9511ED8014F84CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:5e:f1:84:c3:02:61:f4:7a:33:73:d1:a0:53:3e:ed:2f:fa:
         b9:db:f6:0a:80:cb:b7:2d:ff:54:77:8f:28:49:82:d5:2a:54:
         cd:59:8c:35:0c:62:30:45:6b:6b:86:79:b5:02:9a:dd:d2:88:
         56:ca:10:8a:4c:87:5a:39:03:73:50:44:56:6b:ad:b7:9d:45:
         60:e0:bf:19:42:9d:16:cc:57:9b:44:4b:ac:c4:9f:f6:42:d3:
         eb:42:17:ae:c2:84:b2:d6:d5:06:b9:34:1a:e9:b7:dc:84:03:
         15:1d:4d:13:05:4b:84:e9:6c:60:dd:24:bf:24:c5:76:be:a7:
         60:30:5d:c4:0c:98:d1:7b:e7:d9:ca:fe:4a:cc:fc:ee:27:37:
         35:ec:33:51:83:aa:f7:5d:e3:66:1e:ed:2e:20:3f:e9:ca:fc:
         fb:6c:e2:bd:fc:60:04:94:a4:86:e6:59:31:8f:f6:a4:7a:b8:
         64:52:5c:ec:c7:c6:8b:30:f0:eb:97:29:6b:b8:f7:cf:54:56:
         d3:0e:78:89:7b:f8:54:c4:dc:33:36:f6:2b:70:d3:5d:d2:f0:
         7e:d4:31:2b:ec:9e:71:5b:27:0d:d9:96:e3:4b:a5:5e:ba:d3:
         7f:e4:94:ea:fa:9c:4b:04:45:14:f5:3d:d7:b7:cd:b9:cb:ce:
         74:49:51:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:53:27 2024 by rpki-client on console-fra.rpki-client.org