Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/471D214809DD11EFAF5F611EC4F9AE02.roa
File:                     471D214809DD11EFAF5F611EC4F9AE02.roa (raw, json)
Hash identifier:          9WiG/1maIY4wdxeUWB0onGASKXK1NVKkXBRvB00V+4c=
Subject key identifier:   B3:EA:24:80:D4:26:B3:32:43:77:A2:E3:1A:9C:BB:39:91:30:BF:30
Certificate issuer:       /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Certificate serial:       EE
Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/471D214809DD11EFAF5F611EC4F9AE02.roa
Signing time:             Sat 04 May 2024 06:12:26 +0000
ROA not before:           Sat 04 May 2024 06:12:26 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     138368
IP address blocks:        103.189.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
                          rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
        Validity
            Not Before: May  4 06:12:26 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6635d1c9-7ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:23:58:e0:1c:ad:47:43:f6:14:4a:9c:9d:15:
                    a5:77:d0:d6:3c:2f:32:86:0c:7f:3e:82:ae:89:19:
                    f7:94:f6:ce:19:88:6b:fe:56:b3:95:91:a2:b7:cf:
                    94:d1:c7:28:d6:a8:f7:cc:b7:22:d4:7c:9b:e2:8c:
                    81:c0:37:3d:a7:91:0a:48:91:25:e8:c3:9a:ed:f7:
                    71:5c:89:37:87:fc:05:05:14:c4:37:4e:49:54:54:
                    f0:fc:8a:eb:d6:15:1a:57:4b:21:6e:92:b4:ed:92:
                    65:5c:8b:00:2c:c8:fc:5c:25:9e:4e:77:c2:f8:bf:
                    c8:14:a1:15:34:ff:13:36:a3:93:6f:ce:6d:21:b7:
                    a3:ef:3a:c6:9f:73:be:06:2b:d6:54:65:0b:97:3a:
                    0e:ca:df:2b:d7:f7:49:af:b6:60:45:7a:54:e8:81:
                    69:9b:19:d6:1e:0a:1b:dc:36:d1:a6:d7:10:25:48:
                    66:40:ed:26:75:cc:43:e1:1c:1c:b0:0a:3e:31:da:
                    2c:7e:ca:38:bf:ce:e8:61:4e:1b:1e:10:88:71:be:
                    07:e6:67:76:11:34:ef:3f:a7:10:90:75:83:cf:f3:
                    69:c8:6a:4c:5a:7c:02:6e:b1:e5:4e:9e:59:9a:70:
                    b0:aa:21:3e:e6:74:e7:ff:85:5c:39:29:f2:20:b0:
                    e1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EA:24:80:D4:26:B3:32:43:77:A2:E3:1A:9C:BB:39:91:30:BF:30
            X509v3 Authority Key Identifier:
                keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/471D214809DD11EFAF5F611EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:44:93:1c:89:4f:e3:1c:d5:f2:ff:0e:ce:f7:8c:3c:82:32:
         02:7d:2e:c4:e7:02:9e:61:7e:5a:d6:d1:8c:f0:d8:1f:8d:9f:
         0c:9a:0a:b3:f7:5e:a1:1d:08:71:b2:06:20:f0:9e:25:48:11:
         d7:b9:cf:b6:a6:31:8e:4f:69:5f:bb:35:b4:cc:2a:0a:e2:77:
         c9:87:8e:b6:9c:24:ea:44:bb:c0:02:21:e6:dd:bc:37:da:03:
         54:42:60:8f:4a:78:e3:61:35:49:71:2c:ca:93:b2:6f:7c:83:
         d7:1d:eb:39:8b:17:63:cc:34:65:78:9a:11:88:48:50:86:63:
         8a:0a:91:a8:76:35:c2:79:90:07:b8:13:12:f2:a7:15:0e:3c:
         3a:4f:1f:5e:a1:be:8c:4a:50:42:49:2e:96:df:cc:7a:1b:88:
         a0:3d:3b:6f:9d:75:a3:ee:bd:be:77:06:87:eb:b3:d0:68:cd:
         c8:ea:c7:80:37:a0:26:56:a1:67:4f:e5:93:26:bd:4c:c6:a5:
         fc:bb:b8:1a:65:d0:e4:f0:bf:2e:d2:42:54:c7:6a:7b:ce:aa:
         53:f9:0c:08:d6:29:5e:d4:64:f3:5f:e1:3f:a0:c8:31:fc:9c:
         a3:c9:a5:48:e1:b8:58:0a:31:a4:86:f8:f7:b6:03:12:97:63:
         ad:c2:3d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:40:45 2024 by rpki-client on console-fra.rpki-client.org