Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/EDA4BE18EF8711EBAF811557C4F9AE02.roa
File:                     EDA4BE18EF8711EBAF811557C4F9AE02.roa (raw, json)
Hash identifier:          /hsEroQ3TZkQMetTWnTa556RJHci46V26XicsZhhKo4=
Subject key identifier:   93:BD:79:47:15:C1:4A:4C:70:08:45:49:EC:F4:D9:2A:A4:9C:64:DC
Certificate issuer:       /CN=A91CFCD3/serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B
Certificate serial:       0410
Authority key identifier: C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/EDA4BE18EF8711EBAF811557C4F9AE02.roa
Signing time:             Tue 19 Sep 2023 00:42:21 +0000
ROA not before:           Tue 19 Sep 2023 00:42:21 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     136519
IP address blocks:        103.170.140.0/24 maxlen: 24
                          103.170.141.0/24 maxlen: 24
                          2001:df7:1c80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl
                          rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 01:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1040 (0x410)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFCD3/serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B
        Validity
            Not Before: Sep 19 00:42:21 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6508ee6d-ea19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4f:39:74:46:7d:2d:90:21:a8:4a:93:4b:74:
                    f7:ea:e0:82:10:6a:e0:4c:53:ba:d2:0b:5d:1c:5d:
                    9c:9d:93:7d:a8:bf:d8:aa:30:01:2f:bd:c9:06:ee:
                    25:06:47:c5:c8:b1:f1:a9:7e:8a:c5:62:fe:e1:21:
                    2f:54:6b:54:76:79:96:80:c2:35:3d:69:48:07:23:
                    73:fb:fa:31:d5:c6:c3:bb:d9:df:9e:42:00:b4:9c:
                    9b:ee:a8:83:d6:aa:be:38:09:50:a8:1d:c6:ce:08:
                    6d:ba:c6:1d:04:52:81:a7:d6:db:c4:2b:17:ce:36:
                    a9:ae:b8:3d:67:4f:f6:58:03:f3:2a:18:38:79:72:
                    95:89:e9:80:97:c1:d6:37:fd:b9:f7:ae:8a:af:40:
                    d7:6d:47:3a:17:2e:28:09:15:57:79:a0:f1:e5:da:
                    fc:fe:73:5e:3a:96:ff:78:a9:09:35:89:37:7c:c3:
                    88:56:bd:b3:fc:97:31:c0:6b:ad:13:ec:19:ad:a9:
                    d5:d6:42:59:78:94:15:4c:5b:cd:8c:15:61:4a:92:
                    7e:35:92:4d:80:05:0d:97:de:a6:11:08:a4:d7:51:
                    13:37:94:4c:fc:d2:ce:d7:41:07:f3:01:4e:5a:ef:
                    4b:57:d1:c8:f5:7e:24:2f:6d:3c:58:7f:0c:74:af:
                    fb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BD:79:47:15:C1:4A:4C:70:08:45:49:EC:F4:D9:2A:A4:9C:64:DC
            X509v3 Authority Key Identifier:
                keyid:C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/EDA4BE18EF8711EBAF811557C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.140.0/23
                IPv6:
                  2001:df7:1c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:ad:b4:8e:24:ac:87:b1:a3:84:4f:25:bb:9d:6e:fe:94:0b:
         ff:70:2d:44:7d:45:2b:5e:af:75:07:88:8d:53:37:17:3c:05:
         42:9e:eb:7b:68:05:41:27:35:34:68:e7:9b:6f:c2:b5:00:e2:
         7e:77:76:62:c8:9b:a6:74:0f:41:01:b0:ff:b4:ff:ea:8f:f3:
         94:f9:4b:13:2a:32:5e:13:ff:30:4a:01:8a:e5:b6:7d:18:61:
         d4:a2:51:c6:ab:f5:bf:7f:1a:dc:ef:36:ed:66:66:62:2b:a8:
         cf:08:a8:de:bf:8f:e7:29:4c:80:8a:8d:36:6d:ea:ec:9b:d3:
         39:97:cc:f2:6f:6a:59:ca:a7:36:ca:51:e3:53:98:ba:81:34:
         d5:24:d3:68:c8:28:09:eb:36:0e:d2:3a:0b:d1:c2:1a:0e:18:
         2b:b7:43:e0:c5:cb:b4:88:95:ed:be:87:40:c2:ff:cb:21:8f:
         4e:3e:1e:b8:1a:8a:ae:61:4f:82:c5:44:1f:c2:0a:47:c7:38:
         1a:f7:3c:ee:d6:cd:49:b3:b6:1d:f6:26:bf:9e:da:96:d1:f8:
         32:a1:37:57:d8:7b:82:0b:ea:bd:f1:39:7e:b9:21:e6:27:ee:
         2c:13:3c:6b:6d:b6:51:4c:39:d7:78:31:20:38:af:16:28:b2:
         41:ba:4a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:06:34 2024 by rpki-client on console-ams.rpki-client.org