Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/B6FCD4F60CD111ECABD2264AC4F9AE02.roa
File:                     B6FCD4F60CD111ECABD2264AC4F9AE02.roa (raw, json)
Hash identifier:          UJaZLCJGHbcF3AUiHfA/17edU57SpLXg2ocdTCk51jU=
Subject key identifier:   E2:25:ED:78:6B:14:8F:0E:69:10:76:63:5F:C3:5B:9F:31:E8:5D:96
Certificate issuer:       /CN=A91D2F93/serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
Certificate serial:       058B
Authority key identifier: 6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/B6FCD4F60CD111ECABD2264AC4F9AE02.roa
Signing time:             Fri 04 Aug 2023 23:20:13 +0000
ROA not before:           Fri 04 Aug 2023 23:20:13 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     136950
IP address blocks:        103.96.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl
                          rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1419 (0x58b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2F93/serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
        Validity
            Not Before: Aug  4 23:20:13 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64cd87ad-84b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a6:c8:4a:2e:cd:be:c5:37:a3:95:21:b9:c9:
                    97:39:77:b2:fc:b3:4e:c6:3d:bb:18:56:2c:03:35:
                    ac:e3:c1:bf:50:fd:04:42:f8:49:2a:d2:62:12:44:
                    77:49:ce:6f:e0:17:a9:7f:7c:70:da:d3:d2:56:48:
                    05:7e:91:1c:b0:ed:ac:ee:10:14:99:93:9d:50:64:
                    0b:f4:05:84:b7:79:db:d3:7a:11:cb:58:a3:06:e0:
                    57:83:76:6b:33:90:85:ed:9d:2c:fa:5d:76:94:25:
                    00:68:66:04:21:dc:df:76:0d:0a:bb:2f:79:5e:b5:
                    a2:51:32:79:df:03:28:f0:0d:b5:b7:9b:04:15:86:
                    cc:ae:a8:b3:8e:1b:db:87:f3:43:33:9e:55:26:0f:
                    31:07:0f:c2:91:02:75:0d:08:52:20:3f:35:4b:a7:
                    20:b9:70:d6:18:89:bf:6f:9c:6e:79:c5:76:ac:68:
                    87:e4:7b:5d:f6:98:b2:9e:bc:1f:61:e8:11:13:69:
                    c4:c4:4a:1a:5a:08:5b:ee:41:61:75:d8:b9:4e:d6:
                    60:9b:c1:f3:3e:07:da:0f:2e:03:e8:53:bf:73:0f:
                    f0:7b:f9:c6:27:20:57:5b:98:86:f3:a2:f3:56:dc:
                    13:46:dc:99:ea:73:87:ea:18:3e:ea:1d:a2:0e:d0:
                    eb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:25:ED:78:6B:14:8F:0E:69:10:76:63:5F:C3:5B:9F:31:E8:5D:96
            X509v3 Authority Key Identifier:
                keyid:6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/B6FCD4F60CD111ECABD2264AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:4a:da:29:fc:38:b4:81:92:c4:6c:dc:91:b4:0a:9f:5c:0e:
         88:46:0e:7e:5d:35:ec:02:70:b1:89:6b:05:5c:60:b3:a2:e5:
         f0:8c:f4:70:f1:22:ea:cb:08:54:74:49:e8:62:d5:d7:a2:da:
         05:e1:dc:18:42:73:4a:2c:57:e2:6a:8c:e8:48:6d:29:49:d0:
         78:28:b6:dd:5a:d9:8f:23:c1:79:ca:e9:a4:5a:1b:e4:e9:59:
         fc:02:4f:a9:38:11:c2:4c:66:b5:5f:e9:15:6f:51:ce:87:fe:
         40:30:b6:4f:6c:de:f8:94:86:45:15:bf:e0:0b:47:6a:43:f9:
         e8:34:31:24:d9:ff:10:7f:7a:42:58:cb:bf:f4:1c:dc:6c:88:
         38:00:55:7e:58:bd:c0:f2:91:16:37:1d:22:f9:92:e6:d2:7a:
         c2:0e:64:3f:0c:68:0d:62:97:73:a4:4a:63:4d:75:e3:05:d0:
         93:ca:78:99:b9:0a:ea:4e:66:7e:05:7b:05:c4:5f:03:cc:6e:
         05:f0:f7:66:f1:a7:b4:22:d3:bc:60:1f:f4:ca:11:66:3e:34:
         dd:38:05:37:6b:41:d3:22:ef:ad:c1:69:17:4a:88:51:8e:e2:
         d0:3e:70:72:f6:83:86:9d:3e:1d:9f:ac:2f:00:cb:f0:92:c0:
         10:52:23:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:22:24 2024 by rpki-client on console-fra.rpki-client.org