Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/81D0374C475111EA82F8B821C4F9AE02.roa
File:                     81D0374C475111EA82F8B821C4F9AE02.roa (raw, json)
Hash identifier:          WtyrulsdejF5XDbIrnH7eySluYuKPV92/ol6mKYzbjs=
Subject key identifier:   7B:0F:BC:6E:B9:7E:14:F2:AB:DD:84:F5:7F:D2:19:47:0F:41:99:85
Certificate issuer:       /CN=A91D2FC0/serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD
Certificate serial:       09E5
Authority key identifier: 02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/81D0374C475111EA82F8B821C4F9AE02.roa
Signing time:             Wed 06 Dec 2023 20:27:48 +0000
ROA not before:           Wed 06 Dec 2023 20:27:48 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     139708
IP address blocks:        103.143.234.0/23 maxlen: 24
                          2001:df1:9e80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl
                          rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2533 (0x9e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2FC0/serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD
        Validity
            Not Before: Dec  6 20:27:48 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6570d944-5fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2c:8d:1c:dd:50:74:2d:a4:bb:ac:a6:44:a7:
                    4e:e6:5e:73:07:bd:f2:57:7c:50:a0:79:0c:7a:f7:
                    5e:d1:b6:58:c8:f2:eb:26:10:72:02:6d:b4:d0:6f:
                    93:15:7f:93:15:80:15:7a:c4:c3:b9:b2:8e:67:2a:
                    f4:73:7d:68:57:72:ef:c0:e5:36:6b:4e:43:3a:dd:
                    c8:fd:21:a8:32:7f:ae:3a:17:55:85:18:1e:88:8a:
                    f6:57:03:94:bf:8b:cc:dc:48:9e:bb:82:c7:5b:8d:
                    6f:54:c4:80:bf:07:7c:ba:98:b2:e4:18:d0:53:cc:
                    1f:d3:56:2d:06:b9:58:3a:be:a1:d1:31:26:95:76:
                    b0:86:ba:64:a8:e1:4c:15:3b:76:c3:18:73:61:bf:
                    a6:f8:77:9e:29:40:e0:cc:5f:62:38:ab:cd:b7:46:
                    24:34:d6:7d:c1:d4:b6:2d:85:79:16:0d:66:72:87:
                    c8:12:b4:76:b5:10:22:fa:5c:1a:25:10:08:b2:74:
                    b1:f8:81:de:f9:55:27:a4:fe:81:a3:6e:10:3c:cc:
                    62:b3:f0:d6:6e:ae:1f:27:5f:ba:ed:02:2d:3a:50:
                    d6:4a:87:8e:87:65:c6:55:80:c1:08:26:19:99:e8:
                    66:f1:b7:a6:58:c9:12:88:5c:e1:fc:eb:b3:19:93:
                    e1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0F:BC:6E:B9:7E:14:F2:AB:DD:84:F5:7F:D2:19:47:0F:41:99:85
            X509v3 Authority Key Identifier:
                keyid:02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/81D0374C475111EA82F8B821C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.234.0/23
                IPv6:
                  2001:df1:9e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:64:ff:d3:8e:f9:45:d7:a6:ac:4a:a9:40:46:6c:84:a0:a2:
         f7:69:42:66:fc:9e:b3:04:24:fb:86:f0:2a:9a:56:20:40:23:
         9f:8b:04:85:04:54:a0:d2:3b:fd:b6:09:7e:dc:09:a4:9a:96:
         85:4a:a6:18:73:3f:0a:53:05:db:11:94:40:44:21:43:8a:72:
         ae:45:d1:ca:00:6f:66:b9:c8:ac:b5:fe:9f:1b:50:9e:2b:fd:
         8b:76:52:3f:0c:f1:44:f2:4e:fc:f4:fb:96:41:81:c9:44:77:
         c1:1d:c5:43:eb:8b:e7:f0:52:35:c3:73:61:20:4e:43:5f:a5:
         60:bb:7f:96:e4:bd:12:b3:1a:42:ed:94:ab:41:8c:9c:a1:b7:
         cd:1d:67:a8:38:30:b6:a9:67:55:af:90:d6:c6:6b:8c:c6:63:
         0c:87:28:46:15:fb:15:dd:dc:4c:bf:ab:84:2b:ea:5b:cf:4c:
         97:7c:1a:d4:5f:ba:22:0d:8e:ce:30:82:9b:52:2b:6b:ca:29:
         93:13:3c:31:c6:38:9b:af:c3:20:ad:db:b4:89:ff:7a:16:9c:
         b9:6e:48:a9:ec:aa:09:6f:9b:4a:7e:ce:ed:47:45:a5:39:b4:
         53:64:89:a6:07:db:56:3e:27:54:4f:fb:7e:a2:89:fd:96:e9:
         5d:97:4d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:33 2024 by rpki-client on console-fra.rpki-client.org