Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/9F1B80CA372311EEACE5BF61C4F9AE02.roa
File:                     9F1B80CA372311EEACE5BF61C4F9AE02.roa (raw, json)
Hash identifier:          v9lyQtjtYWy+9wvU05wZNHA4sTJm6Xiwl/FoG5KIk+o=
Subject key identifier:   83:9D:40:D0:06:F7:ED:23:1D:DE:CB:E0:E5:B0:AF:95:30:1F:5D:F1
Certificate issuer:       /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
Certificate serial:       0D
Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/9F1B80CA372311EEACE5BF61C4F9AE02.roa
Signing time:             Sat 12 Aug 2023 13:07:03 +0000
ROA not before:           Sat 12 Aug 2023 13:07:03 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        103.207.60.0/24 maxlen: 24
                          103.207.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl
                          rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 06:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
        Validity
            Not Before: Aug 12 13:07:03 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64d783f6-10a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:80:5d:ca:12:20:fc:4b:1a:06:3f:f6:69:a5:
                    ba:0a:a0:b4:3b:ba:ad:db:f3:29:15:77:cd:10:a8:
                    e2:15:66:07:39:d3:a2:6f:55:e8:f7:e9:34:8f:7c:
                    3f:a2:50:bd:f3:c2:94:9f:f0:c8:4b:99:56:e7:ea:
                    66:ee:d2:b7:41:3c:07:73:0f:b0:22:c8:6e:87:c1:
                    b5:7b:e0:e4:70:85:e6:b4:83:2a:91:6b:48:3e:90:
                    46:6d:4b:d3:e7:35:8b:46:66:76:5a:0b:80:c5:35:
                    02:5f:f7:b3:af:36:fa:c2:09:0a:cb:48:b0:e7:a9:
                    b3:60:54:1a:1f:a3:26:42:dd:bd:20:50:e5:5b:a3:
                    b8:21:a3:48:e2:bd:f7:ee:ef:1c:eb:f5:1b:f3:f0:
                    4b:5a:a1:4a:b0:8e:a7:8b:f8:01:55:fc:22:fa:ae:
                    7e:e5:35:82:fe:fd:1c:11:4b:09:d4:d3:ff:20:36:
                    cb:9d:39:fa:77:39:49:c0:cb:ec:55:10:80:2b:e6:
                    27:c3:1b:78:c8:22:18:f9:45:94:e3:3f:08:2d:10:
                    b6:af:51:5b:e9:b3:e7:87:6d:31:26:fb:6a:3a:78:
                    5d:db:28:b7:75:a9:a8:ee:0f:32:05:df:84:3e:f8:
                    6d:2e:fe:44:e5:45:aa:9e:40:76:c2:a2:44:8f:e2:
                    92:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9D:40:D0:06:F7:ED:23:1D:DE:CB:E0:E5:B0:AF:95:30:1F:5D:F1
            X509v3 Authority Key Identifier:
                keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/9F1B80CA372311EEACE5BF61C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:4a:83:a1:38:46:f1:af:90:e4:aa:1e:7f:65:4e:12:f2:6a:
         06:7d:ab:57:d8:47:61:8e:c6:df:c6:57:68:32:1f:5b:95:2a:
         65:35:4e:64:b5:77:5d:d5:c2:dc:f0:b5:ad:b2:94:6c:9a:ce:
         f1:76:de:9a:02:5a:e3:01:53:6d:c2:a7:ad:94:48:51:44:80:
         25:ac:06:21:5a:c2:60:21:e3:f2:3b:08:7e:9f:4e:a4:1d:08:
         87:2c:42:72:07:ec:90:be:54:34:aa:41:77:c4:ed:67:af:13:
         c3:32:fe:ed:eb:b6:97:7e:37:c8:bc:d6:60:e3:46:e8:4f:a8:
         23:e3:aa:59:b0:51:c3:fb:7f:6d:9b:a6:53:87:d8:4a:07:b2:
         61:b5:88:e6:60:2e:ae:69:ef:5e:53:0e:e4:79:db:11:f7:d4:
         b7:26:6e:6d:4c:1e:10:dc:f3:ba:47:8d:2d:59:61:0e:d5:16:
         8a:6b:c0:1a:ff:c8:d2:60:bc:7e:32:27:ff:d2:63:4a:1f:26:
         75:0c:5d:31:29:ab:12:e2:48:5c:53:22:76:38:98:e0:9e:2c:
         86:13:56:a2:a9:a4:a1:09:13:41:bc:e9:d4:4e:c0:b7:d5:e6:
         d8:8d:93:f0:6a:6c:13:76:eb:f9:94:6b:2b:bb:f6:33:30:58:
         8a:ed:5c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 07:55:43 2024 by rpki-client on console-fra.rpki-client.org