Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/DE183F1CF46611EC815F7283C4F9AE02.roa
File:                     DE183F1CF46611EC815F7283C4F9AE02.roa (raw, json)
Hash identifier:          XRT7+fsGXgE2mmlj9IZm11pZ12/fHHV3iS5brnnZPc0=
Subject key identifier:   9B:E5:C9:EE:BD:81:DB:8B:C8:08:E2:08:2A:C9:AE:66:29:59:D3:74
Certificate issuer:       /CN=A91D3CA7/serialNumber=D397E78C6DD3C6968513341532C72188D77567AF
Certificate serial:       01F1
Authority key identifier: D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/DE183F1CF46611EC815F7283C4F9AE02.roa
Signing time:             Wed 01 May 2024 04:37:01 +0000
ROA not before:           Wed 01 May 2024 04:37:01 +0000
ROA not after:            Thu 29 Aug 2024 00:00:00 +0000
asID:                     138629
IP address blocks:        103.134.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl
                          rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 May 2024 04:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3CA7/serialNumber=D397E78C6DD3C6968513341532C72188D77567AF
        Validity
            Not Before: May  1 04:37:01 2024 GMT
            Not After : Aug 29 00:00:00 2024 GMT
        Subject: CN=6631c6ed-0e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:8e:e2:a0:ed:22:77:58:d8:e8:c2:fb:28:
                    c8:7d:76:e3:b1:de:4d:b9:d4:29:50:d6:86:d9:0d:
                    28:7e:e2:73:60:4f:c1:fa:f8:93:17:a1:e6:41:d5:
                    f0:c8:72:7e:55:97:89:46:20:4c:31:7d:a7:78:0a:
                    bd:48:24:6d:fc:7b:4d:ba:60:e2:e8:99:df:70:ce:
                    0b:94:68:7b:fd:b3:e5:9a:e3:a6:c6:d8:17:02:4e:
                    e2:8b:39:40:61:e9:60:24:1b:93:f8:e5:44:22:9c:
                    86:2b:29:14:e3:81:dd:dc:eb:c4:86:1c:d6:cd:00:
                    16:5b:ac:cf:d4:05:26:6a:07:55:8c:17:d7:15:68:
                    11:88:01:26:8b:00:65:82:b5:eb:26:5c:22:9e:6f:
                    de:a2:00:7d:c5:2a:7b:45:d7:8a:ae:f4:b7:6c:39:
                    ca:07:26:8f:d6:b8:b7:17:fd:15:1b:63:2d:7a:8b:
                    ae:44:9c:c3:30:1b:ea:7f:01:37:00:00:44:2c:e3:
                    16:1a:38:45:0d:ae:af:3e:8e:a9:ca:dd:d8:c6:b6:
                    54:d4:47:35:8c:66:98:be:40:2b:93:7f:c4:b9:cc:
                    17:90:4c:9f:6d:07:12:31:1e:57:39:e9:86:83:25:
                    c0:63:fd:26:4f:6a:b7:4d:e8:c1:b0:05:a3:b3:66:
                    ca:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E5:C9:EE:BD:81:DB:8B:C8:08:E2:08:2A:C9:AE:66:29:59:D3:74
            X509v3 Authority Key Identifier:
                keyid:D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/DE183F1CF46611EC815F7283C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:9d:3a:01:83:36:31:1f:05:1b:ce:f5:9d:ff:9d:71:cb:82:
         0c:53:89:7e:38:b0:3f:dc:1a:17:f5:09:22:ee:f6:9a:95:12:
         d1:24:65:0e:7e:1b:ef:c4:dc:12:5b:79:81:87:0d:be:1f:87:
         03:b4:56:2e:54:fc:e4:1d:04:14:d9:7b:14:e6:89:f4:62:4f:
         63:a3:46:4b:49:a4:35:dc:82:3d:3d:00:8e:6e:21:f8:70:c2:
         8f:7f:f0:ea:2c:0e:e7:3f:6d:c6:11:16:c7:96:a3:f0:f0:9e:
         a7:96:93:26:3f:d5:32:6e:61:60:51:fb:59:30:cc:d2:bf:4e:
         b0:e9:92:eb:da:10:9c:d5:c9:e8:12:d3:a9:e4:b7:29:0e:fb:
         36:27:e3:21:a2:65:03:03:4d:b0:fb:f1:f7:e0:2f:82:68:a6:
         17:23:35:18:3a:43:9c:80:8a:bc:09:f6:aa:76:f7:93:ad:f6:
         6c:1a:f9:78:94:56:bf:d2:ef:e1:0a:5b:0a:b8:0d:50:f0:20:
         6b:27:00:57:e7:b3:de:d8:91:01:bd:56:9d:20:9e:b7:b0:75:
         81:f3:2c:4e:68:e1:63:4a:74:b1:28:67:05:00:f7:61:bd:c7:
         25:b1:93:c5:2c:a0:90:c1:bb:47:d6:29:ca:a8:7c:73:83:50:
         7b:da:e6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 04:45:54 2024 by rpki-client on console-fra.rpki-client.org