Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/06F741E24D6611EC904C6735C4F9AE02.roa
File:                     06F741E24D6611EC904C6735C4F9AE02.roa (raw, json)
Hash identifier:          q0fCWE2mgkN7GI3kBJKP025XUut6leYUdARwUVA8nZc=
Subject key identifier:   79:14:4D:60:99:4B:32:10:C6:8B:9D:92:C2:81:A6:E2:20:01:5B:E9
Certificate issuer:       /CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225
Certificate serial:       0C0B
Authority key identifier: E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/06F741E24D6611EC904C6735C4F9AE02.roa
Signing time:             Tue 18 Jul 2023 18:35:59 +0000
ROA not before:           Tue 18 Jul 2023 18:35:59 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     17557
IP address blocks:        103.141.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl
                          rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3083 (0xc0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225
        Validity
            Not Before: Jul 18 18:35:59 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64b6db8f-8bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5f:81:c8:7c:f9:b6:44:a7:74:cf:13:07:f7:
                    2c:32:c9:f8:f0:aa:96:ee:4f:8b:96:c0:53:a6:62:
                    46:05:03:52:39:6e:45:a1:a3:e0:1b:74:4d:76:fb:
                    f6:d4:c5:ec:a2:f8:62:02:9e:5a:f9:32:85:4e:44:
                    ed:0b:a3:37:47:f1:a5:9d:38:19:99:11:75:a3:93:
                    c0:33:21:8c:36:7a:fd:0e:38:7f:cd:60:81:03:18:
                    f7:c4:a7:ec:82:99:c7:a8:c7:73:f9:51:6a:27:03:
                    aa:e7:10:49:3f:10:6d:59:a2:ef:04:d4:91:56:72:
                    1a:96:39:98:f8:39:bf:38:c9:30:e9:de:7a:5c:8d:
                    a4:af:f0:e1:fb:49:6c:f9:89:6a:ad:2a:19:1a:ad:
                    ec:ac:f6:b4:7d:1f:c9:cd:95:6d:9a:1c:31:84:d9:
                    73:77:24:9b:ab:a1:a8:6b:71:b3:be:17:5e:b7:e9:
                    9e:19:eb:ba:40:7f:cc:e8:9b:f6:3e:8e:c0:59:32:
                    3b:d3:85:38:a7:82:0e:23:c2:41:73:9d:a3:6a:a6:
                    f0:e9:fd:12:17:29:de:59:3f:fd:a0:f1:2c:21:20:
                    6a:f5:c6:ef:df:d0:08:37:49:f0:e9:b8:f2:25:6f:
                    dd:95:a8:2f:71:b7:4a:a4:2c:5c:88:5c:bc:5a:db:
                    19:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:14:4D:60:99:4B:32:10:C6:8B:9D:92:C2:81:A6:E2:20:01:5B:E9
            X509v3 Authority Key Identifier:
                keyid:E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/06F741E24D6611EC904C6735C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:ae:ce:ea:31:48:59:bd:e2:1d:58:db:d1:3c:20:5c:59:de:
         f4:33:4a:d3:04:88:be:e2:ac:c7:44:44:b8:db:29:74:06:4f:
         e6:8c:88:c7:a4:27:c9:d6:01:e0:f8:b8:03:5d:58:0f:28:94:
         09:7e:c7:0a:d4:cc:6c:f5:86:05:6d:c4:2b:15:f8:e4:4d:63:
         06:89:13:28:2f:2c:55:28:c4:8b:2b:48:65:ae:8e:4e:f1:0b:
         61:13:52:62:03:40:32:e5:c5:04:6a:43:97:29:20:6b:89:ce:
         47:3f:0f:f3:62:f9:81:c9:d7:65:1b:ab:4b:77:53:09:71:fd:
         43:40:02:1a:63:70:41:d5:a1:ae:f5:22:36:6e:c5:1b:cf:a5:
         65:27:30:1f:94:89:fe:ad:7d:d6:a2:d1:26:d8:c0:7e:82:06:
         9b:61:3c:a4:38:6c:fe:21:5e:2e:6a:1a:b9:dd:ea:da:ba:57:
         94:ba:ff:67:a4:8e:be:50:a8:2a:73:d9:75:f4:fa:52:e0:04:
         c4:96:ec:01:11:36:9b:63:c7:f3:59:ee:9a:cc:f1:b2:3a:7f:
         3d:48:30:ba:9e:7b:59:cc:5c:57:fc:b5:81:e0:fb:31:92:e3:
         79:ab:77:e6:a2:12:f9:77:0e:b7:bc:fc:c9:73:1f:fd:20:5d:
         51:87:9f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:36:05 2024 by rpki-client on console-ams.rpki-client.org