Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/AE929D88823711E782F9A440C4F9AE02.roa
File:                     AE929D88823711E782F9A440C4F9AE02.roa (raw, json)
Hash identifier:          JiV9mLYeWZvcL2vahqcJlLwXx2ErSbCIwbymjkbUaQU=
Subject key identifier:   CB:94:30:14:9B:B1:9C:79:58:B9:3C:09:C2:B2:B3:FB:91:39:47:5D
Certificate issuer:       /CN=A91DC5E3/serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC
Certificate serial:       17B1
Authority key identifier: 30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/AE929D88823711E782F9A440C4F9AE02.roa
Signing time:             Thu 20 Jul 2023 16:53:36 +0000
ROA not before:           Thu 20 Jul 2023 16:53:36 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     136738
IP address blocks:        103.94.246.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl
                          rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 16:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6065 (0x17b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC5E3/serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC
        Validity
            Not Before: Jul 20 16:53:36 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64b96690-1f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:68:6b:fa:77:3c:99:74:27:50:ac:41:e7:c5:
                    c9:72:91:ab:cc:02:32:be:73:8e:66:0b:8e:a9:b0:
                    bf:cf:74:d6:5a:91:bb:1c:70:55:7c:8e:67:e6:dc:
                    c7:ae:8e:3b:63:b5:3e:0b:e8:82:d8:48:0e:87:71:
                    75:94:0d:1b:f5:b5:cb:d1:7b:8d:cc:c7:38:68:31:
                    d7:6f:bf:cf:74:d9:7e:86:a3:d5:95:d2:92:b4:ea:
                    5a:53:4e:80:18:79:a3:ef:4e:e9:94:b4:0b:4a:84:
                    df:ab:e4:28:31:e9:4e:82:af:f4:9f:38:20:69:3d:
                    d3:1f:09:53:f3:45:bc:53:a1:bc:3f:7e:7f:c9:61:
                    fd:51:ab:52:8a:fb:ce:19:d0:e3:e2:99:dd:46:51:
                    f4:66:c9:ae:93:b8:b7:71:60:9c:a2:e2:c3:39:d7:
                    36:d0:1b:e5:d4:f9:12:ea:bb:1f:4c:00:b8:f9:95:
                    d2:4e:ff:43:29:ac:5f:6f:23:3a:e9:aa:74:3c:81:
                    62:5b:e3:40:da:44:dd:32:17:52:52:94:95:22:a9:
                    4e:73:43:f9:1d:83:c2:4c:7c:72:ae:8f:d5:f7:8a:
                    d4:4c:24:1b:c5:d2:ae:c3:e1:0a:3d:a7:9e:d3:da:
                    bc:23:ba:dc:48:5f:82:07:59:53:41:7f:3a:e9:f0:
                    04:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:94:30:14:9B:B1:9C:79:58:B9:3C:09:C2:B2:B3:FB:91:39:47:5D
            X509v3 Authority Key Identifier:
                keyid:30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/AE929D88823711E782F9A440C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:83:3f:60:41:62:7f:85:2c:f8:17:3a:e8:1a:55:50:7e:4f:
         41:33:c8:3d:d6:10:1c:57:06:9e:ab:45:6a:db:4a:4a:e6:65:
         19:23:83:f5:fa:d5:6a:c1:c5:81:fe:0d:7c:92:16:4c:5c:d4:
         47:c4:46:be:0f:fc:d7:14:e1:ef:28:70:dc:91:35:83:a5:42:
         43:42:05:5a:c2:7a:2b:b5:5b:78:69:81:b4:57:21:ff:af:82:
         3b:b2:d8:86:e7:d2:44:82:25:4f:0e:66:6b:56:4a:65:db:ed:
         21:2e:6d:94:f2:39:f0:4d:ab:4c:80:99:b0:6c:8c:96:40:a4:
         f5:d8:5f:fd:1e:48:65:01:18:0b:d7:e2:8c:67:25:55:1f:f2:
         a5:ef:77:2d:29:d6:aa:45:84:9f:37:da:11:70:1d:b4:bc:ae:
         b2:51:ec:c2:34:5a:5a:15:b6:0c:4c:81:b1:e6:1f:8f:51:aa:
         8d:18:9e:12:34:ea:83:29:b6:ac:cb:39:49:2f:23:74:2d:90:
         29:fe:4e:b2:23:6d:01:27:ef:e3:a3:86:82:ae:26:01:31:c7:
         92:eb:a7:3f:b1:c0:22:84:73:57:7c:ba:9e:33:08:67:0b:95:
         34:37:52:17:19:61:28:22:43:a8:72:31:b5:23:86:9a:a8:7c:
         92:05:51:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:51:52 2024 by rpki-client on console-ams.rpki-client.org