Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/31AA8496B62811E7882B893BC4F9AE02.roa
File:                     31AA8496B62811E7882B893BC4F9AE02.roa (raw, json)
Hash identifier:          TzvQgcIEdDiZ2vx98Eai/8pokoL7PkZgm06lLl+dtq8=
Subject key identifier:   28:F0:82:1C:D2:33:8B:1A:A0:9A:E7:EA:BD:76:A8:41:61:93:6C:00
Certificate issuer:       /CN=A91DE10F/serialNumber=343C82713761C58E82450D94AA57967DF9B46F15
Certificate serial:       1768
Authority key identifier: 34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/31AA8496B62811E7882B893BC4F9AE02.roa
Signing time:             Fri 12 Jul 2024 17:24:38 +0000
ROA not before:           Fri 12 Jul 2024 17:24:38 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     136618
IP address blocks:        103.94.134.0/24 maxlen: 24
                          103.94.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl
                          rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5992 (0x1768)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE10F/serialNumber=343C82713761C58E82450D94AA57967DF9B46F15
        Validity
            Not Before: Jul 12 17:24:38 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=669166d5-9bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:17:13:ee:c4:0a:cb:6c:64:17:9c:31:cd:
                    45:d7:1b:0a:b4:40:6c:99:73:85:08:2e:df:8b:f2:
                    84:68:47:33:68:98:54:fc:9b:1c:b4:12:c9:f8:6b:
                    07:16:64:3b:3f:d7:61:22:41:be:84:30:28:5a:84:
                    04:5d:a0:47:54:7b:3b:46:ea:e7:bd:b5:ce:5d:e9:
                    6d:c9:b3:38:1d:72:77:33:95:a0:5e:98:fc:4d:47:
                    33:a4:6d:92:f2:6b:b4:45:64:7e:82:0f:04:9e:37:
                    95:82:42:81:78:ca:4d:94:a3:aa:80:1d:0f:d2:29:
                    a7:2f:89:55:e1:ff:e6:4b:c8:c6:fb:e3:51:35:40:
                    04:88:71:ca:0f:d4:df:55:49:45:7d:30:52:08:89:
                    d1:e0:31:87:a3:df:23:21:8f:43:48:57:f6:67:18:
                    97:0d:21:31:6c:39:7f:62:65:7a:4a:db:17:18:a2:
                    e2:ec:b1:25:90:c2:ac:86:af:b8:df:4e:59:20:12:
                    20:4f:08:67:7d:b1:58:13:ae:d7:55:7c:8c:4d:6c:
                    3d:70:93:c6:db:10:c7:12:8f:9f:db:aa:7b:c1:c6:
                    c0:59:4f:57:73:22:07:cf:4e:53:5b:d8:5a:62:89:
                    d4:17:f3:5a:fc:54:57:87:25:8e:4a:b2:25:a2:4f:
                    b5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F0:82:1C:D2:33:8B:1A:A0:9A:E7:EA:BD:76:A8:41:61:93:6C:00
            X509v3 Authority Key Identifier:
                keyid:34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/31AA8496B62811E7882B893BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:ef:80:9d:64:63:13:ed:b0:99:2f:6c:6e:98:6d:aa:56:0d:
         2a:c7:35:d4:21:ac:85:1e:26:b7:81:66:2c:db:fd:b1:ea:df:
         ee:54:73:cc:7f:7a:b2:d1:f3:a3:dc:89:8b:97:bd:5d:47:8d:
         b4:36:66:22:9d:ba:7d:6d:65:4a:0e:c8:41:6c:82:0e:60:ef:
         fe:35:05:aa:88:4a:f4:3c:27:cc:9e:74:23:a8:d1:ea:4c:f1:
         52:3e:dd:3d:f5:f5:cd:00:d3:e9:cd:c6:df:55:9a:15:a0:4a:
         72:dc:a3:63:ce:71:cd:50:d8:16:2d:7e:59:2a:6c:01:7a:5a:
         50:58:1d:9c:f5:50:ff:07:d9:8e:10:ec:4c:1b:a7:bb:ad:83:
         c9:18:af:11:49:a2:5f:cb:e0:ad:db:f7:c8:e5:55:e9:b2:a3:
         2e:3a:3e:db:f1:05:96:4e:e5:35:4a:e9:e1:5c:c0:b7:c5:eb:
         0c:94:73:ce:92:5c:ce:31:20:f6:9d:71:08:95:7c:76:cd:2d:
         34:e8:55:7e:65:81:0a:45:cf:18:2a:92:06:61:b3:13:7e:e0:
         cb:80:02:bb:e3:b6:00:83:b8:a2:2a:5b:e5:0b:29:87:4b:07:
         5b:51:2f:5e:28:ed:ca:b7:d3:8c:c5:6f:54:b8:de:0b:e7:3e:
         c4:a1:57:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:19 2024 by rpki-client on console-ams.rpki-client.org