Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/D831B39ED77311ED949D8419C4F9AE02.roa
File:                     D831B39ED77311ED949D8419C4F9AE02.roa (raw, json)
Hash identifier:          9kQKFEDsx84E4CpywA7tSIWQG3TRzqIWi8CdC1zIoK4=
Subject key identifier:   CC:A1:3A:BC:6F:30:26:58:75:6B:01:C3:36:C5:08:83:BC:0F:3A:44
Certificate issuer:       /CN=A91DF0A8/serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE
Certificate serial:       C4
Authority key identifier: 4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/D831B39ED77311ED949D8419C4F9AE02.roa
Signing time:             Fri 19 Apr 2024 06:08:58 +0000
ROA not before:           Fri 19 Apr 2024 06:08:58 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     151057
IP address blocks:        103.122.206.0/23 maxlen: 23
                          103.122.206.0/24 maxlen: 24
                          103.122.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl
                          rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF0A8/serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE
        Validity
            Not Before: Apr 19 06:08:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66220a7a-ab1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c0:4c:dc:11:ea:ef:a4:4a:52:a9:09:5e:17:
                    f7:16:05:23:cd:20:83:8e:d4:7b:96:3d:8c:51:cd:
                    98:61:d4:ca:c8:75:6f:57:ef:12:fa:23:68:09:fe:
                    33:1c:9d:06:d0:db:94:ae:22:03:41:78:91:3e:7a:
                    34:f2:f2:fc:51:af:40:3f:ec:31:86:b8:22:44:84:
                    fe:06:66:5d:1f:b3:15:1a:22:cc:48:c7:0a:2d:54:
                    29:00:43:87:6b:59:8e:10:7c:ec:87:df:32:33:8a:
                    82:f4:31:8b:aa:a3:e8:b8:33:ae:40:96:ec:06:8c:
                    60:b2:92:56:83:2e:e0:63:c9:84:0b:ee:64:7a:19:
                    de:b9:76:35:26:13:ba:79:52:0f:a8:6c:76:df:ad:
                    4c:ea:80:5f:c1:c6:ae:84:c9:69:d4:ae:a6:42:9c:
                    06:0d:2b:6b:bf:68:30:c1:37:72:a4:6a:69:3c:1d:
                    77:d4:55:7c:f7:bb:61:80:bb:81:f0:24:0d:d9:bd:
                    a4:c2:2b:97:5f:2c:25:7e:f8:0e:6b:50:91:a8:59:
                    b6:9e:85:41:bf:cc:2e:5d:7a:f5:f0:ac:ea:ce:e3:
                    a6:7f:14:e4:96:c1:dc:75:1e:f3:0d:b9:b5:b2:5f:
                    82:cb:5c:57:91:6f:1d:8b:34:33:a9:37:13:86:ee:
                    36:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A1:3A:BC:6F:30:26:58:75:6B:01:C3:36:C5:08:83:BC:0F:3A:44
            X509v3 Authority Key Identifier:
                keyid:4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/D831B39ED77311ED949D8419C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:01:17:52:25:80:01:20:85:ca:65:38:57:c8:a2:f2:2e:de:
         f6:94:a9:db:3c:ea:6c:fa:4e:bf:ab:99:46:c7:4e:bc:ed:bf:
         f2:76:b7:f1:84:3c:5c:9c:51:f5:43:5d:6f:93:0d:52:ac:13:
         70:bb:27:d0:b9:fc:83:35:55:06:6e:d4:44:93:44:45:d7:a4:
         0b:2d:8e:29:95:ec:56:1d:23:d7:d2:35:ce:54:b2:5a:36:97:
         3d:68:67:41:c9:4d:11:07:ae:11:47:d6:65:6e:2f:a4:09:73:
         ef:88:aa:0f:7f:09:c4:65:d8:f1:c5:8e:f2:a2:3f:1b:77:0f:
         85:07:f5:7c:fa:2b:12:6f:a4:d7:59:2f:9a:b8:a1:11:0b:5d:
         03:69:33:60:de:7d:6a:53:d7:65:76:da:9f:96:73:17:03:91:
         42:c0:71:b7:4d:19:a2:c3:9b:aa:c0:7d:dd:32:96:f7:b5:67:
         cf:f3:e4:4f:a0:8d:84:60:03:8f:78:82:8c:13:74:0f:38:51:
         03:c6:5c:e3:26:69:06:f1:23:05:d6:03:6a:a5:ba:5d:07:25:
         a3:c1:f8:60:67:00:63:26:cf:6e:52:9e:4c:b3:fb:81:a6:57:
         7c:ae:e8:44:5a:c7:03:1c:22:df:73:53:45:a2:27:15:8b:e9:
         1d:b3:a2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:59 2024 by rpki-client on console-fra.rpki-client.org