Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/1E1E9122565411EBA14ED510C4F9AE02.roa
File:                     1E1E9122565411EBA14ED510C4F9AE02.roa (raw, json)
Hash identifier:          j/OpYEtDuYk8PfhysOsvn+uhuepZ3xGdAVnmL79tUAw=
Subject key identifier:   1C:DC:F6:E3:9F:A9:07:88:78:82:88:B6:6C:DC:C8:C8:05:BF:1B:1E
Certificate issuer:       /CN=A91E12AD/serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
Certificate serial:       0A47
Authority key identifier: B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/1E1E9122565411EBA14ED510C4F9AE02.roa
Signing time:             Fri 02 Aug 2024 20:58:17 +0000
ROA not before:           Fri 02 Aug 2024 20:58:17 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     140866
IP address blocks:        103.141.84.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl
                          rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2631 (0xa47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E12AD/serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
        Validity
            Not Before: Aug  2 20:58:17 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66ad4869-490f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:66:8f:67:19:03:64:1b:b7:08:66:21:e5:38:
                    5c:5b:25:8f:16:74:86:5a:fc:54:81:2d:d5:aa:81:
                    65:70:6c:7e:4e:64:ad:47:e2:44:c8:ae:5d:a5:35:
                    00:3a:51:3d:10:cd:e9:fc:6c:4c:e1:9e:3d:8d:83:
                    0e:3f:49:d7:d5:15:d2:53:0d:42:5a:cb:e9:a8:8d:
                    57:5f:90:e9:16:78:ca:43:9f:9f:86:11:85:ac:15:
                    81:1d:50:cf:fe:7c:d2:61:8f:86:ea:a8:12:57:0b:
                    a8:d6:54:3e:f8:dc:b1:e8:b7:5d:81:63:e1:1e:2e:
                    0f:cb:c7:ec:7e:87:93:55:e6:4f:84:f8:ce:c7:ad:
                    e9:75:d4:d4:e3:78:4c:37:0e:15:51:43:cc:a8:4b:
                    65:f6:fb:d9:3b:ba:58:33:99:b7:bd:46:c3:8f:57:
                    bc:79:1d:40:f0:7d:7e:63:fb:84:73:6d:ac:ce:d6:
                    78:de:6f:d2:b2:a7:60:5b:81:ad:14:3b:75:b4:03:
                    63:28:7b:c6:78:1f:e8:4c:23:63:fc:12:b9:b0:de:
                    29:3e:6b:38:3a:f1:90:23:65:cd:fd:b9:ee:b9:42:
                    bf:2c:c0:b2:a8:99:67:ad:78:a8:b2:08:9e:88:90:
                    71:2c:40:d1:2b:ac:f7:1e:5d:95:b9:b2:15:71:5f:
                    67:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DC:F6:E3:9F:A9:07:88:78:82:88:B6:6C:DC:C8:C8:05:BF:1B:1E
            X509v3 Authority Key Identifier:
                keyid:B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/1E1E9122565411EBA14ED510C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:05:47:78:5f:9e:41:a2:46:16:6c:90:a7:03:51:bd:7d:17:
         f9:8e:3c:ea:b1:76:09:5d:7a:51:2e:19:15:71:14:bd:85:9f:
         35:3b:cf:0c:84:1c:1e:27:2d:30:60:e2:b7:b0:05:7f:23:39:
         9f:fd:54:05:0d:ba:5a:e1:2f:de:b1:bc:26:93:74:10:6c:1e:
         a7:63:47:d9:0f:6a:14:62:2b:42:bf:37:ed:ca:df:4c:5c:8a:
         53:12:21:c8:a5:dd:00:8f:94:32:ac:f2:54:23:17:cb:07:a4:
         61:5a:e9:c5:f0:53:b6:37:d4:2a:1a:7f:c6:c4:57:b4:17:c0:
         5a:8a:02:02:bd:c6:ff:b0:bf:88:69:e1:3a:0a:21:b5:c5:8b:
         6d:91:0d:83:1f:79:3c:18:09:ce:75:94:4d:ce:64:d2:56:9f:
         89:97:0c:c6:b7:91:59:48:15:5c:99:b2:76:06:aa:71:6f:cb:
         5f:9c:bf:de:8a:d1:95:b7:49:9c:3a:a9:a5:f0:c8:45:19:90:
         cc:28:1d:b5:ba:f5:31:76:06:aa:ba:80:41:a2:55:d0:b2:58:
         a5:3e:db:30:0f:4a:1c:c7:13:cd:f2:d5:fa:4b:d3:cd:4e:16:
         db:c9:16:4e:33:3c:5a:25:da:49:1f:92:57:ce:b1:23:6c:c9:
         af:50:95:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:48 2024 by rpki-client on console-ams.rpki-client.org