Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/B379B0346F4711EA81200366C4F9AE02.roa
File:                     B379B0346F4711EA81200366C4F9AE02.roa (raw, json)
Hash identifier:          FuocMJExMkUp16L3R6FsGdSdFiq3mtbQ0I+3NIZrReg=
Subject key identifier:   57:6E:DF:FA:35:4B:AE:59:35:85:C7:56:FF:9D:11:67:AE:04:47:A1
Certificate issuer:       /CN=A91E3E27/serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B
Certificate serial:       09A7
Authority key identifier: A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/B379B0346F4711EA81200366C4F9AE02.roa
Signing time:             Thu 30 May 2024 21:27:49 +0000
ROA not before:           Thu 30 May 2024 21:27:49 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     39356
IP address blocks:        103.13.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl
                          rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Jun 2024 21:21:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2471 (0x9a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3E27/serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B
        Validity
            Not Before: May 30 21:27:49 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6658ef55-68f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:20:0b:da:94:b6:20:fe:ed:8f:0e:bd:23:d6:
                    a1:e8:2f:3d:c2:9d:51:9c:49:ef:c8:18:41:b4:44:
                    c0:92:98:49:73:38:44:db:a6:01:7a:de:6b:55:34:
                    51:71:e8:c4:55:93:84:5e:c4:b7:b6:8b:d1:15:39:
                    10:99:98:69:5d:73:46:9f:a3:99:48:4f:a2:33:a2:
                    e1:fc:11:6f:99:ed:a6:1c:d2:72:fb:6b:0d:0b:40:
                    8c:1e:59:a9:92:4f:e2:4b:7a:18:93:ab:90:e9:58:
                    8c:21:62:b9:2a:df:9d:c5:65:00:2c:af:57:2b:8b:
                    0c:7e:1d:0e:26:c6:0a:68:af:f8:c8:56:60:a1:7a:
                    9a:ee:30:4b:b1:e5:30:70:a1:eb:76:4d:96:fb:f8:
                    ef:d4:26:1e:43:f4:ff:56:2e:67:35:4d:e9:4b:a9:
                    82:e8:a8:19:34:4e:7e:e5:bc:d6:d7:01:de:ce:20:
                    42:35:b3:7f:36:61:63:b2:aa:e1:57:07:3a:30:f1:
                    8f:ff:5e:4c:d2:78:b2:b2:17:bd:c1:ab:8f:2f:8e:
                    df:0d:e6:d5:33:76:f6:c9:38:16:20:66:d6:df:ab:
                    97:a0:7e:e2:83:fa:e2:cd:46:7f:06:9d:db:91:9c:
                    6e:bb:88:dd:3c:d2:d2:66:77:9c:1d:d9:de:61:e0:
                    25:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6E:DF:FA:35:4B:AE:59:35:85:C7:56:FF:9D:11:67:AE:04:47:A1
            X509v3 Authority Key Identifier:
                keyid:A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/B379B0346F4711EA81200366C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:f5:9d:5f:b1:61:6c:29:04:5b:f8:78:b2:0e:8f:eb:de:eb:
         f9:2e:f5:4b:07:3a:ed:54:b6:0e:a6:2d:17:4c:49:cd:dd:64:
         af:22:97:a2:d5:18:37:6e:d4:76:7d:fd:ef:51:76:6a:61:83:
         04:f8:3a:27:51:25:b3:c6:2a:ae:98:fd:d9:d6:d2:c0:7e:3a:
         d3:89:eb:66:dc:e4:8d:d8:ac:a7:f4:7e:c8:be:50:7a:3d:aa:
         dd:7a:0f:29:20:e7:ce:ce:7b:62:75:6a:dd:93:67:45:dc:44:
         cb:4c:b6:7d:66:4e:e1:91:8b:7d:6c:bd:95:fc:8a:27:fa:dc:
         95:1d:b2:fb:1d:81:a4:6f:f7:eb:45:e5:b7:73:c0:4d:32:7b:
         13:23:e8:46:3f:9b:d7:b7:fd:8f:66:c3:58:59:3d:57:87:40:
         08:9b:d6:3c:7a:ee:95:44:d7:1a:31:18:2b:77:ee:84:24:74:
         44:83:f4:70:1c:9b:21:8b:d6:4f:58:70:26:4b:6a:d2:a3:25:
         2d:2d:54:40:f6:f6:10:c8:10:99:c9:cc:72:27:56:31:34:33:
         be:7f:86:da:a2:70:c2:99:96:df:a3:f8:47:91:35:a3:98:24:
         2d:e2:04:20:a1:ee:94:87:d0:29:3b:3f:1b:9d:57:23:34:ea:
         c0:3f:31:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 22:26:11 2024 by rpki-client on console-fra.rpki-client.org