Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/EA41FB0EB6A911EAB0EB257EC4F9AE02.roa
File:                     EA41FB0EB6A911EAB0EB257EC4F9AE02.roa (raw, json)
Hash identifier:          e87UO/bBM1qotzcb+px968JO8+qdT33ozHUSLg/50Ao=
Subject key identifier:   08:7F:EE:99:3E:74:90:9B:68:6E:32:D5:D6:D9:F9:A4:DD:D7:49:C8
Certificate issuer:       /CN=A91E563F/serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
Certificate serial:       0831
Authority key identifier: 48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/EA41FB0EB6A911EAB0EB257EC4F9AE02.roa
Signing time:             Fri 12 Jul 2024 21:40:01 +0000
ROA not before:           Fri 12 Jul 2024 21:40:01 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     4775
IP address blocks:        103.141.100.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl
                          rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2097 (0x831)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E563F/serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
        Validity
            Not Before: Jul 12 21:40:01 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6691a2b0-1782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cb:74:62:66:1a:a4:35:e4:fd:32:8d:f6:59:
                    b2:54:28:59:67:8c:33:8e:88:c7:5c:4d:9b:4e:99:
                    52:47:fc:94:9e:f4:a7:9a:61:d4:3c:91:2a:b5:c8:
                    d4:96:3f:71:91:80:08:bf:7e:47:48:52:69:08:da:
                    be:7e:f2:3c:0b:92:2a:24:13:ca:86:23:c1:8f:8c:
                    73:63:ec:29:a4:0c:63:9f:c5:c7:d1:59:0b:32:e5:
                    cc:fc:6f:f1:d3:0d:86:cf:9a:08:b4:e8:4b:f3:7c:
                    70:d5:91:cd:71:18:ae:1d:6e:2f:19:4b:34:bf:7c:
                    6c:32:70:1a:cf:3c:9d:62:76:e6:d6:08:3b:e4:9e:
                    58:ac:de:7e:9c:64:dc:81:09:bc:33:a5:9f:d0:13:
                    ba:9d:3b:25:ba:10:ca:06:7b:cd:0e:2b:de:38:98:
                    27:05:c9:04:b0:75:b7:07:d0:15:d0:1f:0c:d7:e2:
                    7d:e1:cd:96:f6:9f:fd:a2:33:f3:05:02:e6:45:cb:
                    a6:91:d3:ab:a0:d3:bd:35:65:7d:a7:82:b3:ea:60:
                    18:ce:a6:c3:38:f2:88:1c:0f:06:96:b7:c8:e4:9f:
                    2e:10:ea:c7:bc:26:2c:0e:87:4e:6b:01:ba:09:91:
                    17:62:65:96:8c:5c:dc:93:28:f6:bd:9b:ab:a4:21:
                    4b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7F:EE:99:3E:74:90:9B:68:6E:32:D5:D6:D9:F9:A4:DD:D7:49:C8
            X509v3 Authority Key Identifier:
                keyid:48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/EA41FB0EB6A911EAB0EB257EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:a4:10:f7:e6:2d:69:cf:87:34:86:fc:b4:06:eb:10:77:e6:
         fd:4f:56:73:c2:eb:bc:40:d7:31:b4:cc:ee:f9:a5:58:c6:f0:
         5c:61:51:30:83:11:40:90:a1:19:9a:e0:50:79:41:5b:82:82:
         cf:4b:7e:8a:70:cb:03:4c:f8:b8:54:87:7c:94:fd:93:ee:39:
         29:c2:35:49:a4:be:30:4c:de:9f:ca:3e:78:7c:03:30:51:79:
         9c:58:45:ea:35:96:e7:77:d3:24:5f:46:b3:0a:f8:fe:c7:81:
         70:1c:ae:4d:6a:6c:b2:d0:bd:37:7d:a7:ac:48:7e:f6:fa:45:
         05:2e:e7:73:d4:fc:98:d7:ca:94:63:2d:06:68:cb:15:15:d1:
         b9:9b:6c:59:4a:56:dc:6e:ee:f3:9e:26:b0:5b:cd:d1:33:a8:
         dd:e2:29:9d:d5:1e:ca:d1:24:d9:36:20:08:93:55:2e:9b:9c:
         03:3b:55:88:2a:e9:ed:a5:82:16:80:d9:9b:9c:87:37:f8:cb:
         65:83:32:df:95:d7:78:79:c7:c6:81:cd:28:1e:f0:33:77:8f:
         43:8c:0d:22:d9:1d:2e:5d:f1:0e:49:04:84:0f:af:08:d0:8a:
         17:3b:a1:64:ef:44:58:0f:9b:ca:83:84:8e:7d:3c:ed:ee:5f:
         35:2d:b7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:47 2024 by rpki-client on console-fra.rpki-client.org