Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/9985244A2D1411EEAA9EA45DC4F9AE02.roa
File:                     9985244A2D1411EEAA9EA45DC4F9AE02.roa (raw, json)
Hash identifier:          VdVGiGXj8WmtMijPMpgRK+Rb6MVhazNJnLJSMdY7Rjs=
Subject key identifier:   43:F4:0B:B2:1B:8F:44:AC:80:6F:12:49:F2:9C:36:EA:80:36:09:22
Certificate issuer:       /CN=A91E8AF5/serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905
Certificate serial:       94
Authority key identifier: E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/9985244A2D1411EEAA9EA45DC4F9AE02.roa
Signing time:             Fri 03 May 2024 07:19:34 +0000
ROA not before:           Fri 03 May 2024 07:19:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     151342
IP address blocks:        103.219.146.0/24 maxlen: 24
                          2001:df2:2840::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.crl
                          rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8AF5/serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905
        Validity
            Not Before: May  3 07:19:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66349006-3bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b8:fa:66:c4:c7:52:b3:75:80:06:f3:4b:88:
                    4e:4e:04:1b:be:01:99:e3:9a:d9:45:f4:21:19:5c:
                    7c:7e:ed:ca:9e:cb:3d:f8:5e:7c:1a:9e:1e:e7:0d:
                    66:ad:e6:0f:f1:cc:12:c0:b3:20:5d:10:24:cf:8a:
                    ee:f6:31:86:3a:f4:19:d1:50:9f:b8:51:83:c1:f0:
                    5a:4a:f7:7c:3d:3b:42:1d:22:f0:9a:92:de:cf:e6:
                    9f:17:5a:b0:7d:40:e2:b6:30:1e:a8:78:1f:17:42:
                    75:ad:cb:8f:31:4c:5d:64:7f:52:09:19:26:28:73:
                    ce:05:ea:16:70:e1:6f:51:57:54:1f:ea:0f:8d:5e:
                    ec:87:5d:f9:3c:95:a7:76:aa:14:e7:55:1c:c3:79:
                    fb:05:7d:15:6e:51:af:56:13:3e:0a:fd:91:cd:f0:
                    9d:4b:47:eb:41:56:52:f6:47:03:61:2b:53:2c:bb:
                    83:28:1d:16:f6:57:8e:3b:fd:bb:b4:d2:80:4f:07:
                    9b:6f:ae:05:60:fd:bf:f4:54:a9:72:c5:cf:e6:99:
                    b8:df:ca:7e:32:09:b0:7b:b5:1a:e4:79:c2:64:33:
                    e4:5b:f1:d0:8f:9c:48:af:04:ba:1a:46:0b:16:b9:
                    1d:c9:98:9e:d2:7a:d0:a4:ab:36:95:22:f8:ed:6a:
                    cf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F4:0B:B2:1B:8F:44:AC:80:6F:12:49:F2:9C:36:EA:80:36:09:22
            X509v3 Authority Key Identifier:
                keyid:E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/9985244A2D1411EEAA9EA45DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.146.0/24
                IPv6:
                  2001:df2:2840::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:b7:8f:55:e4:61:5d:dd:11:96:78:a3:2c:5d:c6:24:df:19:
         13:97:48:e9:d1:83:ef:2f:0a:1d:cb:e5:db:21:5c:56:4c:59:
         73:d6:82:af:cd:e3:ca:e5:eb:5f:22:f4:3a:33:1b:ac:f8:35:
         f2:9a:46:1e:9b:04:df:68:5c:28:fa:1c:c4:e0:1c:61:a4:9c:
         fa:cd:b0:b6:98:8a:0d:81:ec:95:21:91:fa:76:2f:ed:ad:52:
         09:26:b3:5a:bb:34:bc:9d:39:65:53:da:ac:52:30:22:bd:41:
         8c:cc:92:d8:b6:e2:db:b4:19:ee:a5:8b:77:c4:87:2f:e3:49:
         06:63:e2:dc:35:bb:39:8c:96:0f:c2:0d:13:ab:0a:c2:2d:10:
         8c:79:e4:b7:ce:dd:7e:9a:93:14:35:c3:a0:2b:d8:e7:02:a4:
         f2:d5:be:b4:e8:5e:19:50:23:3e:70:02:53:e2:c4:d6:03:f7:
         c8:4f:1d:28:0d:7c:68:9c:db:ef:29:4f:9d:ab:5d:a1:06:75:
         5a:13:e8:1e:18:f8:0d:81:1d:e3:86:c6:d9:d3:b9:97:4e:4c:
         e7:de:33:3b:9c:40:a6:84:51:85:90:0a:e7:a1:0b:54:75:de:
         69:be:c2:24:60:8c:96:83:8f:06:e9:7c:00:f4:47:6a:67:cc:
         20:26:70:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:35 2024 by rpki-client on console-ams.rpki-client.org