Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/F76D8A5C170D11EDA7EC2F87C4F9AE02.roa
File:                     F76D8A5C170D11EDA7EC2F87C4F9AE02.roa (raw, json)
Hash identifier:          tR+tQXacvF1YYLgZ1npEr0rsbJz4qFqr8hFwc8UIkxM=
Subject key identifier:   26:56:BF:F5:DE:33:A2:E3:8B:79:41:10:1F:B8:BC:CA:86:7F:39:09
Certificate issuer:       /CN=A91E9406/serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474
Certificate serial:       0136
Authority key identifier: E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/F76D8A5C170D11EDA7EC2F87C4F9AE02.roa
Signing time:             Sat 21 Oct 2023 03:35:08 +0000
ROA not before:           Sat 21 Oct 2023 03:35:08 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     138213
IP address blocks:        103.122.100.0/23 maxlen: 23
                          103.122.100.0/24 maxlen: 24
                          103.122.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9406/serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474
        Validity
            Not Before: Oct 21 03:35:08 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=653346ec-f6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:91:c0:91:4c:3f:ca:4d:80:b7:e0:9b:91:6d:
                    ec:f9:ca:6b:e4:5e:28:bd:4e:c2:00:4b:f4:67:79:
                    9e:13:ca:10:c2:d1:83:da:16:3c:11:ab:47:ef:11:
                    df:fb:e0:05:fb:b7:d2:d8:b2:84:52:55:d5:4d:cf:
                    77:b8:d7:29:8d:82:83:99:52:02:22:ed:ab:2c:11:
                    51:50:00:ae:45:29:c5:29:ec:4a:27:e8:a7:0b:ca:
                    60:81:da:91:01:cb:bb:52:7f:ad:03:dc:27:e9:87:
                    e6:32:1a:9a:21:1f:27:53:51:ec:c4:7c:f9:be:52:
                    10:97:2f:af:c4:29:57:f5:30:4a:72:ff:50:43:92:
                    b7:d6:9d:1e:a3:36:d3:8b:8d:1d:af:0d:3b:66:5c:
                    15:7d:68:29:7b:8b:8a:a5:33:15:f3:ce:d5:cb:75:
                    b2:85:72:b6:30:9a:ad:2f:8e:ce:64:d1:8d:f6:12:
                    23:8e:46:27:f8:f1:24:6c:c5:44:98:6a:17:00:e3:
                    28:31:34:b5:78:c3:3a:63:18:3c:21:fa:ce:cf:50:
                    6f:97:d7:4c:ab:0b:d5:85:82:bd:d1:ce:c3:2c:ac:
                    34:0d:e3:62:13:b2:e1:1a:7c:32:f4:92:a7:15:bf:
                    c5:1c:d8:89:67:21:e9:f6:23:6d:30:35:fb:92:97:
                    d6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:56:BF:F5:DE:33:A2:E3:8B:79:41:10:1F:B8:BC:CA:86:7F:39:09
            X509v3 Authority Key Identifier:
                keyid:E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/F76D8A5C170D11EDA7EC2F87C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:ec:b7:43:aa:45:c3:c8:ea:0c:5b:ba:e1:cb:0d:4d:29:62:
         e0:8a:3f:4a:71:80:a5:4f:bf:3f:c5:00:35:a2:e2:34:a4:d2:
         9b:02:ce:94:63:62:44:59:f5:bd:46:78:46:62:72:53:48:fe:
         26:5b:07:0d:2f:66:45:34:e3:a9:af:85:d4:9a:a9:fe:ce:0d:
         a6:cc:c3:27:dd:8b:0f:b3:32:45:fc:c6:76:6a:73:b1:6e:bf:
         bc:c7:f0:fe:9d:1e:78:eb:3a:7b:4a:92:42:41:c2:83:f3:9c:
         4e:43:77:69:8f:67:92:5b:d7:be:8d:88:5b:fd:a4:f0:4d:3e:
         9a:c0:50:c0:16:e0:ff:27:fa:9f:8a:a2:87:2c:85:f0:24:54:
         a6:fd:11:38:e1:0b:ae:b8:4a:43:c6:c1:c6:f0:3b:6a:4c:59:
         bb:54:4c:f8:ed:1d:33:90:db:a8:1f:b5:bc:36:71:2d:be:36:
         69:6e:ce:32:a2:31:6e:0b:e3:ae:31:1a:cf:df:88:13:1f:2f:
         9a:29:57:8a:7d:9e:42:e5:72:a7:84:3a:5f:f9:d1:88:d8:55:
         b8:f5:a2:24:ac:7b:92:22:99:c9:62:fe:4c:57:ef:c3:dd:ef:
         9d:dc:ce:c6:51:8d:dd:45:b0:2f:35:a9:f5:4d:0a:88:6c:db:
         1e:ad:c6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 05:22:37 2024 by rpki-client on console-fra.rpki-client.org