Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE162/396D8FE200B711ECBB181E1FC4F9AE02/93B31E9600BB11ECB60BA225C4F9AE02.roa
File:                     93B31E9600BB11ECB60BA225C4F9AE02.roa (raw, json)
Hash identifier:          c3S0BvaFR7pPeOgvysFCrT5s6wA73iHrClvOLjPbAlg=
Subject key identifier:   8C:45:ED:1F:A2:AA:1A:53:D7:60:08:B7:FB:86:72:A8:40:50:DC:C4
Certificate issuer:       /CN=A91EE162/serialNumber=6047A79CFC60762E0F3214B16077369A763FEB9B
Certificate serial:       045E
Authority key identifier: 60:47:A7:9C:FC:60:76:2E:0F:32:14:B1:60:77:36:9A:76:3F:EB:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YEennPxgdi4PMhSxYHc2mnY_65s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE162/396D8FE200B711ECBB181E1FC4F9AE02/93B31E9600BB11ECB60BA225C4F9AE02.roa
Signing time:             Sat 11 May 2024 02:05:23 +0000
ROA not before:           Sat 11 May 2024 02:05:22 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     135026
IP address blocks:        103.114.132.0/24 maxlen: 24
                          103.114.133.0/24 maxlen: 24
                          103.114.134.0/24 maxlen: 24
                          103.114.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE162/396D8FE200B711ECBB181E1FC4F9AE02/YEennPxgdi4PMhSxYHc2mnY_65s.crl
                          rsync://rpki.apnic.net/member_repository/A91EE162/396D8FE200B711ECBB181E1FC4F9AE02/YEennPxgdi4PMhSxYHc2mnY_65s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YEennPxgdi4PMhSxYHc2mnY_65s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1118 (0x45e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE162/serialNumber=6047A79CFC60762E0F3214B16077369A763FEB9B
        Validity
            Not Before: May 11 02:05:22 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=663ed262-1d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:78:5b:9d:ab:7d:20:18:7a:8a:6a:71:43:cb:
                    5e:c7:2c:48:0d:d1:10:cd:6f:27:65:30:10:f3:34:
                    c3:b2:3c:a0:be:17:ef:20:97:34:a3:22:93:59:ef:
                    35:f0:06:56:79:1d:25:3d:3f:81:88:3e:bf:0a:8f:
                    51:5b:47:bd:45:13:46:e5:75:ff:a2:71:1a:9d:f4:
                    fe:12:60:69:73:85:5d:88:5a:be:4a:b6:73:ac:0f:
                    03:b6:35:9d:7b:e4:49:f8:fa:3f:2c:7c:d3:ad:e6:
                    93:43:19:19:8e:fa:8f:4d:77:4e:9d:82:20:c2:de:
                    9a:97:52:ba:1c:43:b9:5f:12:27:6d:7b:58:9f:da:
                    8e:91:9a:46:8b:05:88:94:eb:fd:09:15:4a:d3:52:
                    b5:f5:fe:f4:fa:ee:19:f1:5a:0f:2a:f5:1a:db:7f:
                    89:43:4e:f7:b2:fd:ea:3d:a5:83:97:4d:b3:9d:4c:
                    f6:a3:d7:3d:ec:6f:a2:c5:29:52:61:9b:19:0d:59:
                    e7:de:47:57:0c:fe:1f:83:05:1f:62:c2:6e:d7:2a:
                    df:af:e9:37:67:a2:6d:b0:d1:09:5a:df:57:d8:4c:
                    58:64:6b:4e:bf:4c:1f:b8:77:a2:c4:e7:4c:55:44:
                    2e:01:ab:dc:26:11:15:3d:71:58:68:d8:a9:a9:4d:
                    1e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:45:ED:1F:A2:AA:1A:53:D7:60:08:B7:FB:86:72:A8:40:50:DC:C4
            X509v3 Authority Key Identifier:
                keyid:60:47:A7:9C:FC:60:76:2E:0F:32:14:B1:60:77:36:9A:76:3F:EB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE162/396D8FE200B711ECBB181E1FC4F9AE02/YEennPxgdi4PMhSxYHc2mnY_65s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YEennPxgdi4PMhSxYHc2mnY_65s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE162/396D8FE200B711ECBB181E1FC4F9AE02/93B31E9600BB11ECB60BA225C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:aa:b6:8f:3a:ab:34:26:7d:90:2c:46:55:f8:f2:40:60:08:
         d5:f2:41:3a:3c:ab:94:3b:fd:32:94:14:73:22:50:a9:86:a0:
         9d:cb:60:08:43:1b:0d:d0:cf:4b:3e:ea:ce:a2:e4:c3:c2:b6:
         2f:cc:e3:2a:ea:2f:41:cf:0f:15:b9:ff:90:55:33:e9:70:dc:
         42:88:06:5d:d5:dd:d0:be:c2:a5:ce:59:8e:ea:59:c5:05:50:
         12:c5:e8:db:6a:31:af:ed:49:f3:6c:29:0a:66:01:db:09:c4:
         86:3a:33:97:a6:32:79:1a:6f:42:0d:77:f3:bd:34:2b:9d:43:
         a8:94:35:af:b5:fe:fb:27:71:ce:ff:2f:64:38:1c:53:be:de:
         5d:26:fb:29:31:af:c2:6c:d9:f2:0e:64:96:23:00:56:29:22:
         c5:36:b9:c9:04:4b:8f:e9:46:06:fc:80:de:9f:e7:9f:95:d2:
         9a:a5:2e:fc:39:3b:a0:13:6f:09:11:4e:95:b3:21:b1:30:18:
         8b:ec:33:1a:a5:47:30:ff:d3:7a:82:d9:eb:0f:73:47:b3:94:
         d1:65:3f:0d:28:d9:19:8e:8f:c2:95:19:95:5f:f0:eb:f4:ed:
         0b:f2:e4:1a:9a:1c:b8:6d:76:cd:8d:19:cd:1f:46:e7:2d:86:
         d4:70:0f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:26:06 2024 by rpki-client on console-ams.rpki-client.org