Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/01CF36F2DB0D11EE88489759C4F9AE02.roa
File:                     01CF36F2DB0D11EE88489759C4F9AE02.roa (raw, json)
Hash identifier:          Kmv1QrYT5/UEpbtXzpPPYTaLacMICL2BKLeS5MO3ekk=
Subject key identifier:   42:39:1D:87:09:D9:60:78:63:A0:78:EA:5E:D5:AB:3A:79:66:C7:0D
Certificate issuer:       /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Certificate serial:       0385
Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/01CF36F2DB0D11EE88489759C4F9AE02.roa
Signing time:             Tue 05 Mar 2024 16:25:41 +0000
ROA not before:           Tue 05 Mar 2024 16:25:41 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     140732
IP address blocks:        103.152.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl
                          rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901 (0x385)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
        Validity
            Not Before: Mar  5 16:25:41 2024 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=65e74784-4222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:74:4c:27:fe:a5:27:94:e0:33:fa:de:15:ec:
                    93:8d:1f:c8:92:95:ad:07:f7:f9:34:ae:bd:5c:9f:
                    a0:f2:15:52:79:cf:18:82:80:dc:8b:f0:01:d5:ba:
                    04:20:b1:8b:b6:1c:2b:83:c8:54:d4:f8:f9:a9:0e:
                    a2:a4:24:a6:81:8f:94:9d:4d:75:e4:12:87:7e:30:
                    8e:67:22:4c:5e:02:44:67:f9:c6:89:bc:24:fd:ae:
                    0b:ab:cc:57:ca:ad:ac:5f:8b:8b:d7:9b:5b:4c:bb:
                    67:88:15:ff:93:46:4e:f1:53:51:3c:c7:78:99:37:
                    31:0a:76:c8:0c:27:13:80:6d:4f:e3:2e:de:e7:9d:
                    77:33:2d:79:86:44:83:d2:ce:99:cb:1f:b7:36:ae:
                    7f:61:b2:95:f1:f1:be:1f:5a:a9:e9:c2:4d:00:94:
                    22:b7:ab:bd:68:ec:50:f7:41:73:31:10:ae:d7:0a:
                    c6:74:a8:40:1e:41:e2:bf:c9:9e:88:27:bf:8b:84:
                    34:85:68:a4:a5:ad:51:51:8c:20:ba:6d:1f:b1:a7:
                    65:20:57:83:82:af:38:f2:83:0c:14:47:b1:04:e5:
                    b2:0f:e6:05:11:86:72:39:c7:ba:6c:da:b2:cf:b7:
                    5e:e4:89:38:0f:8c:1a:da:36:02:2f:81:69:f5:0a:
                    4d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:39:1D:87:09:D9:60:78:63:A0:78:EA:5E:D5:AB:3A:79:66:C7:0D
            X509v3 Authority Key Identifier:
                keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/01CF36F2DB0D11EE88489759C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:43:75:94:7c:f7:30:2c:fd:1c:af:44:2d:72:6a:8a:c0:a3:
         1d:e2:bd:e9:6f:f4:a4:e4:ca:67:a3:12:35:bc:b2:a4:27:13:
         25:bf:4e:49:ba:d8:43:06:94:a7:f2:b0:01:1e:ee:ae:c8:88:
         34:4c:9b:60:7f:50:e7:5b:38:de:95:5d:a0:c4:01:d1:00:b6:
         02:33:a5:a8:e2:90:f2:c5:44:71:c7:ff:e5:9f:60:a5:c8:16:
         be:cb:fb:2d:94:0b:17:2d:87:1b:10:b6:28:e9:fa:55:ad:31:
         69:cf:94:c0:22:7f:42:a3:fe:4d:dd:5c:a7:18:93:e2:43:5c:
         1c:dc:d9:9b:76:a5:bf:1b:dd:1a:14:17:3a:e8:4d:b7:a9:27:
         f8:e7:c4:2c:06:2b:6b:ae:b8:90:09:4b:17:df:c1:96:8b:c5:
         64:66:4e:f7:d8:7e:3e:07:c1:54:47:12:4d:75:ae:b1:01:95:
         09:86:42:14:a5:41:f0:91:bb:75:fd:ed:53:94:d8:37:2d:96:
         a7:2a:84:2b:50:bb:ef:08:21:ba:f5:28:7e:11:74:c3:65:1c:
         8f:89:c9:8b:20:41:e1:d6:b1:cf:85:49:bf:a8:f8:49:35:b7:
         fd:8c:87:59:30:44:3d:ed:08:e0:93:07:bf:87:35:f4:54:38:
         10:9c:f1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:17:01 2024 by rpki-client on console-fra.rpki-client.org