Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/87A141747A5511EBA4258A7DC4F9AE02.roa
File:                     87A141747A5511EBA4258A7DC4F9AE02.roa (raw, json)
Hash identifier:          DLgk/aAbys+BHUbM00Kk8wdZoY7yynf+AIo3v9dwEog=
Subject key identifier:   72:DC:3F:CD:54:99:12:C5:8A:A1:88:9D:82:6F:D1:96:63:61:F8:EE
Certificate issuer:       /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7
Certificate serial:       07C7
Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/87A141747A5511EBA4258A7DC4F9AE02.roa
Signing time:             Sat 22 Jul 2023 20:57:55 +0000
ROA not before:           Sat 22 Jul 2023 20:57:55 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     132825
IP address blocks:        103.151.216.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl
                          rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1991 (0x7c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7
        Validity
            Not Before: Jul 22 20:57:55 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64bc42d3-fce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:e3:49:41:61:65:91:0c:ea:84:a4:5f:60:
                    d5:31:5e:36:94:59:22:42:b1:3d:83:63:d2:58:77:
                    ff:ad:5a:4d:96:f0:8b:68:7c:8f:8f:65:5f:2a:a5:
                    aa:7e:03:1d:3f:a9:ca:d9:72:21:65:14:68:2c:c2:
                    9d:b1:92:d8:d5:89:fa:82:e3:a6:c3:40:b2:e4:e1:
                    6e:37:3c:e7:e7:8d:9c:32:b8:6b:0f:2e:23:e9:7e:
                    20:56:1c:81:5b:b8:bd:3f:f9:fe:95:53:99:e2:e5:
                    4b:8d:b8:9d:06:aa:d1:be:e8:cc:17:a6:68:57:e6:
                    37:47:3f:86:6f:d2:31:b9:5a:ac:36:3b:4a:04:41:
                    c5:b3:e6:8e:fe:e3:7d:f8:25:03:05:a8:6c:64:58:
                    c2:54:95:56:e0:45:01:af:fe:93:e1:f8:a4:d3:92:
                    19:16:66:02:13:a0:3c:50:ba:1d:d1:82:1e:a1:c0:
                    c0:73:42:28:05:00:f1:26:42:8a:3e:70:ac:55:9a:
                    26:79:b3:d8:67:47:c3:b9:21:03:cb:51:b3:9b:f1:
                    62:fd:fa:7f:61:2f:df:69:b2:c4:ff:a3:ac:a2:3b:
                    00:1b:3b:59:b3:c6:48:3c:9d:a4:a2:b8:55:5b:5c:
                    8a:a9:79:d1:bc:ed:bc:b5:eb:08:51:2c:59:2e:12:
                    0f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DC:3F:CD:54:99:12:C5:8A:A1:88:9D:82:6F:D1:96:63:61:F8:EE
            X509v3 Authority Key Identifier:
                keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/87A141747A5511EBA4258A7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:df:37:7e:aa:a5:c2:ed:93:53:bc:f3:da:81:be:ce:64:bb:
         50:12:b3:91:5a:36:2c:f6:c9:85:73:00:9a:74:28:50:2d:4a:
         f2:88:d8:e3:93:68:0f:b3:3a:69:dc:51:a6:2d:6f:5f:91:03:
         ba:cb:aa:5b:17:b5:cf:a3:e0:61:43:f9:1b:2c:04:fd:31:a7:
         4f:e8:8d:df:d5:e1:9b:63:b3:92:24:92:1c:2c:a1:a4:19:be:
         7e:6b:cb:90:9a:da:15:28:b7:e8:f9:9a:91:ca:12:aa:ab:de:
         93:db:4c:2d:72:80:8e:d0:54:14:45:a4:18:9a:91:f2:1f:9b:
         35:ad:43:e7:a5:4a:60:5b:4b:b8:07:de:35:e3:db:ed:e0:fa:
         81:f2:d7:1d:1a:fb:1f:0d:cd:1e:f5:48:b0:b8:14:67:02:74:
         9e:48:bf:59:bb:98:0a:3c:34:4e:2c:e0:7d:93:6f:fa:50:6a:
         d8:a8:77:f2:c6:3b:70:d7:83:62:cc:18:33:17:9f:b8:72:eb:
         82:ab:49:0a:4a:23:e9:5e:ef:6e:2a:fe:96:cb:86:23:22:8b:
         a8:cc:91:46:67:7d:de:ba:e0:b6:da:0c:d7:c4:84:74:51:bf:
         99:d7:d0:a1:d5:40:42:66:7e:ab:8e:04:cb:43:f0:17:f9:a4:
         04:18:3a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:34:55 2024 by rpki-client on console-ams.rpki-client.org