Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B2B2930C21C911EB991D562EC4F9AE02.roa
File:                     B2B2930C21C911EB991D562EC4F9AE02.roa (raw, json)
Hash identifier:          Ie5a2mrg7iBg5iP9NZxouePSHfivE6daItg36Wl1oIo=
Subject key identifier:   F7:32:EB:A3:11:2C:E3:30:5E:EA:10:A7:9A:1A:93:23:D5:5C:3E:32
Certificate issuer:       /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Certificate serial:       0E20
Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B2B2930C21C911EB991D562EC4F9AE02.roa
Signing time:             Wed 10 May 2023 19:28:47 +0000
ROA not before:           Wed 10 May 2023 19:28:47 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     135386
IP address blocks:        103.113.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
                          rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 18:22:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3616 (0xe20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
        Validity
            Not Before: May 10 19:28:47 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=645bf06f-9ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:48:91:19:18:b7:a4:fd:55:e5:39:35:7a:1f:
                    95:1d:fb:89:e4:84:22:28:ed:2f:73:af:01:48:53:
                    3d:f0:73:e0:8c:f2:aa:64:69:9a:cf:4e:ae:69:37:
                    d4:f4:88:d0:3e:3d:b2:8f:d2:97:0a:eb:5c:4f:92:
                    99:dd:a3:b7:79:1f:95:48:cf:32:c3:1d:6d:f7:42:
                    3f:2b:6c:41:ca:76:a2:e6:4d:1b:4d:0d:b1:f3:0d:
                    c5:87:85:4f:16:7c:31:95:c4:b0:02:33:4b:da:a4:
                    75:56:7f:e8:5b:e1:f3:b9:8b:55:dd:aa:b2:21:63:
                    7e:69:41:68:e9:36:26:fd:51:09:5a:62:93:48:3f:
                    f7:2c:f7:8e:bb:75:e1:72:3b:31:f1:f2:19:8d:77:
                    f7:95:50:57:b9:c6:51:0c:38:4c:ab:87:b2:43:88:
                    92:d9:2f:18:cd:88:ff:ea:97:a8:8f:f7:d6:14:ed:
                    fd:54:76:7a:8f:fe:96:d6:90:4e:74:62:cb:c8:3c:
                    9a:9d:f6:fc:3b:fa:64:6a:f5:1e:5d:60:1c:2c:da:
                    4d:ed:5a:f4:21:f1:93:97:84:cc:1a:68:7d:6e:e4:
                    98:70:c3:a1:e3:0c:c7:54:97:45:c7:de:e0:1b:8d:
                    0b:ce:04:83:f3:18:73:61:75:80:4b:b6:74:7a:d5:
                    e1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:32:EB:A3:11:2C:E3:30:5E:EA:10:A7:9A:1A:93:23:D5:5C:3E:32
            X509v3 Authority Key Identifier:
                keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B2B2930C21C911EB991D562EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:3f:d1:b9:cd:d2:71:29:de:64:58:63:b8:5f:71:ef:1d:6b:
         9d:31:cd:b4:d2:c4:25:1d:1b:31:ec:b2:05:14:8f:1f:d7:ff:
         99:58:07:08:0a:df:7e:7b:79:68:c0:ea:78:7f:01:94:e7:2b:
         fa:8d:f3:16:4d:d7:dc:d3:ec:cf:f8:f8:bb:0d:f7:0f:ab:d2:
         47:dc:05:d9:29:f4:fe:13:49:bf:6d:58:b7:26:77:bd:a4:fa:
         59:b6:e5:a4:83:6c:08:6f:6e:4e:72:80:ea:bc:9f:fc:43:34:
         bd:ef:75:c6:a3:37:29:32:37:d3:49:ec:d7:de:a5:0e:3d:e6:
         42:a8:39:ab:3e:bb:46:04:13:b6:bb:c6:12:d7:37:80:e8:4a:
         43:03:96:1c:1f:73:a4:20:3d:17:12:32:25:67:cc:65:38:d6:
         0b:9b:38:f2:2f:6a:45:01:02:b8:b7:39:e4:da:4f:e7:b2:40:
         d7:28:79:48:73:8b:38:cf:02:4b:4a:ec:88:5e:c6:51:8d:13:
         14:af:8b:67:e9:cb:e8:c2:69:24:8b:b6:21:a5:a4:39:fa:93:
         f7:60:80:11:9e:66:9b:d9:99:11:fa:d1:16:12:07:61:e5:1d:
         6f:5e:5c:08:a5:b8:03:a0:c7:80:27:b6:5f:3f:3a:fc:45:16:
         1f:00:58:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 20:29:54 2024 by rpki-client on console-fra.rpki-client.org