Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/99C51F96DA6D11EC86CE4D59C4F9AE02.roa
File:                     99C51F96DA6D11EC86CE4D59C4F9AE02.roa (raw, json)
Hash identifier:          aKXqkqaiNI3kpyMCWhSWZRWPKcgpASMcfqReP/RZldE=
Subject key identifier:   F6:91:F7:BF:EF:56:A5:D0:43:DE:C4:55:AF:5D:62:CB:91:E9:37:C8
Certificate issuer:       /CN=A91F53A5/serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8
Certificate serial:       0189
Authority key identifier: E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/99C51F96DA6D11EC86CE4D59C4F9AE02.roa
Signing time:             Wed 07 Jun 2023 06:18:53 +0000
ROA not before:           Wed 07 Jun 2023 06:18:53 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     149817
IP address blocks:        103.187.8.0/24 maxlen: 24
                          2001:df0:b3c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl
                          rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F53A5/serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8
        Validity
            Not Before: Jun  7 06:18:53 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6480214d-1010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dd:6c:cb:b8:1d:7e:3b:a8:4d:73:73:1a:95:
                    32:24:23:d9:20:cd:bf:ba:08:ff:ba:18:b1:81:fa:
                    e8:d4:68:3c:4d:15:bd:a9:5c:c5:12:6d:b4:7b:f6:
                    88:de:be:aa:e3:fd:2c:92:70:aa:72:22:4b:ef:dc:
                    05:27:28:98:de:a0:d2:44:99:01:65:89:22:fb:f9:
                    ea:f8:75:a4:8a:cf:e4:6f:6d:78:51:4c:aa:23:83:
                    11:65:4c:bd:26:be:17:17:d8:e5:ff:3f:dd:49:01:
                    3e:11:d1:55:8d:b7:30:7e:c5:9f:0b:37:15:f2:bd:
                    d1:5c:47:b0:34:0b:c6:19:82:87:67:c8:22:eb:db:
                    83:6a:3c:1a:8a:5b:c4:4f:ec:d7:8f:5a:e6:6a:25:
                    54:a2:50:c8:d6:ab:6b:04:b2:02:f3:ee:6f:6d:98:
                    b2:3a:8e:e1:c1:e1:3e:39:ef:9e:81:b0:96:c6:5d:
                    2e:5c:1a:e6:a5:a5:06:02:6c:38:94:cf:87:3d:69:
                    65:7d:ab:30:d3:93:b5:b3:11:cc:42:58:a7:2d:31:
                    93:2f:56:79:57:90:1a:5c:12:cc:9f:e5:46:85:7f:
                    95:82:72:95:96:8d:7a:cc:f0:5e:38:42:8b:41:bb:
                    40:3b:71:cf:f1:af:11:6e:95:f4:f3:fa:79:e0:46:
                    d0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:91:F7:BF:EF:56:A5:D0:43:DE:C4:55:AF:5D:62:CB:91:E9:37:C8
            X509v3 Authority Key Identifier:
                keyid:E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/99C51F96DA6D11EC86CE4D59C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.8.0/24
                IPv6:
                  2001:df0:b3c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:6f:2b:a1:8c:05:9c:21:0e:a9:9b:e9:44:de:f2:f5:c7:23:
         b9:d8:d5:3b:fa:2d:99:4f:4b:64:87:9d:a4:24:2e:71:41:fe:
         b2:ef:67:84:43:c0:9b:cf:6a:85:55:da:b0:1c:ad:76:d3:6d:
         c9:8a:88:68:e9:32:bf:45:57:89:a5:d2:92:11:0f:0c:6a:59:
         f6:17:b4:14:31:13:48:3f:14:7b:b8:b7:1c:4c:33:16:71:e4:
         2f:33:21:22:45:1c:b1:07:85:3a:71:3b:c7:3d:e5:f0:45:06:
         2e:0e:a3:42:ef:58:f0:ba:00:9f:8b:c9:9d:eb:f5:da:85:e9:
         99:07:a0:b3:a6:60:9b:93:27:63:e0:56:05:a5:0d:d4:24:6f:
         10:8b:79:a3:01:04:dd:b8:9b:b2:6a:81:37:e1:1a:45:7f:97:
         2f:aa:44:23:d6:fa:fb:c9:47:c7:d4:ae:c8:32:20:84:f4:84:
         88:8e:43:fb:ea:ed:42:9b:f8:29:8a:9a:a3:eb:f4:f9:1b:4d:
         99:ff:1c:83:bd:ec:54:ff:9c:59:51:1c:83:d4:23:9e:fe:cc:
         ff:65:5b:ca:74:64:fc:47:db:95:70:eb:51:d1:08:d7:29:2e:
         b7:32:95:c1:e8:99:d2:cc:27:64:a6:ac:ec:54:fe:c2:b8:95:
         5a:40:a4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 04:38:03 2024 by rpki-client on console-fra.rpki-client.org