Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/76F636C6C13111EC8B2DD839C4F9AE02.roa
File:                     76F636C6C13111EC8B2DD839C4F9AE02.roa (raw, json)
Hash identifier:          FVruRe+NZ+jBEGaZQ2wVstmIBpGWVtO9xNzUBcVemeI=
Subject key identifier:   99:D7:3E:0C:08:58:B6:09:EE:C0:02:62:9B:AD:47:9A:64:A5:E1:A3
Certificate issuer:       /CN=A91F6B3D/serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980
Certificate serial:       0588
Authority key identifier: 7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/76F636C6C13111EC8B2DD839C4F9AE02.roa
Signing time:             Sat 12 Aug 2023 23:19:50 +0000
ROA not before:           Sat 12 Aug 2023 23:19:50 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     64037
IP address blocks:        103.70.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl
                          rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 May 2024 23:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1416 (0x588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6B3D/serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980
        Validity
            Not Before: Aug 12 23:19:50 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64d81396-6d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d1:8f:3f:5f:34:42:51:b5:3b:25:89:0b:cb:
                    33:23:c6:ca:cf:6f:2a:22:90:7f:35:27:0e:36:b5:
                    fa:d8:e5:84:46:a6:c2:90:8d:b6:47:3d:40:c1:aa:
                    ba:5b:67:b2:3e:ea:c9:9f:71:3a:e7:e1:b9:7f:06:
                    d4:77:8e:d0:51:60:22:0d:40:d8:af:8a:02:36:d5:
                    05:99:57:22:71:04:22:06:7c:7b:5a:f6:01:c6:33:
                    a3:cd:f7:08:bf:58:d5:15:33:85:70:a2:ff:23:39:
                    72:2a:87:00:69:68:0e:cf:73:09:71:25:37:f0:fb:
                    e9:dd:45:ea:fa:4e:9b:33:a6:9e:45:4b:05:d6:b5:
                    82:bc:7a:32:4d:d9:36:9e:df:ea:5c:da:83:94:38:
                    4c:41:50:69:fd:85:0e:d5:14:8c:7f:c0:24:43:03:
                    7b:c5:d7:33:db:be:90:e3:6a:61:91:70:9a:0f:13:
                    12:d2:17:fd:56:b6:1f:d5:92:ad:da:e0:97:8c:9a:
                    38:fc:e0:d9:41:d5:bc:03:b8:f4:e4:67:22:59:34:
                    01:51:6e:76:da:de:70:56:aa:b9:b4:a9:13:f8:08:
                    1a:ce:36:82:17:be:47:d8:47:8b:8a:ce:69:bc:eb:
                    a4:d2:88:83:64:4f:a9:fd:62:8b:85:40:2c:27:2f:
                    43:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D7:3E:0C:08:58:B6:09:EE:C0:02:62:9B:AD:47:9A:64:A5:E1:A3
            X509v3 Authority Key Identifier:
                keyid:7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/76F636C6C13111EC8B2DD839C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:92:35:8e:79:36:12:db:e9:be:18:9b:74:49:3a:b6:33:0c:
         f6:50:92:de:c1:37:de:23:58:ae:0a:93:43:b7:e2:2f:14:d5:
         41:b3:07:b4:62:42:66:9d:d7:b2:5f:4d:54:98:93:71:2d:31:
         fa:cd:68:d2:fe:2a:ba:4f:08:7e:c5:fb:19:bc:f8:0b:e9:3b:
         22:b6:bd:2c:38:28:b1:18:13:ea:94:b3:ad:04:c9:c5:07:f5:
         35:3a:e2:f5:ba:7d:4d:f9:a3:b4:65:ad:6b:fd:aa:f3:04:64:
         63:c4:19:8b:c3:b5:f5:ef:27:46:8b:9d:41:7b:a8:8d:a4:7e:
         f3:33:f4:d1:95:52:c8:9c:79:52:b4:52:cc:d3:f7:32:be:43:
         dd:91:21:54:17:d1:28:8e:42:84:bb:a8:53:1c:60:fb:28:33:
         96:23:8e:cf:ed:93:70:aa:7d:71:5d:e9:ef:1e:e7:54:a6:8f:
         5e:56:8e:8c:c6:38:0d:e0:4c:15:bc:f0:96:33:4e:95:f7:4b:
         57:a1:4b:64:89:36:ee:e1:8b:a4:02:fa:33:ee:be:ce:3f:99:
         34:b1:e1:68:24:80:b9:c4:67:83:d6:79:fa:30:f9:4e:ee:6a:
         6b:35:2c:85:a1:d5:d1:d0:54:eb:a8:c8:13:87:37:31:c9:e8:
         60:26:0d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 01:47:06 2024 by rpki-client on console-fra.rpki-client.org