Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/341C7414CA6111EA97DD3439C4F9AE02.roa
File:                     341C7414CA6111EA97DD3439C4F9AE02.roa (raw, json)
Hash identifier:          DLeS0zPVo1GXq+y9erAJGv8PPnf+LNimN04EFu+X8DQ=
Subject key identifier:   9E:C7:10:37:B8:88:B3:A0:6C:72:60:10:12:31:E4:9B:1C:75:3D:EF
Certificate issuer:       /CN=A91F7315/serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10
Certificate serial:       079D
Authority key identifier: F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/341C7414CA6111EA97DD3439C4F9AE02.roa
Signing time:             Mon 22 Apr 2024 20:29:03 +0000
ROA not before:           Mon 22 Apr 2024 20:29:03 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     58689
IP address blocks:        103.135.134.0/23 maxlen: 23
                          103.135.134.0/24 maxlen: 24
                          103.135.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl
                          rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1949 (0x79d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7315/serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10
        Validity
            Not Before: Apr 22 20:29:03 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=6626c88f-14e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bb:2c:32:76:39:23:27:8d:07:df:b6:c5:48:
                    ea:b6:2b:96:49:32:02:df:de:f4:cc:f1:ae:58:0d:
                    0d:b8:a8:ca:2b:35:20:2f:32:97:2d:75:5f:34:4d:
                    b9:6c:25:90:82:0f:6a:8b:2a:ff:d9:11:65:98:e8:
                    56:07:78:e3:da:eb:fe:c1:dd:81:24:7e:42:57:d5:
                    42:a4:35:7c:7b:ad:ce:f5:81:7b:1e:57:38:60:87:
                    3b:f1:9b:f1:36:a0:04:9d:08:37:55:6c:cd:62:a7:
                    37:1e:e2:fc:e9:09:52:cf:e7:77:6f:f8:6e:8d:b8:
                    2e:08:aa:45:9c:e6:28:4c:4d:87:46:33:2d:10:4f:
                    d2:ec:01:a6:83:28:8b:fb:e5:9f:79:bc:32:c0:fe:
                    1e:c1:8f:80:6a:8a:ee:fa:99:c0:96:cf:46:29:1a:
                    e4:95:8e:dc:6e:39:88:06:67:ec:5c:75:30:a0:d9:
                    5c:0f:f3:86:66:50:d7:fc:67:f6:de:c0:0a:f3:7f:
                    d5:0b:98:2c:94:02:8f:9d:2f:a3:d6:e4:40:5a:e5:
                    82:e6:1c:32:b3:a3:34:da:a3:7b:fe:68:e0:bf:77:
                    f2:a3:c2:94:78:ab:e0:42:48:5f:bd:14:51:f1:f4:
                    f5:62:d2:33:6d:39:e5:a9:54:aa:fe:50:91:e8:e2:
                    bb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C7:10:37:B8:88:B3:A0:6C:72:60:10:12:31:E4:9B:1C:75:3D:EF
            X509v3 Authority Key Identifier:
                keyid:F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/341C7414CA6111EA97DD3439C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:1e:f8:5d:d7:22:bb:d2:f7:46:19:df:75:55:3e:4e:d9:4d:
         3e:da:59:9d:81:cd:6c:4a:bc:1d:75:cf:72:1d:5e:64:32:f8:
         ab:c1:23:74:99:70:58:3c:60:40:f8:1d:08:e9:3c:af:f3:36:
         ac:79:27:76:2f:1e:c0:fd:88:88:e0:3b:3c:d5:c4:2b:c2:e1:
         8a:1b:7b:db:03:bb:2f:63:de:13:90:24:1c:71:fa:1a:cf:14:
         4f:f2:87:79:e1:ec:07:5c:e9:92:a9:e4:ad:5c:32:0e:e5:7b:
         b0:de:72:ff:fc:1f:a1:af:9d:27:47:c8:a2:d6:94:cb:dd:83:
         b0:63:7a:ba:7d:35:f6:1e:43:69:cd:af:a0:33:e7:62:7d:1a:
         77:13:5d:49:6a:67:3c:82:51:5d:fc:55:52:ed:96:f1:d6:ae:
         58:ba:d2:c8:81:15:bf:db:9f:4c:93:92:01:a9:ee:79:10:57:
         a3:bb:cc:81:dc:81:23:64:02:53:2a:49:5d:6b:ca:ab:0a:99:
         7c:61:5a:61:2b:af:e0:1c:1e:a2:dc:a0:dc:61:a3:bc:91:20:
         f8:12:c6:35:19:78:bb:20:ad:f6:5f:0b:42:e1:bd:a8:93:63:
         ce:df:ea:a0:8c:4c:c4:a6:75:dc:a7:d6:03:de:1a:b2:69:f3:
         68:b2:d7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:34:56 2024 by rpki-client on console-ams.rpki-client.org