Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/76B3E9929B9811EC8CE35458C4F9AE02.roa
File:                     76B3E9929B9811EC8CE35458C4F9AE02.roa (raw, json)
Hash identifier:          KLkyJO51KF0HES3orpiv2hLgmmOTv1bEcegw4/Yurj0=
Subject key identifier:   62:F9:A7:55:45:33:CB:BA:FD:D5:E4:08:10:43:86:85:DC:B9:9D:AC
Certificate issuer:       /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
Certificate serial:       0239
Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/76B3E9929B9811EC8CE35458C4F9AE02.roa
Signing time:             Fri 07 Jul 2023 02:21:32 +0000
ROA not before:           Fri 07 Jul 2023 02:21:32 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     141389
IP address blocks:        103.167.214.0/24 maxlen: 24
                          103.167.215.0/24 maxlen: 24
                          2001:df6:c180::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl
                          rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
        Validity
            Not Before: Jul  7 02:21:32 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64a776ac-4a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c4:81:46:49:d2:13:32:96:7f:45:42:06:71:
                    de:5e:5f:3e:18:42:40:bf:64:b2:83:ee:2c:b3:5b:
                    42:45:7e:78:bc:1b:c5:e5:ea:92:63:ac:1b:f6:76:
                    ef:1c:2e:86:77:6a:cb:4f:34:06:f3:81:e7:64:77:
                    5c:21:00:31:9a:82:b8:85:8f:d3:fc:40:e7:33:22:
                    1a:75:90:70:a9:b6:ac:42:0b:90:ee:2a:ea:db:a7:
                    a9:fb:d3:7c:8a:67:ab:26:65:3f:2c:5e:43:8c:63:
                    ac:d4:63:2f:7c:fd:a3:ea:09:ff:54:b2:c7:69:43:
                    ff:8a:7b:dc:31:6d:ab:55:f0:14:1d:9f:f6:29:8a:
                    7f:fb:d7:bc:ae:4c:c2:05:40:90:62:48:2e:14:85:
                    fb:25:6c:3c:41:03:1e:5d:b2:0d:5f:aa:26:c9:e1:
                    18:ad:e4:5c:8d:0a:78:fa:4d:33:23:56:27:62:d7:
                    41:52:f3:d9:77:50:89:49:ea:69:1f:a7:8a:1b:1e:
                    73:36:10:ce:99:2a:39:98:39:7d:87:41:db:cd:21:
                    62:29:2b:c4:f7:05:0d:c9:5c:5d:52:60:a6:3d:69:
                    d9:73:a7:89:84:13:10:05:71:95:7e:f9:83:3d:c8:
                    65:ef:98:e3:ba:1e:4a:ec:94:de:fe:55:8c:36:2f:
                    33:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F9:A7:55:45:33:CB:BA:FD:D5:E4:08:10:43:86:85:DC:B9:9D:AC
            X509v3 Authority Key Identifier:
                keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/76B3E9929B9811EC8CE35458C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.214.0/23
                IPv6:
                  2001:df6:c180::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:fd:90:a9:9d:ba:06:d3:1f:44:9d:b1:48:a2:b5:c3:c8:28:
         ad:8e:fd:c9:03:55:1f:34:6f:5d:50:ca:5d:0c:d2:79:23:dc:
         61:39:9d:ca:a9:72:8b:50:a2:6b:1a:f6:a9:65:eb:92:99:b7:
         24:2c:c1:71:d8:92:cd:80:1f:a3:bb:5c:25:f3:32:94:58:02:
         86:14:f9:7d:1b:b0:e8:4c:b5:79:b2:61:c5:f3:24:7c:b5:ed:
         d4:88:05:d8:4b:03:12:cd:31:ef:6c:27:4e:a3:fc:ad:03:9e:
         86:4d:61:ee:67:f8:44:58:3d:c7:34:8d:ec:02:5b:37:31:10:
         c7:53:a0:7d:02:4a:43:1f:99:d1:61:62:95:43:6c:3d:80:0a:
         72:04:3a:20:ea:aa:85:4e:a1:41:b8:7b:85:ab:f0:bb:a0:b6:
         36:f9:45:5c:93:e2:c2:4c:0a:36:f6:51:bf:8d:b7:87:64:51:
         3d:20:79:17:86:e9:37:f4:41:38:73:d2:fa:28:95:c4:15:4d:
         d8:04:47:48:57:49:3d:7e:c3:8b:9b:ba:84:65:88:13:98:20:
         5e:83:ac:f5:78:d5:77:c3:b0:77:4a:2a:2f:58:56:60:e2:c1:
         a7:c1:4b:89:0f:84:c3:fa:5f:69:e8:27:97:52:43:37:94:ff:
         f6:45:b3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 04:20:44 2024 by rpki-client on console-ams.rpki-client.org