Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/6E45741220D311EEA8C2555FC4F9AE02.roa
File:                     6E45741220D311EEA8C2555FC4F9AE02.roa (raw, json)
Hash identifier:          J+rDzr+vjp0VJz7tXqm2SF1EgyCLwt0eK+k1BbH3VK0=
Subject key identifier:   93:C6:6C:B0:97:66:AF:2E:BA:25:53:58:C4:83:DA:A9:FB:C2:7C:49
Certificate issuer:       /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
Certificate serial:       02
Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/6E45741220D311EEA8C2555FC4F9AE02.roa
Signing time:             Wed 12 Jul 2023 16:44:56 +0000
ROA not before:           Wed 12 Jul 2023 16:44:56 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     142295
IP address blocks:        103.229.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl
                          rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
        Validity
            Not Before: Jul 12 16:44:56 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64aed887-534e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:53:8e:d3:b0:00:f1:8f:c4:e2:5b:8d:6b:cb:
                    69:e9:28:45:89:d6:b9:34:c6:11:43:92:04:d2:36:
                    f3:97:25:c3:61:ee:fe:2d:36:b1:94:c3:3b:56:00:
                    4d:da:ec:c5:54:a3:c2:0a:92:4a:9a:78:7d:90:24:
                    78:cf:fe:05:e5:27:9f:5d:99:3b:d0:a9:34:42:50:
                    66:f9:a5:82:21:e3:65:c3:b5:af:67:3b:24:96:25:
                    60:54:06:0e:85:67:35:5a:f9:31:57:d1:12:04:fe:
                    1a:ee:93:b6:11:9e:d6:63:54:54:ae:0a:05:65:ef:
                    9b:e0:86:2f:56:66:16:d1:cb:e8:3b:6e:24:45:21:
                    17:38:95:ab:3d:9f:db:40:fb:f0:f4:d4:d8:4a:3a:
                    15:78:c9:51:1c:5e:3b:f9:09:dd:c5:b8:37:16:22:
                    f7:a8:09:65:d7:c0:e7:74:5b:a1:7c:6f:c5:57:4e:
                    55:d6:1f:7c:2c:15:3d:ed:fa:6b:a0:a9:67:2b:43:
                    84:dd:08:17:c1:1b:7c:10:63:68:d8:00:0d:40:44:
                    bb:a1:3c:62:6f:f0:75:38:80:91:1a:84:12:13:8f:
                    88:cb:e9:30:be:47:59:77:68:37:65:ec:fe:a5:50:
                    f4:d3:e6:ee:22:02:3c:dd:d2:f9:c4:16:f2:6d:60:
                    5b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C6:6C:B0:97:66:AF:2E:BA:25:53:58:C4:83:DA:A9:FB:C2:7C:49
            X509v3 Authority Key Identifier:
                keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/6E45741220D311EEA8C2555FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:a4:0d:0a:7c:bc:9e:38:16:88:8b:54:a4:b1:e8:f2:14:7e:
         3f:f4:54:d8:1a:52:9e:d8:ce:db:2e:6d:a3:34:f2:4e:e8:25:
         a2:8a:78:64:ba:25:1f:1c:74:b8:d4:11:d6:76:65:67:47:c3:
         37:11:2b:e6:4e:36:8b:4a:23:87:93:46:67:dd:95:3e:d1:c2:
         10:58:ea:c1:7f:96:b4:a8:98:4f:f2:88:42:bb:69:39:75:c3:
         19:6c:75:6f:a7:f1:97:31:f6:3d:8b:4c:ed:14:f6:28:ae:4c:
         b9:22:8e:4b:5f:c9:4d:1f:f0:0c:25:35:0c:89:84:74:bd:9a:
         d5:8c:a9:c2:dc:6e:ee:e2:e4:e5:90:04:4b:84:a5:a1:9c:5e:
         76:69:28:71:8e:b4:d3:6c:c4:40:c2:b8:8e:66:77:62:55:ae:
         e0:2a:0e:f5:63:c3:32:ba:34:f7:3a:07:59:81:2d:7a:1c:88:
         82:b5:f8:b2:97:04:57:c5:03:44:be:2e:b7:06:35:48:99:e6:
         7a:91:48:4a:ce:46:a0:6c:90:75:79:b2:04:58:bb:b1:73:58:
         6c:22:d5:ae:03:8b:1a:03:d1:a2:0b:c1:e2:ef:79:99:c7:9d:
         53:53:21:09:b9:ac:37:7e:d2:a6:73:04:8b:bf:24:50:45:d6:
         29:48:be:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:39 2024 by rpki-client on console-fra.rpki-client.org