Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/D0103496FD6611EE9188C568C4F9AE02.roa
File:                     D0103496FD6611EE9188C568C4F9AE02.roa (raw, json)
Hash identifier:          zL5GyY22PUxzXPY7su+a9MACm6wFmrlH/cDiceL5VFU=
Subject key identifier:   0C:5B:C0:41:DD:DC:2F:81:3F:70:97:FB:B4:0A:2A:D1:24:DB:7A:C1
Certificate issuer:       /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
Certificate serial:       CE
Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/D0103496FD6611EE9188C568C4F9AE02.roa
Signing time:             Thu 18 Apr 2024 09:34:12 +0000
ROA not before:           Thu 18 Apr 2024 09:34:12 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     17941
IP address blocks:        103.83.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl
                          rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:09:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
        Validity
            Not Before: Apr 18 09:34:12 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=6620e913-bf32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:95:58:38:35:b8:c8:32:70:a8:bb:49:e7:
                    98:f1:b8:b8:74:b2:03:4e:cc:fe:dd:0d:41:94:8d:
                    db:4f:94:20:fa:ee:d5:44:69:43:58:ff:ab:a9:83:
                    8a:95:01:a5:bb:ea:f0:a8:09:f7:ad:5f:0d:af:70:
                    60:cd:1c:73:a9:d0:1b:0b:2a:4f:35:ce:3a:1c:1a:
                    30:1c:5f:a1:b1:ec:0b:35:ae:37:56:b5:a3:bd:5d:
                    88:e8:d4:ea:4e:19:e1:f5:36:04:c3:f2:2a:19:81:
                    47:00:79:56:55:91:f8:03:19:35:a0:6c:d0:ab:bc:
                    c2:e8:a8:e9:37:c7:56:43:48:85:2a:50:f7:9a:73:
                    46:4a:74:07:8f:d6:aa:76:4b:f1:4d:11:6f:8c:3b:
                    8c:90:f1:4b:e7:87:7e:1c:a2:4a:93:a8:dd:92:e0:
                    45:1b:23:26:34:98:36:e7:20:13:62:08:85:b1:01:
                    68:29:85:d1:38:cc:80:a6:b6:20:31:f1:47:cd:fb:
                    8e:d1:3f:9b:ae:f6:88:50:0f:9f:4d:68:c7:de:fb:
                    8b:4a:73:c3:6a:da:aa:9d:95:cc:e4:09:e9:ec:74:
                    53:c4:8c:14:ae:c9:29:88:f1:b8:7c:55:f8:d2:55:
                    ec:dc:e7:98:b8:76:5e:32:ff:8e:e8:10:55:cb:fd:
                    a1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5B:C0:41:DD:DC:2F:81:3F:70:97:FB:B4:0A:2A:D1:24:DB:7A:C1
            X509v3 Authority Key Identifier:
                keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/D0103496FD6611EE9188C568C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:2e:f3:04:c1:92:0a:4c:8f:6a:79:a4:4c:df:24:25:b4:ba:
         2e:c5:40:ae:7c:12:31:18:f7:4f:52:d0:a6:b3:d8:6f:1c:74:
         64:10:08:31:ae:d0:80:8e:e3:a2:69:55:1c:7b:d5:9d:22:41:
         e4:59:78:07:c5:de:36:94:d1:73:cf:55:e7:1e:c8:b7:47:02:
         90:dd:c0:09:9c:28:5e:a7:0f:73:f1:8a:64:ca:6f:40:55:d4:
         08:f8:8d:b7:77:dc:2d:8d:3f:9c:f8:aa:e0:18:da:e9:17:de:
         42:99:49:aa:6b:1a:8b:2c:91:32:86:e8:f0:98:a3:b2:bc:4f:
         67:d5:d5:f5:87:18:8b:36:24:64:a5:aa:4e:1a:f0:08:f6:60:
         eb:3f:38:f0:93:55:2e:d3:24:11:42:47:a0:22:e2:d2:d4:95:
         12:1c:50:05:5f:80:40:0c:e2:9e:12:2a:e2:4e:2b:c8:53:e2:
         53:43:72:1f:7a:8d:f2:03:50:e6:d8:4f:06:c2:32:55:f7:91:
         67:57:34:e4:fb:7b:73:90:31:ad:2f:bd:35:90:a1:91:ec:f9:
         a4:54:56:83:f6:1d:42:02:db:11:92:1e:d7:bf:5e:61:b5:09:
         9c:54:b9:07:bb:a5:1c:5a:5b:aa:76:a6:83:7c:db:43:b6:00:
         9c:64:5b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:06:09 2024 by rpki-client on console-fra.rpki-client.org