Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/E762B166FAF811EE92A3642EC4F9AE02.roa
File:                     E762B166FAF811EE92A3642EC4F9AE02.roa (raw, json)
Hash identifier:          T0MEU9uiqGpjuKW+36eXoeccUUjS7k2e0k37wCmWLMc=
Subject key identifier:   49:C8:57:EA:98:01:E8:5A:03:32:8F:9A:D5:7F:32:40:23:C8:90:96
Certificate issuer:       /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
Certificate serial:       C6
Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/E762B166FAF811EE92A3642EC4F9AE02.roa
Signing time:             Mon 15 Apr 2024 07:22:24 +0000
ROA not before:           Mon 15 Apr 2024 07:22:24 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     210542
IP address blocks:        103.83.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl
                          rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 07:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
        Validity
            Not Before: Apr 15 07:22:24 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=661cd5af-ef55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:69:09:34:56:64:ce:d5:64:90:95:23:fb:d1:
                    92:a5:cc:70:05:28:37:b1:b5:52:fa:da:05:46:95:
                    22:6a:51:e9:e1:78:8c:03:2c:6c:9a:1e:c1:a1:9d:
                    0d:2a:96:a7:af:82:9d:51:93:7e:47:e9:9f:a3:13:
                    d3:1d:1f:73:b8:71:6e:a0:08:3e:66:e0:1c:06:49:
                    84:b6:ff:8a:cb:fa:ef:e2:62:8a:5d:8c:37:95:85:
                    e5:8c:1a:0f:d0:e0:61:7b:71:90:b8:79:8e:cb:62:
                    db:e8:2b:8a:39:ea:d1:d2:3e:05:aa:45:4a:55:56:
                    42:71:06:b0:ad:d9:34:8a:e2:0a:53:c8:4d:71:0c:
                    14:c5:f0:d9:85:dd:af:d9:35:19:e1:cf:95:06:87:
                    64:6f:bf:ef:2d:95:72:d4:06:06:49:07:7c:a6:f6:
                    43:bc:0c:42:3e:e8:4b:9a:62:6f:d5:06:cf:d2:a1:
                    91:53:3c:eb:d2:3d:09:a0:34:61:e4:d3:48:ed:46:
                    e8:06:df:fa:13:a5:f4:12:64:c8:de:08:00:2f:33:
                    d2:98:db:c4:e5:29:9c:15:08:cc:d3:f1:dd:81:39:
                    ec:41:79:ab:2d:33:92:af:ef:86:a7:0e:1e:80:20:
                    a8:3d:9e:eb:70:8a:82:1b:91:41:99:2e:ef:f3:72:
                    b4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C8:57:EA:98:01:E8:5A:03:32:8F:9A:D5:7F:32:40:23:C8:90:96
            X509v3 Authority Key Identifier:
                keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/E762B166FAF811EE92A3642EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:fa:ea:16:f6:1b:77:1e:41:a9:e9:75:e8:8e:d2:e8:99:41:
         73:75:ba:1f:6b:44:e5:4d:44:67:0b:72:63:43:21:d7:01:b9:
         2f:40:45:4f:d1:c2:b8:c4:29:da:20:a4:41:db:46:7b:11:95:
         33:38:73:7a:e8:1a:36:93:0d:44:28:bd:a5:9d:ee:31:8d:a6:
         d6:43:13:99:a8:57:b9:ca:a3:1c:7d:9e:e3:bb:6a:a6:c4:7f:
         01:a8:b4:b3:fe:77:d6:21:15:78:a0:07:d9:ff:de:28:96:be:
         a6:13:33:cd:2a:44:e0:4f:f9:96:4c:6f:f9:7a:1a:9b:0d:49:
         31:b3:00:a9:d7:6e:99:99:d1:c9:e7:bc:98:d0:5a:d6:63:42:
         f3:3d:e2:a8:08:47:a1:4b:38:22:90:36:c1:4d:e1:1a:1c:16:
         89:28:bd:68:a2:56:e3:58:ca:b3:db:41:84:8e:2b:1e:d1:30:
         c0:67:69:01:27:ee:bc:df:c3:d3:b4:6d:be:2b:98:10:5a:9f:
         4a:03:fb:07:e6:c3:2f:13:ae:f4:61:91:61:76:44:59:4e:63:
         22:d6:a0:c1:57:22:1c:08:f9:49:3d:08:d3:68:24:64:39:80:
         ad:08:23:56:49:6c:70:44:00:00:0b:38:18:39:71:2b:52:08:
         b0:58:28:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 10:44:04 2024 by rpki-client on console-ams.rpki-client.org