Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/873A15DA140C11EB9204AC24C4F9AE02.roa
File:                     873A15DA140C11EB9204AC24C4F9AE02.roa (raw, json)
Hash identifier:          +wqMrLovTJbkiku8bnxz8Y3AxhoJQCec+53n8PscEvI=
Subject key identifier:   F1:28:5D:1F:10:56:05:FD:46:DA:64:5A:FD:01:EA:CA:03:C8:90:87
Certificate issuer:       /CN=A91FDFB7/serialNumber=EA51CE20A59E42B8C71D26AA6B886690CD152984
Certificate serial:       0647
Authority key identifier: EA:51:CE:20:A5:9E:42:B8:C7:1D:26:AA:6B:88:66:90:CD:15:29:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/873A15DA140C11EB9204AC24C4F9AE02.roa
Signing time:             Fri 04 Aug 2023 22:39:58 +0000
ROA not before:           Fri 04 Aug 2023 22:39:58 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     10143
IP address blocks:        103.94.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1607 (0x647)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDFB7/serialNumber=EA51CE20A59E42B8C71D26AA6B886690CD152984
        Validity
            Not Before: Aug  4 22:39:58 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64cd7e3e-9c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fe:0d:c3:f8:3a:06:45:e5:5e:da:ee:e2:82:
                    1b:bb:80:40:a2:f0:90:7a:53:2c:05:98:af:5c:83:
                    d6:ca:24:ff:a9:0d:5b:a1:08:cf:37:a4:10:10:59:
                    8b:98:b8:dc:b8:1f:43:1e:08:54:43:12:fe:88:98:
                    40:68:ad:f6:72:3a:1c:65:6d:2a:2a:9d:aa:cd:c9:
                    e2:24:69:27:00:89:28:aa:63:15:4a:85:cb:c6:7c:
                    e2:aa:8b:12:fd:86:b8:91:74:33:c8:2d:03:35:aa:
                    76:15:47:eb:8c:0f:46:42:9d:b6:21:98:f8:0b:c5:
                    02:46:ad:3b:a8:aa:f5:ae:44:68:c2:67:3f:b0:c1:
                    08:7d:af:e1:31:5b:a9:c8:52:7d:79:2d:76:ae:c8:
                    0f:a3:4a:82:f9:52:07:c1:88:3c:31:ad:49:f4:86:
                    a4:1d:e8:a1:69:77:f3:4c:3f:77:e4:da:5a:22:6b:
                    8f:98:94:81:8c:37:cb:3b:0a:14:1c:ae:1a:25:48:
                    4b:fa:5f:ff:ce:06:9f:48:a5:40:52:02:45:a3:13:
                    17:a5:2f:56:14:b2:a7:f9:b7:6c:ac:c4:d7:c6:0a:
                    80:58:d4:a2:0f:4c:75:a3:bb:e4:e7:82:bc:f1:4b:
                    0e:37:83:a0:a4:95:63:7b:2e:7c:65:c7:a0:40:7f:
                    cc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:28:5D:1F:10:56:05:FD:46:DA:64:5A:FD:01:EA:CA:03:C8:90:87
            X509v3 Authority Key Identifier:
                keyid:EA:51:CE:20:A5:9E:42:B8:C7:1D:26:AA:6B:88:66:90:CD:15:29:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/873A15DA140C11EB9204AC24C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:37:60:7a:3f:49:6f:d2:56:65:cd:bc:71:4b:96:b9:67:1a:
         4c:de:16:48:a4:28:28:6e:c9:13:58:35:c7:2d:05:12:af:20:
         f7:7c:a4:c6:84:3f:df:23:08:95:ed:fa:d6:f2:cf:b2:77:7c:
         9a:9d:6e:9e:0b:f5:83:fb:e5:f1:ac:65:23:35:70:62:54:c9:
         bd:78:ce:e6:9a:66:0b:2d:3f:ba:c3:b1:d2:f9:c7:8f:9e:bf:
         5c:9f:9d:93:25:0b:3b:dd:96:41:35:69:d4:37:ad:e4:20:43:
         60:23:73:70:ca:44:99:f9:1f:88:14:f1:2a:28:94:18:d1:a0:
         bd:b4:f2:ab:94:7a:98:65:40:9e:65:8d:e3:01:e6:3e:cb:5a:
         ad:35:5f:31:8c:60:57:c2:88:6f:06:6a:7d:8f:72:90:01:b5:
         4a:25:8f:14:2f:17:94:14:2d:f2:6f:05:ae:eb:a5:51:16:ab:
         cb:9e:7f:c8:ab:6e:83:3f:4e:b9:b8:d4:6e:45:40:65:7b:00:
         3b:85:28:90:08:88:47:51:a5:a8:7b:12:5a:b4:ed:c3:fa:14:
         97:f6:13:cf:3e:1c:be:43:0e:57:b6:c5:61:20:7c:be:da:5a:
         c4:26:48:9c:05:7b:b3:ea:fd:9a:26:6c:f7:ee:db:bd:31:6a:
         d5:99:47:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:14:48 2024 by rpki-client on console-ams.rpki-client.org