Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/9B0DA87CEB8A11EC86295E7BC4F9AE02.roa
File:                     9B0DA87CEB8A11EC86295E7BC4F9AE02.roa (raw, json)
Hash identifier:          U9A27sTiILooczu4FPKq/inu4TUTixKO6quuZG1wufc=
Subject key identifier:   6A:52:30:7A:6B:F5:76:D1:14:D1:1C:8D:A0:0C:79:4C:6E:6A:46:B0
Certificate issuer:       /CN=A91FDFB7/serialNumber=EA51CE20A59E42B8C71D26AA6B886690CD152984
Certificate serial:       064A
Authority key identifier: EA:51:CE:20:A5:9E:42:B8:C7:1D:26:AA:6B:88:66:90:CD:15:29:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/9B0DA87CEB8A11EC86295E7BC4F9AE02.roa
Signing time:             Fri 04 Aug 2023 22:40:01 +0000
ROA not before:           Fri 04 Aug 2023 22:40:01 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        103.94.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 22:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1610 (0x64a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDFB7/serialNumber=EA51CE20A59E42B8C71D26AA6B886690CD152984
        Validity
            Not Before: Aug  4 22:40:01 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64cd7e41-efcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c2:3b:5c:0f:ee:34:46:38:53:3e:65:43:f3:
                    7a:82:55:88:9c:d3:ea:32:ff:5d:91:59:83:c1:e5:
                    87:80:bf:71:de:ca:8e:54:78:f9:7e:ea:93:f0:0f:
                    0e:69:6f:03:16:fa:d7:94:c0:de:ed:33:98:66:f6:
                    97:6c:30:34:4b:4d:81:42:8d:63:8f:bb:78:65:74:
                    c7:fb:11:23:75:35:b3:3c:c0:0e:26:e4:c4:9e:69:
                    62:78:a5:25:a5:f6:74:31:61:c4:81:90:b9:08:16:
                    ed:b0:f9:7d:dd:61:94:36:31:5a:24:d9:71:ad:67:
                    f4:d4:5f:38:2e:23:46:3b:6d:de:b1:5d:b4:82:41:
                    9d:a6:1c:81:10:42:be:40:88:2f:95:43:82:a9:63:
                    a8:69:10:24:6b:1a:76:be:cc:da:66:c9:e7:f4:07:
                    7d:41:36:5c:15:ea:bf:67:1a:72:aa:2a:61:27:e6:
                    bc:f7:7c:a4:bd:ed:f1:f3:46:d8:b5:17:0b:16:e2:
                    3c:e7:04:19:4a:16:6f:b0:11:ef:c0:ea:1c:39:7f:
                    87:7c:01:44:4f:0a:d9:7b:ab:a3:da:2a:3f:8c:2d:
                    17:35:3b:ef:5e:1b:f7:5e:0f:32:53:d4:d0:a7:cd:
                    ba:cb:80:00:3d:09:b9:39:7c:39:eb:82:6a:ae:60:
                    ee:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:52:30:7A:6B:F5:76:D1:14:D1:1C:8D:A0:0C:79:4C:6E:6A:46:B0
            X509v3 Authority Key Identifier:
                keyid:EA:51:CE:20:A5:9E:42:B8:C7:1D:26:AA:6B:88:66:90:CD:15:29:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/9B0DA87CEB8A11EC86295E7BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:94:6a:9f:57:2d:40:25:28:3f:a3:ef:05:70:6d:49:2c:ea:
         f8:b1:8c:4b:a1:62:ac:89:3a:31:20:d6:38:96:91:59:70:c3:
         3f:70:df:cc:f1:d1:86:fc:63:aa:45:7f:cb:ad:c7:13:8d:c0:
         fa:28:52:39:5d:60:65:c3:fd:8d:69:7a:4f:96:5a:19:d9:90:
         4e:b3:2c:82:f1:89:49:e6:b0:c5:3a:4c:e4:b0:88:31:4a:9d:
         c0:14:e3:69:44:b2:c3:e0:e0:f6:83:c6:6f:0e:13:43:bd:b2:
         e5:cb:61:c4:b5:f6:6e:76:d5:78:f2:a5:4d:40:03:cc:58:50:
         fb:15:80:24:f5:09:11:7c:41:f3:cb:dc:fa:20:b8:93:b5:57:
         4d:b8:67:d0:96:16:92:76:13:e6:35:b3:af:8d:6e:0a:fd:6b:
         b6:f1:ab:90:4a:6b:80:ca:79:5d:45:2c:35:e8:82:65:05:aa:
         ed:64:88:b2:73:53:76:ca:41:88:18:97:eb:4e:b4:fb:47:dc:
         57:c9:a6:db:ad:de:85:b1:33:04:4a:0a:12:85:40:47:13:6e:
         02:4e:b1:da:11:c7:f6:6e:b0:10:9f:c4:ab:a6:e7:37:fb:90:
         b0:21:1b:50:33:8c:bc:d3:17:91:06:a9:0f:c9:38:a9:b5:5e:
         b4:84:59:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 23:55:18 2024 by rpki-client on console-fra.rpki-client.org