Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/A280C1FCA06D11EB92FB3739C4F9AE02.roa
File:                     A280C1FCA06D11EB92FB3739C4F9AE02.roa (raw, json)
Hash identifier:          BJQEnl86Bx9uGan5ZQlD+aDEsBXUteyINnoashUOD98=
Subject key identifier:   38:A9:94:4E:62:31:1C:74:FD:5C:93:6A:78:EF:A8:37:34:03:42:EF
Certificate issuer:       /CN=A91FF4FC/serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B
Certificate serial:       0C6D
Authority key identifier: F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/A280C1FCA06D11EB92FB3739C4F9AE02.roa
Signing time:             Wed 14 Jun 2023 18:48:57 +0000
ROA not before:           Wed 14 Jun 2023 18:48:57 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     59355
IP address blocks:        103.230.252.0/22 maxlen: 22
                          103.230.252.0/23 maxlen: 24
                          103.230.254.0/24 maxlen: 24
                          103.230.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl
                          rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3181 (0xc6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF4FC/serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B
        Validity
            Not Before: Jun 14 18:48:57 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=648a0b98-83b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:74:60:45:35:a3:31:1f:1e:86:d8:3d:9d:c9:
                    87:f7:cd:96:55:35:50:ab:15:a0:c3:1b:7c:ee:dc:
                    f5:8d:1d:27:8d:5d:8d:e2:dd:d3:40:fe:13:e9:ea:
                    0d:ea:f5:98:76:0f:e8:80:95:6f:58:23:fa:a6:c4:
                    ab:ae:0c:ef:d3:0b:80:18:0b:dc:22:68:b2:63:81:
                    43:2f:c7:15:95:cf:6a:43:5e:a0:e5:20:6f:29:a2:
                    e7:db:f1:2b:d1:2a:16:61:f9:4d:d4:0b:88:c0:d8:
                    84:dd:be:7c:c6:b3:cb:4a:5e:8b:ca:1f:1f:4b:64:
                    23:7d:02:ad:11:7a:f7:73:c2:0d:40:99:70:c0:f5:
                    8b:24:a5:f3:20:a3:1a:7a:02:e4:ba:13:df:f1:26:
                    6d:f0:fa:8d:fd:be:0e:be:7b:61:5f:d3:31:3c:75:
                    4b:c3:12:3a:b2:09:a8:b1:e7:0e:c7:01:1b:c6:4b:
                    c7:6d:71:82:be:b3:a1:b2:eb:a3:38:32:f9:b9:5a:
                    1c:cb:6b:eb:09:af:de:08:bf:31:c2:83:c4:04:c4:
                    0a:60:bc:90:0b:63:64:be:1f:00:5c:07:7d:50:be:
                    f4:15:eb:30:69:cf:68:d4:f1:e1:2a:45:4d:0b:9a:
                    6c:37:f1:6d:0a:69:04:d3:4d:5e:71:29:75:04:8c:
                    b5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A9:94:4E:62:31:1C:74:FD:5C:93:6A:78:EF:A8:37:34:03:42:EF
            X509v3 Authority Key Identifier:
                keyid:F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/A280C1FCA06D11EB92FB3739C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:9a:46:53:0c:8d:36:cc:9f:ec:3e:9e:00:fd:c0:7a:6f:ed:
         cf:45:b3:f8:96:e3:de:da:f4:7c:4b:94:65:0d:83:c3:ba:c9:
         68:ad:36:c2:b6:e6:6c:38:c9:ea:6a:e8:b1:09:95:22:b0:d9:
         7f:9b:18:73:64:a1:62:fa:79:f8:b9:17:c8:02:e2:e4:35:44:
         c7:c4:31:1a:6f:db:8b:24:d1:c5:e7:d9:eb:07:7a:b4:15:db:
         3a:43:fe:df:93:af:5c:df:91:b5:ac:89:7f:4d:f7:d2:ab:4c:
         7f:17:93:38:88:9a:ca:23:55:8a:7b:2f:96:ac:5a:f4:70:be:
         83:99:58:a0:51:a0:ec:6c:09:74:11:15:71:7d:0d:5c:31:fa:
         c8:b3:13:e1:f0:76:f0:58:9b:c2:fc:d4:80:57:2a:7c:58:6c:
         0e:8f:03:96:b2:78:b8:be:63:04:ad:06:20:9e:ce:20:1a:0c:
         0e:a9:82:e2:e5:48:3c:b6:a6:ca:4f:a9:73:6a:4c:7a:58:dc:
         6e:67:a4:19:dc:6f:bd:1e:40:a6:1a:10:d4:a0:71:06:74:63:
         51:ed:16:0e:03:10:30:d7:4b:98:42:ed:0e:02:0e:27:49:4a:
         a1:e6:3d:bf:00:e6:c3:e8:b1:c7:98:fd:7b:55:ac:a9:7f:84:
         b5:7b:f3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 19:21:06 2024 by rpki-client on console-fra.rpki-client.org