Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/CE751320B9D511ED89A5B11FC4F9AE02.roa
File:                     CE751320B9D511ED89A5B11FC4F9AE02.roa (raw, json)
Hash identifier:          QHrkzPB3XYYShkebDaV5iZFEb6asX/vHujmxDlC+XLs=
Subject key identifier:   A7:C9:F1:9C:B7:D3:F7:53:9B:B9:AB:85:89:51:55:24:38:14:67:98
Certificate issuer:       /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1
Certificate serial:       03FF
Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/CE751320B9D511ED89A5B11FC4F9AE02.roa
Signing time:             Thu 31 Aug 2023 01:13:18 +0000
ROA not before:           Thu 31 Aug 2023 01:13:18 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     976
IP address blocks:        103.170.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl
                          rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 02:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1023 (0x3ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1
        Validity
            Not Before: Aug 31 01:13:18 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64efe92e-d3c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:69:9c:b0:f9:01:0a:7e:de:aa:49:84:ca:ef:
                    51:00:8c:52:e2:8b:f3:6d:4a:11:ca:c4:49:80:a3:
                    76:f8:59:fc:aa:97:c0:d1:03:0e:67:01:25:df:00:
                    17:02:c1:28:4d:6f:2f:ad:aa:91:32:1b:bf:d7:33:
                    10:66:79:6d:0b:08:9b:1d:f4:06:b4:71:4c:2a:26:
                    e9:f0:c0:ee:ab:f6:e8:74:f6:78:2a:80:99:ec:1a:
                    9f:f8:6e:a0:5c:6c:74:3e:c0:3a:dd:34:a0:2a:27:
                    f7:f3:bd:a1:8b:34:72:fe:f1:23:93:2a:61:3e:99:
                    0c:2c:27:95:84:bf:cf:8f:9f:b4:62:48:ea:5b:87:
                    b5:37:ec:cb:b6:37:63:f7:80:e7:2e:f2:08:0b:1e:
                    a9:bb:1a:ed:99:36:61:8b:26:5f:a8:9a:2c:81:2e:
                    e0:11:cc:49:ce:1c:b6:c2:c3:3f:82:15:01:6d:53:
                    f3:ac:a5:75:11:c6:1c:4c:13:ea:6c:81:26:f8:b9:
                    65:38:15:2a:37:40:4f:87:27:91:af:81:5a:21:cf:
                    82:b0:c4:87:0c:66:d0:28:b9:24:48:cc:33:e3:fb:
                    3f:95:c7:a0:fe:b0:d3:96:67:d6:9a:77:ee:84:07:
                    d5:3b:e7:bd:a4:74:44:a5:8e:7c:23:79:a5:c7:58:
                    02:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C9:F1:9C:B7:D3:F7:53:9B:B9:AB:85:89:51:55:24:38:14:67:98
            X509v3 Authority Key Identifier:
                keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/CE751320B9D511ED89A5B11FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:42:00:90:90:dc:72:87:5f:77:f8:99:8a:47:6d:ea:32:f7:
         55:2d:3c:17:c8:6c:b9:40:30:e9:b0:d1:c0:12:e9:0b:65:14:
         95:39:00:72:ed:6c:dd:7d:ec:a2:68:3a:48:11:65:e6:78:73:
         21:17:e5:fb:cc:16:aa:1e:f0:62:e8:e4:e9:8e:ee:8a:90:42:
         ad:63:4d:c0:5e:37:ef:03:c3:94:94:69:73:67:46:c6:63:28:
         a4:bc:05:9c:eb:82:09:b6:b3:23:53:b0:74:7f:e7:9e:3c:f3:
         26:92:1e:5c:0e:ed:bb:37:74:dc:b5:91:45:70:3e:11:4a:61:
         66:a1:33:15:df:1b:7f:ee:17:76:a3:ad:63:43:a8:42:19:36:
         74:ce:77:32:3d:16:07:07:7a:39:0a:ba:02:32:04:23:32:38:
         99:ca:41:49:5c:c7:01:4f:f9:f2:65:f3:75:63:a0:02:5b:c2:
         91:01:c7:4e:32:2e:37:00:bf:af:53:c6:d7:5a:0c:d9:1c:e4:
         41:5a:58:1f:7e:84:e3:14:40:13:f6:8f:3a:d5:ae:f0:be:11:
         09:71:18:1b:0f:ab:13:fe:4c:07:68:18:1e:fb:89:ee:11:08:
         14:5f:74:85:14:5b:e9:bc:27:ce:21:98:e2:0d:bf:37:b5:8f:
         15:73:01:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:58:59 2024 by rpki-client on console-fra.rpki-client.org