Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/7C754058415411ED8133414DC4F9AE02.roa
File:                     7C754058415411ED8133414DC4F9AE02.roa (raw, json)
Hash identifier:          v+rBz94351qb3WC+n0Tbt50ns/T43f4d67wV/uh/EcI=
Subject key identifier:   E5:15:C1:52:67:18:4D:8F:22:F7:03:E6:30:2C:D5:FC:09:CA:C5:06
Certificate issuer:       /CN=A91162DE/serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
Certificate serial:       012F
Authority key identifier: DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/7C754058415411ED8133414DC4F9AE02.roa
Signing time:             Tue 05 Sep 2023 03:33:30 +0000
ROA not before:           Tue 05 Sep 2023 03:33:30 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     150125
IP address blocks:        103.191.77.0/24 maxlen: 24
                          2001:df1:5540::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl
                          rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91162DE/serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
        Validity
            Not Before: Sep  5 03:33:30 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64f6a18a-ab76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3e:61:6f:a9:4d:80:aa:db:03:e5:a0:8f:48:
                    79:cd:0b:18:21:6c:47:e9:66:df:c6:63:50:5c:79:
                    c1:31:e7:49:5d:c0:25:67:67:9d:c6:85:7b:a6:04:
                    37:2c:76:4a:35:ed:2b:f1:61:96:68:07:79:7d:a2:
                    98:0c:06:41:79:cd:9c:d0:a6:6f:ad:67:89:00:ff:
                    d7:fe:cb:e7:03:8d:76:f6:5f:3a:8d:57:f0:b5:d1:
                    c7:34:1c:2b:a6:24:9d:f1:a8:9a:4e:9a:32:c5:be:
                    31:c2:0a:fc:30:24:2a:2c:93:12:16:b3:61:de:6d:
                    18:48:35:fa:13:a1:a4:86:a6:59:ed:ca:c9:2d:a8:
                    9e:eb:66:c2:04:bc:c0:d5:6d:94:ca:51:fa:99:c2:
                    68:0a:4c:68:4f:e5:1f:75:ff:0e:85:9c:8d:a0:f0:
                    3a:c8:48:32:37:e4:2d:c3:ba:b3:ba:d5:99:55:1b:
                    1a:aa:52:6f:44:3c:90:0d:4a:57:12:66:ee:b7:1a:
                    80:03:b7:20:14:b8:14:8b:48:e3:8d:fc:f1:6e:45:
                    ee:e6:ab:01:1f:fb:fb:b5:4d:58:f2:85:61:54:8a:
                    ce:e0:df:b1:dc:2f:fb:96:c5:4a:60:f6:0b:96:1f:
                    e8:0e:07:e1:97:27:9d:85:84:5b:c8:83:bf:73:7a:
                    f9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:15:C1:52:67:18:4D:8F:22:F7:03:E6:30:2C:D5:FC:09:CA:C5:06
            X509v3 Authority Key Identifier:
                keyid:DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/7C754058415411ED8133414DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.77.0/24
                IPv6:
                  2001:df1:5540::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:8b:6e:de:42:e7:d0:28:22:18:b9:61:3c:f6:09:59:4a:a0:
         2a:91:4d:89:04:67:32:94:47:d2:a7:d2:e4:3e:11:b4:6e:45:
         6e:0b:2f:af:8b:2e:c4:9a:88:ef:a2:33:ea:47:ee:d1:29:55:
         93:e9:a3:62:1a:13:0b:15:f8:1c:84:55:8e:a8:fc:93:db:97:
         c8:d1:57:f8:78:20:f1:c5:0a:fb:57:04:83:4e:f1:c6:a9:f8:
         df:18:96:61:91:ec:78:86:67:21:d0:c3:c4:42:4a:a3:fb:51:
         6b:59:77:dc:8e:53:a0:35:d2:88:a4:6e:f2:9a:fa:2e:89:00:
         7a:8a:5d:33:a8:a2:54:d8:e8:dd:97:81:da:85:66:54:ec:fd:
         1b:0f:6b:23:ed:89:6d:59:7a:7d:1a:7c:f7:cc:6f:54:ed:67:
         a0:e7:48:0f:31:0d:3e:4a:c6:ba:38:87:20:60:d5:9f:db:00:
         17:20:4d:aa:44:f6:a0:15:18:66:87:dd:10:49:f4:4d:b1:24:
         d9:2b:45:a2:c9:13:b7:4a:a5:e1:91:71:28:10:82:7e:41:fb:
         ad:5c:6c:40:e9:aa:af:45:14:de:da:f1:3b:c1:49:9b:d4:97:
         db:6a:5d:86:4f:f1:0c:2e:ad:39:4a:3d:e0:c8:ed:06:c9:4b:
         67:f0:f6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 06:27:35 2024 by rpki-client on console-fra.rpki-client.org