Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C4D7F9DA584111EE85E40820C4F9AE02.roa
File:                     C4D7F9DA584111EE85E40820C4F9AE02.roa (raw, json)
Hash identifier:          5sOhCl+lNwtNxl24u5CQlPIGU5jZc2E11R7YvhuIInQ=
Subject key identifier:   B0:8E:59:6B:27:44:15:DD:FC:4F:B9:A7:76:E4:96:CF:A7:25:BD:CA
Certificate issuer:       /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388
Certificate serial:       03
Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C4D7F9DA584111EE85E40820C4F9AE02.roa
Signing time:             Thu 21 Sep 2023 05:43:19 +0000
ROA not before:           Thu 21 Sep 2023 05:43:19 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     137427
IP address blocks:        103.151.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
                          rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 03:55:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388
        Validity
            Not Before: Sep 21 05:43:19 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=650bd7f7-35a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2c:ef:34:a7:75:4e:c1:96:8c:27:ac:dd:ac:
                    ff:ec:c8:7d:20:ee:2e:cb:fa:0a:d1:5a:0f:38:1a:
                    7b:33:3d:9c:71:e6:7c:8b:e0:19:47:df:e9:91:b3:
                    de:6b:ff:1e:a0:db:aa:77:f9:8e:56:09:9e:36:ed:
                    42:d9:95:3d:9b:94:18:58:56:45:6a:12:17:b0:86:
                    5e:bb:be:04:0a:7d:01:dd:e2:2d:a4:15:28:d6:43:
                    37:d9:11:96:78:5d:77:93:46:39:6d:32:44:91:cb:
                    4a:91:01:5f:e2:95:8a:2b:29:36:d2:33:b0:42:64:
                    1c:0e:a1:dd:33:07:c6:38:34:ab:aa:5a:0d:3d:57:
                    1e:9a:31:ca:cb:f4:e2:85:fa:ed:cc:aa:65:f5:b2:
                    5c:6c:e2:44:7e:eb:0b:82:e6:10:aa:36:ed:f5:e6:
                    17:a1:42:7a:d9:9d:32:58:1b:83:b4:52:d5:c5:ad:
                    c1:cc:c9:61:55:aa:27:29:44:e1:86:39:f1:e9:10:
                    67:21:20:03:6c:df:23:fa:09:1e:44:ff:ae:a8:37:
                    65:b9:b5:65:8e:76:9c:60:e6:df:2b:e9:09:b2:49:
                    b2:b0:a3:b0:b4:42:df:19:ea:9f:31:4d:8e:1b:9a:
                    07:16:e3:76:d9:c5:d4:42:08:a9:fc:54:87:0e:06:
                    d7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8E:59:6B:27:44:15:DD:FC:4F:B9:A7:76:E4:96:CF:A7:25:BD:CA
            X509v3 Authority Key Identifier:
                keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C4D7F9DA584111EE85E40820C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:ab:05:b1:eb:a2:19:24:7f:65:d1:9f:60:53:a3:c9:3d:89:
         25:44:97:38:00:c4:9f:0f:35:eb:8b:25:7f:bc:86:83:dd:fc:
         74:83:b2:d0:3c:69:fb:39:96:c6:4c:da:e6:ab:17:9d:b3:55:
         5d:86:20:a8:93:16:a3:1a:70:40:b6:c6:c4:3b:69:8c:50:3b:
         bd:bd:05:f5:b7:7c:ac:2b:bd:2c:30:ab:d1:d0:0a:c1:0f:50:
         54:f9:86:9f:eb:19:d2:9d:20:ec:4c:3a:31:c8:db:b6:e4:54:
         8c:6d:46:80:02:79:93:ad:c0:ab:86:15:04:da:e9:96:63:64:
         3f:0c:6b:68:4f:dd:e3:48:93:3c:b7:ef:55:79:af:f2:38:9a:
         25:58:aa:ca:e7:07:88:1d:af:0f:b4:11:b7:aa:71:b8:04:9a:
         d9:d9:ba:7d:cd:e4:b4:bc:39:2a:bf:7b:f3:5a:35:7e:7b:84:
         2b:60:d0:eb:41:33:40:99:f5:22:35:46:10:ca:9c:38:80:9e:
         81:0d:f9:b4:e7:83:96:96:e6:89:9e:1b:dd:7a:c7:c7:57:2c:
         34:3f:98:c4:e1:24:1d:ce:55:a4:60:56:fc:cf:a8:e5:b7:2e:
         5f:03:04:14:72:73:0f:2e:4b:d9:d2:ce:02:db:fc:22:40:5f:
         45:69:d2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:18 2024 by rpki-client on console-ams.rpki-client.org