Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/277E1906063111EEA8D4704BC4F9AE02.roa
File:                     277E1906063111EEA8D4704BC4F9AE02.roa (raw, json)
Hash identifier:          THC/L5YLjrONtGlxNBxJEuWTknijbFjGs5qqW005o70=
Subject key identifier:   A6:0E:EE:CA:A0:D0:AA:A8:7F:98:71:78:7F:84:7E:C2:E1:A2:12:0F
Certificate issuer:       /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9
Certificate serial:       39
Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/277E1906063111EEA8D4704BC4F9AE02.roa
Signing time:             Thu 21 Sep 2023 05:05:48 +0000
ROA not before:           Thu 21 Sep 2023 05:05:48 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     136969
IP address blocks:        103.155.62.0/24 maxlen: 24
                          103.155.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl
                          rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9
        Validity
            Not Before: Sep 21 05:05:48 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=650bcf2b-7164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1e:64:28:09:86:93:a0:25:9b:ee:81:c3:da:
                    63:9e:0b:81:ee:c7:eb:1b:60:8f:94:e3:aa:89:7a:
                    eb:f8:c1:96:ea:1d:af:55:82:9f:99:8b:f9:5b:e9:
                    70:bb:b2:1d:4d:fb:74:6d:03:24:94:dd:56:6c:16:
                    4a:c0:98:ea:24:e6:4c:27:20:28:77:73:6f:9d:92:
                    82:e9:7e:d3:54:6c:cf:20:d1:18:c6:94:6c:d7:f7:
                    1f:e9:af:bb:ac:25:d2:62:4f:97:51:1e:c0:5a:8e:
                    8c:c1:2e:40:95:90:89:05:47:04:a0:56:7c:8a:f5:
                    15:06:8e:5c:1b:70:04:a1:93:3e:dd:2c:24:c6:dc:
                    cf:ba:9c:f1:46:8c:71:3a:ca:32:a8:62:c6:6d:38:
                    48:19:b4:65:d8:37:7e:b0:4a:06:8c:ff:05:d7:0b:
                    56:42:66:1e:c8:bf:bf:a3:c4:ee:57:46:98:f0:33:
                    90:bf:81:b5:66:4e:98:3e:b0:da:02:89:4b:d8:a0:
                    80:e4:29:c0:1d:e8:69:07:17:86:95:12:09:a1:5b:
                    0f:28:6b:de:6d:51:1f:8f:12:9b:94:c1:e9:dc:27:
                    c6:e0:7b:79:a6:9c:e1:65:ba:4e:41:f4:a8:cf:be:
                    e0:16:85:8d:04:b9:b5:c2:12:2f:23:0f:f2:0f:67:
                    c3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0E:EE:CA:A0:D0:AA:A8:7F:98:71:78:7F:84:7E:C2:E1:A2:12:0F
            X509v3 Authority Key Identifier:
                keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/277E1906063111EEA8D4704BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:6b:ee:98:6e:d8:25:0b:e3:62:d1:93:63:ec:9c:95:78:f3:
         33:3a:92:7f:5e:31:ed:81:a9:e6:e6:72:eb:0c:5e:60:3a:74:
         11:03:4b:f6:bf:e0:d8:36:1e:d3:de:2a:44:62:5b:e4:dc:49:
         27:97:24:d7:52:8a:d2:fa:90:14:ab:84:e9:23:2c:ca:62:ae:
         f4:1d:83:70:d3:db:c2:c1:da:11:ed:6a:fb:24:a2:77:d4:1c:
         ab:f2:de:07:b7:d3:b3:f1:e3:b1:f5:2d:dc:4f:c1:81:5b:64:
         c7:5c:70:f0:6e:69:24:be:cd:a1:a9:b2:51:ee:b9:c2:eb:7d:
         e0:41:52:48:5a:a8:34:a8:8f:4a:13:3f:b3:c0:15:47:fc:fd:
         00:1c:84:f4:7c:bc:97:e2:47:ac:99:0e:ca:32:92:83:20:4a:
         07:9b:30:49:69:3e:4b:de:b4:ac:c1:e6:71:09:22:89:13:ef:
         a9:2b:49:08:84:8e:ba:0d:2c:d2:67:31:3c:a1:2f:b5:85:45:
         52:cb:29:72:c6:32:e5:6c:f7:a1:75:44:41:8a:be:ff:f0:da:
         8b:c8:97:86:6f:f8:d4:22:bd:20:16:f3:d4:02:81:5a:c5:12:
         1f:cc:5e:c9:f4:ec:31:03:82:82:e5:e2:ee:06:73:aa:33:4b:
         26:ea:ce:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:33 2024 by rpki-client on console-fra.rpki-client.org