Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/81764BC4235511EC976AC464C4F9AE02.roa
File:                     81764BC4235511EC976AC464C4F9AE02.roa (raw, json)
Hash identifier:          tQVS7e3rI9ffZtiZObxB0B0DjpEQKLYAB6Dxx8Z2IBY=
Subject key identifier:   1C:9E:86:FD:31:ED:0F:22:74:67:37:90:F2:E1:9D:96:B5:B5:85:BF
Certificate issuer:       /CN=A917E4CB/serialNumber=832318230E258220A7CEE42E097D19AE997613A3
Certificate serial:       0377
Authority key identifier: 83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/81764BC4235511EC976AC464C4F9AE02.roa
Signing time:             Thu 03 Aug 2023 01:22:07 +0000
ROA not before:           Thu 03 Aug 2023 01:22:07 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     136751
IP address blocks:        103.95.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl
                          rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 03:09:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887 (0x377)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E4CB/serialNumber=832318230E258220A7CEE42E097D19AE997613A3
        Validity
            Not Before: Aug  3 01:22:07 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64cb013e-918d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c8:d9:92:81:bb:49:54:22:e5:ae:8c:6f:4e:
                    95:dd:37:74:da:42:d9:e5:fd:09:f4:e0:d8:15:1d:
                    90:dc:45:91:cd:9c:3a:d4:1b:fc:8f:6e:38:fa:ec:
                    77:0f:eb:0a:08:1b:77:4d:ec:0f:36:97:4c:8e:0f:
                    f0:3b:26:b3:6f:7c:31:ad:0e:6d:a0:5b:50:a0:09:
                    e8:6c:34:f0:60:18:5d:36:a1:05:bd:ac:7e:5c:5f:
                    d2:7f:a2:51:c5:bd:43:d8:3c:49:0c:ed:1c:ca:71:
                    b7:86:ad:97:0e:5e:75:b2:3d:ec:1e:04:9e:17:4a:
                    27:94:a2:eb:75:7c:ed:be:cf:fb:89:f4:91:69:21:
                    64:61:08:1e:dd:40:a1:ea:00:bc:77:65:f2:dc:70:
                    f8:54:18:44:4f:77:c8:4a:00:8a:a3:60:49:98:27:
                    41:04:31:65:99:13:67:8d:f4:a3:52:c9:4d:31:a8:
                    03:c0:7c:13:49:8c:a2:3e:8a:67:19:65:ae:04:cb:
                    44:3a:03:8e:ad:6f:d0:cf:89:87:de:34:ef:62:29:
                    37:ad:b0:1c:b6:7d:5d:8b:03:76:f3:d4:99:60:52:
                    b0:6a:48:f6:5f:bb:20:52:6c:b9:ec:56:7a:72:86:
                    75:5a:2a:50:03:f8:78:79:d2:76:1c:7f:99:ed:a2:
                    67:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9E:86:FD:31:ED:0F:22:74:67:37:90:F2:E1:9D:96:B5:B5:85:BF
            X509v3 Authority Key Identifier:
                keyid:83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/81764BC4235511EC976AC464C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:dd:ef:2d:71:6d:20:89:2c:b0:a8:51:a3:5e:6e:7e:ad:0a:
         2f:21:a6:0b:87:3d:c8:a5:5a:72:1f:10:0d:11:0f:b1:d1:80:
         22:6c:7d:8c:0e:e5:78:1a:28:fb:75:fe:06:24:53:36:2f:2f:
         9a:59:53:75:3b:cd:f9:60:6e:07:f4:75:48:c9:05:e7:2e:bf:
         33:88:5d:bc:76:69:5d:4f:31:0d:20:18:11:2e:90:7a:e0:e5:
         d3:8c:28:7d:0e:3c:68:04:d7:3a:ae:2f:d3:24:a1:35:98:de:
         90:90:77:35:ed:29:60:17:11:e3:4c:d7:c6:4e:e3:17:75:63:
         5f:1e:6a:8c:8a:c1:81:4d:8b:e8:9f:9e:4d:7d:03:52:56:95:
         1a:39:ab:a6:a1:8c:79:45:36:b8:52:a8:b5:1e:a8:ad:47:38:
         b9:19:0d:7d:89:81:c9:91:e1:f0:fa:04:bf:fb:92:2f:fb:a2:
         d1:8a:2f:16:76:75:05:0f:a1:6e:9a:bc:f0:27:f2:5d:8a:d9:
         eb:58:85:f3:3f:50:6b:e3:8a:85:9c:1b:fa:4c:e6:97:5c:38:
         ab:b4:5f:7d:fa:08:57:00:9d:72:9a:9d:28:0c:37:ab:8e:fd:
         c9:ad:74:12:6e:3b:26:d4:2b:95:8a:28:6b:a8:c3:2e:f8:48:
         84:49:c3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:07:28 2024 by rpki-client on console-ams.rpki-client.org