Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/1B010960CD2211ED8A66486BC4F9AE02.roa
File:                     1B010960CD2211ED8A66486BC4F9AE02.roa (raw, json)
Hash identifier:          ndYomZ99yxFknrYEsXYBDeEAsKcdU++6L8FlnDMmRWE=
Subject key identifier:   29:98:39:C3:FA:80:2D:DB:F0:01:2C:67:E1:86:71:AE:4E:C2:1B:2C
Certificate issuer:       /CN=A91A0FB6/serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D
Certificate serial:       8D
Authority key identifier: 73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/1B010960CD2211ED8A66486BC4F9AE02.roa
Signing time:             Fri 15 Dec 2023 05:36:42 +0000
ROA not before:           Fri 15 Dec 2023 05:36:42 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     150674
IP address blocks:        103.53.156.0/23 maxlen: 24
                          2001:df1:aec0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl
                          rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:44:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0FB6/serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D
        Validity
            Not Before: Dec 15 05:36:42 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=657be5e9-84a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b4:34:26:ee:fb:92:5b:66:21:34:f0:c2:c3:
                    e4:2e:6d:a4:a2:e2:c8:d0:66:43:32:2a:46:35:c4:
                    cf:64:01:40:4a:5f:74:77:09:e0:79:55:a5:f8:58:
                    ab:b7:00:54:e8:29:02:53:f1:db:06:dd:5f:93:d1:
                    90:70:01:1c:cb:6b:d3:f5:24:49:39:10:56:a1:f6:
                    b9:17:f5:8a:77:da:9d:bf:ce:26:e1:c0:46:72:3a:
                    ed:14:74:69:1c:19:46:7c:e1:d8:7c:88:f5:b5:c6:
                    9b:2a:f0:03:84:04:9b:b5:19:61:97:c9:be:97:51:
                    8e:e0:2f:7a:13:27:83:b8:82:0b:7f:64:35:a2:6c:
                    34:5a:1e:19:c4:28:db:00:d0:f5:14:a0:33:2c:01:
                    84:1e:46:65:18:e9:dd:38:1f:db:47:e0:0e:64:5d:
                    87:93:69:9f:7b:54:09:3d:86:95:a4:aa:2c:e4:7e:
                    1c:0a:ef:fc:41:1f:e0:18:c6:77:e1:5c:b2:38:2b:
                    73:30:1e:92:27:c7:0b:28:c6:be:5c:d9:fc:fb:14:
                    fa:5c:b2:7e:5d:d2:8b:93:5b:1d:a7:9e:85:1b:6a:
                    30:a4:43:23:c9:bf:4e:4d:74:89:70:0e:ca:70:e3:
                    45:95:c5:2b:37:c4:dc:bc:7c:14:a4:5d:b9:af:8d:
                    9c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:98:39:C3:FA:80:2D:DB:F0:01:2C:67:E1:86:71:AE:4E:C2:1B:2C
            X509v3 Authority Key Identifier:
                keyid:73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/1B010960CD2211ED8A66486BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.156.0/23
                IPv6:
                  2001:df1:aec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:00:07:a0:f9:3b:d4:a6:42:e3:7f:8f:5c:80:8c:ef:d2:25:
         19:e3:a4:d5:7e:55:67:08:25:84:1f:27:26:c6:15:e5:52:1b:
         81:77:81:dd:eb:d1:2f:65:f3:3c:85:04:9e:f4:0a:7f:ad:ef:
         04:e8:3a:c9:a8:2e:0b:12:9a:71:da:50:8b:01:b3:39:1e:28:
         bf:f3:54:56:0b:77:7d:f1:b4:a8:05:e3:f2:d8:82:cc:a0:75:
         7b:53:0d:58:39:4c:32:7d:e3:1f:dc:b0:e4:83:0b:f3:5c:9e:
         cc:70:23:60:83:1e:24:fa:81:a9:b7:51:7e:04:1c:a5:f2:0e:
         d5:4e:3d:70:e1:a9:d0:6a:68:d2:8c:44:db:db:c7:48:1b:96:
         cc:6f:57:fa:f0:a7:89:02:7f:12:e1:a2:df:77:d3:c0:4e:c9:
         8f:e8:76:1e:54:60:c0:42:3e:b3:ab:a8:35:6f:39:96:85:3b:
         7b:67:c2:3f:87:4b:a9:3e:5a:50:12:9b:e8:6b:5f:4a:2d:e7:
         44:7a:13:78:31:94:cb:82:64:b5:4f:89:74:87:12:5c:06:4c:
         1d:c0:b7:5b:d1:5f:f2:02:08:86:64:6c:bf:56:9e:d4:80:f5:
         40:94:6b:ed:aa:b7:7d:67:18:a3:86:ba:6d:4c:a1:0f:b5:b8:
         17:57:e3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:54 2024 by rpki-client on console-fra.rpki-client.org