Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3A7A9084B1B811ED8DC4D42EC4F9AE02.roa
File:                     3A7A9084B1B811ED8DC4D42EC4F9AE02.roa (raw, json)
Hash identifier:          VEVMqhAJ8NICMv+R/VuduyZQvKS9iiRN1h8O7GvCEHA=
Subject key identifier:   F7:65:D4:63:21:5D:B3:31:9B:CC:91:21:E0:7E:13:7D:7F:AF:C9:09
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3ED8
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3A7A9084B1B811ED8DC4D42EC4F9AE02.roa
Signing time:             Tue 12 Sep 2023 02:42:59 +0000
ROA not before:           Tue 12 Sep 2023 02:42:59 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     150821
IP address blocks:        103.77.174.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16088 (0x3ed8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 12 02:42:59 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ffd032-07df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:76:64:0d:7d:66:2c:9d:d7:88:8a:be:23:
                    f9:90:66:4f:59:6e:81:af:46:5e:b3:5a:d4:b6:b5:
                    df:3c:0e:35:6b:78:f2:71:82:3c:2f:a2:11:bd:97:
                    05:9b:d1:38:d6:7b:12:a6:13:78:fb:22:5e:6a:e7:
                    0a:7f:d7:f7:2d:21:a0:1b:cd:74:b8:ea:84:58:a2:
                    f0:91:a9:29:51:09:cf:da:fa:bf:a3:c3:c9:1d:86:
                    21:f8:d6:fc:42:4c:8f:d1:cb:34:76:61:2a:de:ed:
                    55:ea:c6:ed:24:72:02:90:31:b7:15:3a:36:bd:7c:
                    90:c8:4a:5d:2a:38:73:09:0e:49:fb:69:e0:28:d9:
                    ab:24:4f:46:b1:32:31:5a:a1:fb:ca:72:52:d3:bc:
                    89:40:32:80:ba:4b:9e:4a:95:1e:46:b7:ca:6b:cc:
                    fa:46:95:4f:df:b0:ef:60:f7:d7:bb:85:8f:ba:d6:
                    da:31:f2:15:db:93:cd:45:97:63:fe:9f:24:5a:b6:
                    51:8c:16:f1:51:d4:90:f9:3d:d9:46:ef:e2:e8:61:
                    46:45:ba:2e:9d:79:9f:c9:88:b6:fa:1c:91:75:50:
                    97:5e:91:21:37:1e:39:eb:17:5d:52:1c:87:a1:62:
                    76:69:59:f5:1c:49:e1:c7:1c:29:2a:74:a0:d2:83:
                    55:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:65:D4:63:21:5D:B3:31:9B:CC:91:21:E0:7E:13:7D:7F:AF:C9:09
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3A7A9084B1B811ED8DC4D42EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:14:8e:0c:95:55:51:e5:7e:98:6c:68:58:8a:b1:87:73:ab:
         b4:a3:d9:c5:5b:9a:5d:49:b7:32:3c:e9:e5:56:c3:11:e1:16:
         de:79:07:7c:e2:50:b7:bc:8e:8a:74:d3:01:0d:aa:fc:2c:83:
         a8:39:cd:a2:7e:d5:4b:57:63:67:56:d5:5c:0f:b7:07:d6:5c:
         42:4c:3d:83:59:c2:fd:84:d5:7b:67:5e:83:5b:e9:18:5b:d7:
         37:5a:f9:26:7f:bd:d8:62:bc:aa:bd:95:a8:ab:40:33:0c:8b:
         97:cb:ae:e6:ea:a6:c5:80:24:db:bb:c7:80:05:c6:eb:9f:0d:
         bc:90:38:d5:67:e3:c7:33:b8:4b:ba:70:54:7f:13:23:78:35:
         f0:55:1b:dd:fd:f0:e7:74:e9:13:6e:83:0c:f9:4d:86:30:6a:
         0a:86:c4:9c:62:e1:f3:ff:97:b9:8f:2c:ae:a0:40:48:ac:ac:
         d8:5b:24:2d:1c:2e:c2:d2:50:54:d2:19:78:bf:d3:8c:c5:41:
         07:2d:e9:5d:04:14:60:b5:c4:17:3a:b1:d1:95:db:6e:40:c3:
         e5:0a:f0:c1:0b:05:22:01:17:9b:f3:93:24:b7:50:40:43:d3:
         d7:13:9f:f3:bc:b0:b0:2a:97:0e:ed:db:9a:72:d7:69:69:a3:
         5e:dd:4f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:08:33 2024 by rpki-client on console-fra.rpki-client.org