Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/BA7F7BA892C211EBBBF0055FC4F9AE02.roa
File:                     BA7F7BA892C211EBBBF0055FC4F9AE02.roa (raw, json)
Hash identifier:          xxTbwjHg1QikAjf8vr4+JJb23plKRbhPg2PJNBw2Jn0=
Subject key identifier:   37:AF:78:5D:B9:0A:6C:A7:29:33:31:F1:A2:87:83:51:0C:8D:30:56
Certificate issuer:       /CN=A91A7150/serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84
Certificate serial:       0577
Authority key identifier: 67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/BA7F7BA892C211EBBBF0055FC4F9AE02.roa
Signing time:             Wed 15 May 2024 01:04:53 +0000
ROA not before:           Wed 15 May 2024 01:04:53 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     136256
IP address blocks:        103.165.50.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 01:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1399 (0x577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7150/serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84
        Validity
            Not Before: May 15 01:04:53 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66440a35-79b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2a:71:57:b9:4a:90:43:f3:51:32:85:b7:1f:
                    bb:ef:34:5b:25:fb:67:5e:d6:71:56:e0:24:e6:1f:
                    23:92:be:90:98:ed:27:b4:59:18:ba:2b:1b:49:a8:
                    f9:d7:01:32:1f:0c:fa:a8:19:25:38:10:a2:0b:c7:
                    28:f7:dc:2b:c6:bb:de:2a:7a:1a:8f:8a:88:d4:b1:
                    89:69:99:b0:6d:9f:f0:e1:96:d4:7f:0e:f5:9c:6a:
                    15:b3:b3:88:3f:9a:6f:9b:9e:73:b4:fe:6a:ac:d7:
                    f0:7a:b2:04:e4:3e:1d:8d:96:08:ea:00:f2:f3:53:
                    ff:e5:98:ea:0f:ad:bd:24:d3:6b:07:92:2f:a2:c1:
                    1e:84:cc:62:23:12:ae:04:4b:a0:7c:60:32:b6:10:
                    e7:ad:e9:d4:de:24:44:b1:57:83:f0:98:68:a8:32:
                    fb:e0:6c:94:aa:8f:7b:15:ca:db:76:7e:47:39:37:
                    af:23:c9:6c:49:e4:bd:01:db:c6:82:48:5f:6a:9d:
                    3d:96:73:e9:bf:03:56:a5:31:a0:67:cb:22:05:66:
                    10:4b:9a:37:fe:1d:fe:d5:2f:5a:a7:0d:34:48:1c:
                    e0:e5:a4:07:d1:44:e5:48:01:42:bc:5c:32:b8:a4:
                    2d:42:23:ff:db:02:fb:0e:11:f1:27:a3:f7:d7:02:
                    56:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AF:78:5D:B9:0A:6C:A7:29:33:31:F1:A2:87:83:51:0C:8D:30:56
            X509v3 Authority Key Identifier:
                keyid:67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/BA7F7BA892C211EBBBF0055FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:c6:e4:ff:c9:26:17:c8:b4:f0:a4:4c:00:42:e6:28:37:62:
         88:43:68:ca:41:da:73:e7:7d:ae:4e:25:28:5e:9b:14:b3:49:
         d6:04:4d:32:20:53:4b:87:cf:70:9e:b9:99:67:4b:cc:42:b3:
         31:74:6c:82:d4:72:83:f0:6d:04:04:0e:f2:d7:d7:36:e8:47:
         32:96:ee:82:58:b6:8d:e2:80:2a:7f:cf:56:ec:e9:7b:fd:e3:
         f6:58:62:42:17:2a:73:31:bd:da:fa:f4:e1:73:65:54:8a:bf:
         22:f8:13:e1:2e:00:e2:bf:d9:0e:92:27:6e:12:11:1e:17:f8:
         cb:5b:ff:d1:21:bd:4d:5b:55:a2:34:e9:10:1e:e0:2d:5f:30:
         ba:59:11:bc:8d:cc:8a:54:29:19:4a:63:e6:ec:ae:be:61:2e:
         68:b5:d5:d6:d2:ec:6c:e8:d3:bb:bd:15:b1:5c:7a:6d:24:0a:
         8b:8a:c5:60:ee:55:6c:16:1a:7b:e9:40:d2:bd:ea:cc:02:81:
         d9:44:d0:6f:e4:c7:00:d9:e0:68:c6:14:80:87:41:51:6a:1d:
         f9:07:80:7e:ad:32:d7:70:d1:a7:01:ca:29:03:c9:8f:d5:f9:
         61:f1:e3:5b:27:9b:0f:b6:59:00:89:64:3d:76:60:ab:e1:25:
         5a:fa:57:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:07:29 2024 by rpki-client on console-ams.rpki-client.org