Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/5A387584756311EEA256FD57C4F9AE02.roa
File:                     5A387584756311EEA256FD57C4F9AE02.roa (raw, json)
Hash identifier:          rKlNDAL+YS5APh9mVe38YNcav6hea+4bXzjYijoMe5E=
Subject key identifier:   D5:12:C6:07:A2:D8:46:69:0A:24:CA:90:43:2B:97:1A:EC:90:4E:2A
Certificate issuer:       /CN=A91BB921/serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B
Certificate serial:       02
Authority key identifier: 08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/5A387584756311EEA256FD57C4F9AE02.roa
Signing time:             Sat 28 Oct 2023 07:26:47 +0000
ROA not before:           Sat 28 Oct 2023 07:26:47 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     147056
IP address blocks:        103.173.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.crl
                          rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB921/serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B
        Validity
            Not Before: Oct 28 07:26:47 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=653cb7b7-09da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:b8:db:c7:99:d2:60:a8:50:e1:a9:fd:f7:
                    3e:bb:ca:4a:a4:6e:72:36:09:1f:57:2d:ac:ea:48:
                    ee:e8:c8:a7:3c:b2:c0:8d:8a:54:72:02:2f:6b:03:
                    88:aa:1a:80:f7:9e:21:df:5a:e2:86:ce:a0:6a:f3:
                    07:cc:5f:6f:68:f3:a0:ca:ab:ee:71:3a:35:f6:51:
                    a3:d6:a3:61:c2:b0:31:59:e9:c4:99:8e:60:77:2e:
                    58:9e:cb:6e:d8:f3:78:bd:d2:24:c2:ba:a8:4b:42:
                    c7:46:e8:0a:2d:64:36:63:83:7e:29:b7:f5:b7:ea:
                    56:26:77:3c:2a:ca:35:f3:e3:eb:6f:e5:71:f5:f1:
                    f0:6e:ef:22:12:de:5c:5a:0b:61:3e:e6:bf:44:22:
                    fb:32:e9:0a:77:a7:62:23:d4:d4:d6:3c:85:2f:9a:
                    9f:13:c5:f3:f3:d7:34:ef:8d:81:64:4e:34:9a:de:
                    0a:7f:cc:b6:fb:81:bc:58:6e:9a:ac:30:30:2a:e8:
                    0e:45:8a:01:7d:00:e7:38:5e:b6:f9:21:52:f9:5a:
                    98:b9:d9:80:8c:a3:76:88:c4:f4:86:48:19:07:28:
                    1e:4e:38:fb:c6:d7:42:fd:b7:f9:d7:f0:b4:dc:1c:
                    b8:be:b4:31:05:2a:6e:d3:a0:9a:8a:12:2f:d6:c4:
                    61:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:12:C6:07:A2:D8:46:69:0A:24:CA:90:43:2B:97:1A:EC:90:4E:2A
            X509v3 Authority Key Identifier:
                keyid:08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/5A387584756311EEA256FD57C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:c8:62:3a:e9:79:62:e9:e1:b4:ba:c6:bf:6d:13:94:94:04:
         3e:7b:5e:57:57:e6:68:cf:e9:b4:fd:84:27:b3:cf:5b:5e:5d:
         d6:52:69:be:e0:39:6d:25:27:b6:09:7f:13:fd:40:13:de:8c:
         89:5b:1a:a8:33:93:3d:87:33:17:9a:55:75:b0:fb:8c:bc:ba:
         65:76:6e:79:3f:f2:78:12:94:88:af:c8:eb:1a:d2:27:f4:ca:
         af:40:73:de:0e:0b:ec:89:00:a1:a6:01:de:44:ae:85:97:63:
         f0:f5:d9:8d:0d:6e:b9:e6:13:47:10:48:cf:ed:f1:3a:52:a3:
         bd:42:a9:78:b7:bc:87:24:9f:8b:1a:54:24:9e:62:3d:9a:88:
         8c:6f:8f:18:b3:b4:bd:d9:ab:35:42:be:e6:cd:77:ad:66:49:
         c5:e6:6d:6d:9c:47:97:5d:27:a4:b0:2e:58:4b:6d:19:60:cb:
         8b:e5:3d:47:6b:ff:e9:96:fa:dd:88:9f:b9:a5:2d:2b:81:d2:
         f5:0d:4a:f5:b3:dd:c9:e0:0a:eb:26:c0:2e:4a:43:57:71:58:
         28:89:de:d1:a1:1d:ef:c4:66:5a:7c:74:c4:7a:7d:cd:66:3d:
         9d:25:3e:b6:ec:0f:77:d9:ff:12:73:23:91:7a:d1:6b:e4:e6:
         9f:c4:55:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:31 2024 by rpki-client on console-ams.rpki-client.org