Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/73BCF8A4641B11ED9E27D420C4F9AE02.roa
File:                     73BCF8A4641B11ED9E27D420C4F9AE02.roa (raw, json)
Hash identifier:          L4TlPuitdCVJvDa3eVIfYJ+Xo6yVuCK7UPo8jhWcDZ4=
Subject key identifier:   8E:D0:57:68:2D:74:6A:0F:3B:99:26:EE:49:F5:15:C7:D5:77:A0:AD
Certificate issuer:       /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
Certificate serial:       010F
Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/73BCF8A4641B11ED9E27D420C4F9AE02.roa
Signing time:             Thu 05 Oct 2023 03:24:12 +0000
ROA not before:           Thu 05 Oct 2023 03:24:12 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     63526
IP address blocks:        103.205.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
        Validity
            Not Before: Oct  5 03:24:12 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=651e2c5c-e3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ae:f3:68:79:45:33:49:de:a6:df:99:5a:88:
                    09:69:28:a9:2c:0e:1b:76:23:90:8a:c2:7c:09:d7:
                    21:79:6d:38:d7:e5:13:01:33:e7:aa:7f:d3:06:10:
                    2b:84:90:a2:8b:f9:c7:ac:83:ba:8e:35:e4:51:3f:
                    11:12:21:37:22:f8:e5:42:ef:c5:eb:03:3f:76:0e:
                    d5:96:89:21:b7:2b:48:8d:15:04:b6:89:6a:f0:a0:
                    71:c0:ce:1a:c2:7a:1a:77:c9:14:86:84:c8:ff:81:
                    8b:a1:f0:a8:fd:f8:8f:e8:50:64:3b:cc:a4:52:97:
                    ef:13:77:c7:0a:c1:7a:71:dc:cf:ed:b8:9a:c8:43:
                    05:c3:dd:27:9c:19:71:8b:ab:c4:1d:59:e8:c5:5d:
                    1b:d6:7b:5c:9a:35:56:4b:25:a3:35:81:82:ab:3d:
                    36:e9:98:0f:28:f2:d0:e0:79:ea:c2:31:9c:ab:e6:
                    56:60:37:3d:eb:6e:ff:ad:89:78:54:72:eb:a6:d9:
                    18:ca:19:8d:5d:d9:33:5b:57:a5:25:4c:d1:cd:a3:
                    5d:45:e7:b2:98:f2:c2:25:49:9d:0f:e3:f5:9b:7a:
                    bd:1a:36:5a:cb:90:b7:fb:81:45:2a:f1:a7:f7:51:
                    85:a9:ff:63:12:fc:a4:5c:cf:22:d9:4b:ae:5f:d5:
                    fb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D0:57:68:2D:74:6A:0F:3B:99:26:EE:49:F5:15:C7:D5:77:A0:AD
            X509v3 Authority Key Identifier:
                keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/73BCF8A4641B11ED9E27D420C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:bc:d6:99:1f:43:7a:03:b3:ce:7f:23:ed:d8:59:c6:7b:58:
         52:f0:88:af:c5:b0:29:3c:db:99:a5:e5:aa:bf:51:13:89:f5:
         6a:ad:8c:26:49:e3:b9:d6:59:30:7e:ba:1c:f7:5d:92:6e:be:
         04:6e:c3:25:df:c8:0c:b8:ee:3c:b5:ce:76:f5:1f:96:71:c8:
         cd:c7:2e:16:96:f0:74:84:18:3b:d7:3a:68:ee:2b:b1:dd:a2:
         49:63:c8:8b:bb:e0:b6:45:33:8b:ef:43:e2:de:ea:41:12:59:
         3d:0b:57:93:f4:37:d8:a0:ec:f0:1e:9b:9f:07:a2:5e:aa:e0:
         79:c1:66:44:a3:91:9d:b6:ea:54:96:bc:7e:f6:e2:7b:18:1b:
         8c:d4:bd:4a:69:6e:64:7f:2f:2e:b7:fb:e8:ac:14:f8:1d:a7:
         17:ac:bc:6a:b7:85:6c:74:dc:15:83:21:b1:c5:bd:91:5b:4b:
         88:56:05:ec:e8:3a:d1:4b:c5:9e:ee:d1:4e:df:da:5c:a7:7f:
         8f:cf:af:3d:11:26:46:17:89:1a:b0:80:6f:e0:55:53:21:22:
         48:b6:e3:15:03:52:e3:dc:93:cf:8f:12:39:59:a7:6c:bf:96:
         83:fb:f4:e8:2f:10:26:f8:fa:ac:91:9b:31:aa:f5:34:3d:29:
         b2:63:a7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 06:34:19 2024 by rpki-client on console-ams.rpki-client.org