Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/73E253FC76D011EDBAECD665C4F9AE02.roa
File:                     73E253FC76D011EDBAECD665C4F9AE02.roa (raw, json)
Hash identifier:          0fgfwSnBPj1wqSMD+aZskb0Kd5Z6w3jmnUcNUmB5tFc=
Subject key identifier:   0E:96:E2:36:F4:3B:64:86:55:C3:F7:D6:EE:FB:82:96:88:1C:42:78
Certificate issuer:       /CN=A91CC28E/serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949
Certificate serial:       CC
Authority key identifier: 9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/73E253FC76D011EDBAECD665C4F9AE02.roa
Signing time:             Fri 05 Jan 2024 05:06:14 +0000
ROA not before:           Fri 05 Jan 2024 05:06:14 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     150667
IP address blocks:        103.51.84.0/23 maxlen: 23
                          103.51.84.0/24 maxlen: 24
                          103.51.85.0/24 maxlen: 24
                          2001:df1:a8c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl
                          rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:13:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC28E/serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949
        Validity
            Not Before: Jan  5 05:06:14 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65978e46-40a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:15:90:7f:fc:08:51:96:a1:a3:e2:29:48:
                    62:9b:01:fb:7a:3c:67:58:3b:b7:08:7a:4f:29:a8:
                    39:6c:04:87:24:b2:5d:30:a0:06:45:87:45:d3:e7:
                    84:0a:bc:55:47:c2:67:d8:0b:5e:5d:91:8e:72:3d:
                    23:e5:e7:5f:eb:48:66:e6:ee:ee:94:bc:b9:0e:f4:
                    f5:e7:6a:bd:2f:3d:7b:81:3a:1d:52:1a:4b:53:7e:
                    bb:a3:09:06:34:f4:2c:07:7f:92:7a:41:85:32:67:
                    e1:ab:79:4f:4e:7a:15:34:e9:f8:51:16:d8:80:03:
                    54:06:8d:c5:cb:34:4e:a8:7e:53:27:fb:a8:bf:3e:
                    8d:4d:df:19:9c:aa:95:78:ab:21:03:f1:88:de:ab:
                    3e:1d:29:bb:71:a8:58:93:bd:e7:a2:0f:24:92:9f:
                    dd:d8:81:83:79:be:8d:ca:93:a7:e9:09:f4:1f:df:
                    35:79:d5:c8:ef:04:80:f1:69:a3:1f:59:60:77:9b:
                    c6:99:1c:3f:2d:ce:18:46:d0:2f:16:f0:9b:2c:93:
                    d0:8d:65:2e:10:b2:a9:26:be:6d:34:ba:43:8e:5c:
                    83:50:a5:82:ba:c8:39:9d:28:89:f2:05:d8:33:e3:
                    62:0c:ae:f0:ea:cf:cc:1d:f4:97:8d:e2:e5:84:bd:
                    3b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:96:E2:36:F4:3B:64:86:55:C3:F7:D6:EE:FB:82:96:88:1C:42:78
            X509v3 Authority Key Identifier:
                keyid:9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/73E253FC76D011EDBAECD665C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.84.0/23
                IPv6:
                  2001:df1:a8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:2c:53:9e:bb:a2:84:68:14:4d:be:5a:26:a9:86:ae:6c:21:
         21:f1:e6:01:e4:5c:2c:c9:0a:2a:c5:bb:b1:0b:77:b9:2f:9b:
         9e:a3:37:af:12:7a:0d:79:2a:d1:2d:35:a0:53:bb:54:00:9e:
         48:03:bf:c8:7f:7c:bf:d6:65:2c:6e:bd:78:76:2a:83:26:42:
         0d:60:16:9b:cb:f2:0a:be:a6:e5:5f:ac:cb:ff:ee:8d:fc:b1:
         92:87:71:4a:4a:33:06:91:2f:a2:ce:a4:5d:a1:68:f9:db:e1:
         0d:93:34:b6:a4:23:22:0c:4b:7e:38:0e:f3:a3:33:44:4b:6b:
         ae:0e:fe:ad:2c:bb:73:a2:f1:7e:a8:fb:fd:0c:47:64:57:e1:
         e0:e8:f0:79:b7:79:af:08:27:45:a2:0e:ec:b0:fa:51:e7:52:
         60:4e:33:34:6e:13:c5:f9:82:77:59:f2:20:7d:85:dc:ef:b3:
         92:a8:9a:64:9c:98:ec:56:46:1e:76:a4:aa:82:99:96:0b:be:
         da:88:79:df:11:f4:55:ba:28:21:51:f1:74:b7:56:a2:e1:43:
         4b:2b:5f:94:9e:76:4f:1d:da:ab:8e:c2:28:0f:e2:a9:bc:b3:
         ce:06:73:34:dd:9a:2c:39:6d:75:d3:1f:3b:29:22:9d:56:92:
         ef:47:b9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:57 2024 by rpki-client on console-fra.rpki-client.org