Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/B662717ADC6611ED89F0804EC4F9AE02.roa
File:                     B662717ADC6611ED89F0804EC4F9AE02.roa (raw, json)
Hash identifier:          UQYK8juqwFeTX1mHIM8DFtTw3S8uGHJwSP9wa1sR0D8=
Subject key identifier:   17:8D:0F:B1:7A:80:41:F4:D5:3A:CF:16:F7:04:07:78:98:D2:D3:74
Certificate issuer:       /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Certificate serial:       1059
Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/B662717ADC6611ED89F0804EC4F9AE02.roa
Signing time:             Thu 28 Mar 2024 18:26:14 +0000
ROA not before:           Thu 28 Mar 2024 18:26:14 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     150452
IP address blocks:        103.135.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
                          rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4185 (0x1059)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
        Validity
            Not Before: Mar 28 18:26:14 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=6605b645-ffa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6a:fa:3a:90:bb:f3:33:82:1c:b2:c2:5b:46:
                    46:56:29:bd:37:f2:a6:12:69:db:53:7d:fa:68:3a:
                    6a:af:ca:36:64:6c:10:88:42:7e:3e:a9:e7:cf:05:
                    db:c9:28:fc:86:67:1b:03:66:f1:95:00:39:c1:b3:
                    79:fc:a6:93:10:97:a7:df:3f:24:fa:b6:c7:70:8f:
                    fe:1f:7f:45:de:14:b3:0e:ea:74:8d:54:37:1d:08:
                    23:06:f4:0a:d3:7d:47:7d:c3:48:f1:7e:9f:46:ec:
                    6f:22:f3:bd:32:48:c4:84:58:4a:1e:77:4c:15:9a:
                    29:e1:5b:59:a3:49:09:ca:9a:9f:b0:31:bb:a0:ec:
                    5e:5e:32:b7:3e:f6:1b:2e:33:b9:3b:49:a8:6a:cd:
                    8c:6b:1f:32:e8:0f:b5:32:a4:25:39:25:d9:f6:a1:
                    01:a2:a6:92:fa:42:b0:41:9f:76:fb:ed:cb:79:10:
                    9e:9e:28:c0:74:91:ac:4d:30:c1:20:ce:2b:c2:cb:
                    c8:c6:8a:9e:f0:92:01:88:d0:e4:8f:63:86:fa:16:
                    91:5a:82:03:bc:5f:77:a0:f7:7e:f3:32:91:09:ef:
                    cf:ff:f1:22:b8:82:b2:50:c3:5a:b8:c2:a2:c7:68:
                    eb:ce:cc:42:c2:08:af:4c:92:88:6d:aa:7d:d0:ac:
                    53:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8D:0F:B1:7A:80:41:F4:D5:3A:CF:16:F7:04:07:78:98:D2:D3:74
            X509v3 Authority Key Identifier:
                keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/B662717ADC6611ED89F0804EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:73:32:67:60:0b:98:02:f2:af:a8:e5:40:da:3a:80:22:2d:
         b8:0f:7a:39:4c:6a:0c:da:a4:5c:b1:b6:f8:ce:59:cd:61:d2:
         c8:e4:7d:e4:d5:f2:5f:61:3c:f1:c6:e9:fb:e1:32:27:9d:7e:
         7c:bf:a0:b1:90:2e:dc:66:ff:78:6b:eb:83:50:b0:ea:1a:c3:
         a0:71:f8:be:77:4a:9d:af:c1:e2:61:35:66:b4:63:0c:9f:bb:
         5a:29:0d:15:cf:86:be:0e:2c:59:cb:7f:aa:4e:19:47:f4:b8:
         7a:dc:aa:ce:1a:9c:ff:f0:00:ef:b1:05:a9:ef:92:f0:f4:cb:
         2a:e5:04:cf:cc:e5:26:9b:0a:54:b2:0b:fd:ed:76:25:96:45:
         d1:ae:12:2e:9b:75:ba:f5:2b:a4:69:bd:9e:e1:77:ec:ac:c6:
         17:39:19:ae:4d:73:82:4d:4f:0e:1c:12:e5:18:b0:0e:ba:7b:
         47:4e:99:15:51:20:13:a9:b3:17:df:fd:d7:d1:a8:3c:ea:f2:
         03:fe:fc:5e:07:b5:cb:36:26:74:b6:e3:b8:30:41:2c:c8:d9:
         c3:1a:07:51:f7:bb:72:cc:4e:57:60:fb:08:59:10:9c:a9:2a:
         11:a4:8d:2f:0b:40:46:c9:b5:e0:af:60:3a:22:56:2f:36:e0:
         a1:7b:4e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 18:49:19 2024 by rpki-client on console-fra.rpki-client.org