Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/11330A4663F611ECB344F979C4F9AE02.roa
File:                     11330A4663F611ECB344F979C4F9AE02.roa (raw, json)
Hash identifier:          AbSm+eKKD+nWUo13PoLGOffT+JM02REQ/Vy0p4RDhUA=
Subject key identifier:   0D:CA:5E:28:A0:77:DE:77:61:E6:29:17:AA:4B:D9:5C:3A:C0:65:C1
Certificate issuer:       /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655
Certificate serial:       0343
Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/11330A4663F611ECB344F979C4F9AE02.roa
Signing time:             Mon 23 Oct 2023 01:33:52 +0000
ROA not before:           Mon 23 Oct 2023 01:33:52 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     17439
IP address blocks:        103.173.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl
                          rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 03:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 835 (0x343)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655
        Validity
            Not Before: Oct 23 01:33:52 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6535cd80-9aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:af:c9:20:74:59:84:14:78:47:af:62:a6:6a:
                    ff:94:72:75:4e:0c:88:e2:7c:14:1a:68:6c:5d:d2:
                    af:7b:25:2a:df:80:53:48:24:91:af:71:55:70:c2:
                    48:b3:66:f5:6e:55:41:8a:fc:43:44:87:f9:31:9e:
                    33:45:62:f2:2f:1a:12:19:2a:b0:ee:46:68:eb:29:
                    4b:06:99:be:cb:21:73:fa:31:15:21:c4:61:4c:b8:
                    d4:da:05:c3:2f:ee:ed:ec:d4:38:0f:a4:89:b1:3d:
                    e3:3f:e2:44:8a:9c:47:d7:ca:e4:37:d8:6a:02:66:
                    ad:9b:0c:f9:69:7e:e2:bd:46:fe:93:4e:9d:50:2e:
                    3f:42:e3:5c:1f:b4:66:2c:10:fa:3b:b1:6d:e3:cd:
                    ab:b0:a8:f3:13:7c:e2:e9:8d:eb:45:01:60:ad:99:
                    d4:83:77:b3:9c:67:74:33:06:d6:d4:85:69:0e:16:
                    b9:b1:79:b0:d6:03:e2:56:88:e3:d1:1d:cb:a0:5f:
                    bd:b1:da:f5:79:f4:78:dc:fd:5b:2e:a9:22:07:41:
                    b4:e9:06:b7:36:fe:73:9a:b1:53:54:13:ac:32:30:
                    60:8d:9c:ad:4f:ac:69:c8:35:4f:5e:2e:63:16:8d:
                    51:c0:25:2d:42:41:60:4e:34:07:0f:8e:64:79:26:
                    fc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CA:5E:28:A0:77:DE:77:61:E6:29:17:AA:4B:D9:5C:3A:C0:65:C1
            X509v3 Authority Key Identifier:
                keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/11330A4663F611ECB344F979C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:50:ec:19:13:dc:24:ac:36:ee:6d:ff:bb:ef:99:76:56:bc:
         d0:82:89:09:ad:b2:3d:14:f1:73:14:59:7e:17:cf:aa:15:81:
         05:f3:d1:44:82:61:8d:36:d4:aa:d9:c0:41:b2:3c:7d:02:82:
         62:5c:85:09:77:00:3c:93:41:98:7d:19:e3:e4:db:dc:3e:9f:
         c8:93:78:f4:b1:5d:34:b1:77:f8:bb:52:4b:56:17:9b:b9:6f:
         68:14:42:b5:2a:49:d2:fe:29:00:80:c7:2f:45:65:7c:1f:12:
         f2:5a:cb:d8:10:0b:a5:d7:08:f5:5b:49:83:91:cc:ab:9b:25:
         69:4b:08:4b:43:b7:e0:c2:77:11:80:be:a6:e4:b4:6f:10:be:
         48:07:fc:bf:0a:7d:5a:33:11:82:f7:ed:fe:f8:b1:b8:2c:8c:
         2e:57:a0:ae:60:bc:f7:65:1a:df:5a:02:28:2c:78:8e:c4:05:
         60:4f:2b:0b:17:ff:2f:52:90:e4:f3:9e:b8:a4:b5:78:15:9d:
         19:6b:11:89:11:39:3b:b8:0e:84:3d:ed:25:aa:6f:c0:39:73:
         58:f2:54:61:a3:f1:8e:15:73:a2:66:9e:66:38:5d:a0:30:f0:
         4b:5f:60:b6:4e:19:41:77:fe:d4:ed:94:6e:ff:d1:d0:8e:f9:
         76:d2:b3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:59:08 2024 by rpki-client on console-fra.rpki-client.org