Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/36837F32574A11EC911FAC86C4F9AE02.roa
File:                     36837F32574A11EC911FAC86C4F9AE02.roa (raw, json)
Hash identifier:          9JXpvGvbKZZ6wal+I+4NgtnbORBILpr16m8wSCjrcTI=
Subject key identifier:   EF:0C:5F:95:88:1D:25:D7:7B:52:EF:78:28:B4:DD:A9:42:C8:3E:40
Certificate issuer:       /CN=A9152643/serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873
Certificate serial:       031A
Authority key identifier: 32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/36837F32574A11EC911FAC86C4F9AE02.roa
Signing time:             Fri 13 Oct 2023 01:53:52 +0000
ROA not before:           Fri 13 Oct 2023 01:53:52 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     64058
IP address blocks:        103.195.54.0/23 maxlen: 23
                          103.195.54.0/24 maxlen: 24
                          103.195.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl
                          rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 02:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 794 (0x31a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152643/serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873
        Validity
            Not Before: Oct 13 01:53:52 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6528a330-9733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1d:ea:87:bb:53:0f:05:1b:b1:ce:01:d9:8e:
                    a2:08:9e:97:85:98:43:51:bf:a2:14:2b:38:7f:16:
                    be:10:4b:ec:97:2d:4c:26:29:c2:ed:f6:f5:27:f7:
                    70:b5:22:3b:9e:c3:75:52:8c:c1:e2:3b:08:ca:41:
                    1b:4f:b7:db:27:6e:c6:38:d4:f7:b0:69:7f:66:11:
                    f0:e4:7c:68:da:3b:f1:85:4f:93:cd:26:4b:b0:a0:
                    21:de:1d:86:70:fd:b5:12:18:18:38:6d:16:41:3a:
                    59:38:5d:45:be:87:b2:7a:97:76:12:f1:e5:7f:78:
                    83:19:65:c9:9a:5b:ca:f4:21:b2:ee:c5:e1:4e:d9:
                    57:be:73:4a:8e:b6:8d:3a:2c:33:c9:69:15:8c:3e:
                    43:31:06:7b:db:ea:a2:a4:8d:26:2c:2e:41:e4:0f:
                    93:d5:f3:38:1e:f3:49:55:92:39:8a:5b:e7:cf:1c:
                    f1:b4:01:15:48:cc:dc:75:9a:88:ca:b9:f9:08:14:
                    7a:41:c8:04:af:f7:12:39:16:6f:ff:dd:33:49:3b:
                    b8:cf:7e:8a:8e:04:82:7e:01:d1:94:ae:52:9f:49:
                    41:88:74:f4:f3:83:1d:44:30:56:a8:a1:f3:65:83:
                    e7:8c:db:a5:51:0f:c3:26:97:d7:02:ff:fc:70:2d:
                    26:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0C:5F:95:88:1D:25:D7:7B:52:EF:78:28:B4:DD:A9:42:C8:3E:40
            X509v3 Authority Key Identifier:
                keyid:32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/36837F32574A11EC911FAC86C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.195.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:1d:45:18:84:fb:da:72:0a:8c:db:46:19:aa:57:19:ed:ad:
         95:c2:b4:cf:ff:18:1a:d8:97:79:5a:fc:1e:07:12:3d:ad:a6:
         88:dd:66:26:ca:0f:f6:60:d4:af:28:4a:88:dd:62:bf:42:92:
         b3:e0:3f:f9:d4:03:0b:fe:a0:2a:84:ee:63:36:80:6c:e9:4b:
         72:34:39:a9:63:a0:ae:93:fe:0a:47:ef:cf:51:d0:cb:ad:3f:
         da:0d:8c:70:dc:e2:34:77:a1:0d:d4:d4:75:8d:78:43:c0:c5:
         60:37:56:63:f1:2c:b5:51:6e:a7:78:ae:bb:33:ca:b5:a5:a9:
         dd:31:2e:6d:c0:89:bb:68:64:a3:e2:37:52:25:ba:77:69:68:
         17:ae:9f:1d:4a:3d:dc:74:04:54:38:ca:b5:98:4e:3d:cd:16:
         1a:f8:4c:57:55:8a:ee:98:f9:fc:12:3f:32:c9:95:9b:a5:3c:
         41:b3:c7:16:c7:11:7b:0b:73:4a:21:9a:ce:73:f5:25:6a:76:
         df:41:85:a3:46:3e:f2:2f:48:cd:3e:10:f0:ac:15:08:46:68:
         47:06:f3:b0:c2:1c:0e:76:13:0b:d5:c9:a6:32:eb:a6:fb:52:
         a0:d6:ac:1f:59:fc:92:9d:d4:b5:fe:4e:22:9c:07:9b:e1:a8:
         a6:b9:b7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:49:58 2024 by rpki-client on console-ams.rpki-client.org