Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/48110772C3FC11ED8526FC28C4F9AE02.roa
File:                     48110772C3FC11ED8526FC28C4F9AE02.roa (raw, json)
Hash identifier:          TSUwgijlh0zWQ7z0hP5USAPbTit2xaR1d/VrUMSV3Fg=
Subject key identifier:   94:42:BD:A9:0D:06:B5:16:A5:D9:23:5C:DE:56:B7:88:D2:07:92:FB
Certificate issuer:       /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
Certificate serial:       03A5
Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/48110772C3FC11ED8526FC28C4F9AE02.roa
Signing time:             Tue 21 Nov 2023 01:53:26 +0000
ROA not before:           Tue 21 Nov 2023 01:53:26 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     139660
IP address blocks:        103.174.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl
                          rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 02:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 933 (0x3a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
        Validity
            Not Before: Nov 21 01:53:26 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=655c0d96-9b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:29:09:ca:94:53:5c:b5:4e:02:48:c5:69:6f:
                    0d:73:bc:6b:0b:3e:c7:d8:b5:4d:92:dc:fd:b7:61:
                    54:2c:c9:89:92:27:33:94:74:4e:25:a3:b8:00:44:
                    69:0a:87:81:46:6d:67:13:b6:4c:4f:40:fd:fb:d0:
                    fc:33:bc:76:f5:3a:f5:4e:76:3c:ba:f4:91:33:81:
                    2f:46:9f:23:5e:2c:f6:e8:d6:ff:3e:4c:86:31:b4:
                    d2:98:52:27:71:11:dc:77:e5:27:44:fe:ee:c6:85:
                    da:d6:50:28:84:64:a8:64:dd:e1:af:57:bc:eb:4d:
                    23:e8:8e:74:01:38:0c:0e:50:06:5c:c2:a8:91:5e:
                    4c:c1:9a:82:14:89:91:d2:c4:0d:46:14:c6:3b:9f:
                    b6:c8:ae:86:a9:5b:4d:63:be:48:af:af:8a:40:05:
                    ec:6c:11:15:22:a4:0d:84:8f:13:de:be:2d:62:7e:
                    86:9f:23:73:8f:30:86:71:14:8b:86:96:1e:a6:8b:
                    e2:5e:68:55:98:1f:dc:5d:53:77:ab:b3:55:e4:a0:
                    b5:79:a1:02:91:e6:88:8e:ed:96:2b:be:d4:13:9f:
                    f0:f6:11:19:9c:0f:9c:6f:18:1e:8d:0a:3e:66:d8:
                    df:c6:30:a4:aa:b5:80:39:48:b2:05:18:bd:93:e5:
                    97:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:42:BD:A9:0D:06:B5:16:A5:D9:23:5C:DE:56:B7:88:D2:07:92:FB
            X509v3 Authority Key Identifier:
                keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/48110772C3FC11ED8526FC28C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:3d:ba:94:0a:83:42:4f:3d:7a:6a:6e:a0:08:35:b5:ed:ac:
         36:7e:a0:d6:23:41:f8:80:bf:bd:fe:b1:a2:3e:99:2d:1b:fa:
         f9:99:61:a7:88:3c:92:cf:bd:73:bc:48:2f:b6:0a:90:cd:87:
         b0:27:19:6d:22:eb:cd:0b:f4:45:c1:7e:a3:c0:0d:18:16:e7:
         53:17:62:77:e4:26:00:83:19:ef:2b:b4:69:6e:03:f4:0c:b4:
         d4:46:e7:ae:e0:7e:8c:6e:9d:50:6b:f4:93:6a:ab:b0:31:39:
         b1:a8:01:25:8a:07:ea:96:4f:7e:8b:0f:4f:24:59:37:9d:30:
         4e:9e:ed:de:ef:88:94:6f:63:95:ec:5d:32:9d:24:13:6f:fd:
         40:82:bf:67:71:71:6d:fa:fe:32:39:f1:c7:7c:e6:5e:c8:dc:
         7a:fe:76:65:fe:ef:42:73:5e:c0:67:fc:dd:43:63:d3:31:ea:
         cc:28:3a:f4:8d:0c:77:87:d6:9d:dc:1c:58:b6:77:25:c5:40:
         f5:69:f9:af:44:06:43:4a:19:3a:7a:27:9a:6a:24:b4:2f:f7:
         e5:df:e3:ae:ae:95:04:6b:35:55:97:4f:a5:aa:01:17:8d:bb:
         83:12:28:ac:18:93:b9:a0:8e:cb:8b:52:69:33:ac:42:8b:df:
         69:3e:18:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 04:49:22 2024 by rpki-client on console-ams.rpki-client.org