Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C55784DE584111EE85E40820C4F9AE02.roa
File:                     C55784DE584111EE85E40820C4F9AE02.roa (raw, json)
Hash identifier:          FOhpYe5DK9I/QvT8DCyDAdniDFXXS6XAPszrK91CJRI=
Subject key identifier:   2D:4D:C1:BA:46:26:AE:6C:F3:52:A9:E0:2F:80:32:14:50:EA:2D:E6
Certificate issuer:       /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388
Certificate serial:       BF
Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C55784DE584111EE85E40820C4F9AE02.roa
Signing time:             Sun 25 Aug 2024 01:44:01 +0000
ROA not before:           Sun 25 Aug 2024 01:44:01 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     205960
IP address blocks:        103.151.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
                          rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388
        Validity
            Not Before: Aug 25 01:44:01 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66ca8c61-21e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:66:6a:4f:c8:d4:9e:87:3a:1c:ba:16:aa:9d:
                    db:8a:b0:1d:83:00:15:c4:ec:82:9b:09:db:e9:8a:
                    b5:5f:01:88:80:d1:89:31:04:0a:2c:f8:c9:82:7b:
                    a1:78:65:a7:04:e5:6c:14:14:2a:9e:45:9e:da:e3:
                    83:f3:6d:c0:ff:32:3c:09:2f:94:be:36:00:94:c0:
                    01:ba:41:59:e7:36:43:24:fa:f4:53:05:cb:ef:bd:
                    e0:01:0e:8b:e0:7f:6e:3c:3a:8e:bf:96:08:d6:ac:
                    da:1f:26:33:ae:0c:74:cd:7e:a2:cc:32:98:68:52:
                    eb:7c:ae:42:98:7e:27:1b:22:3c:59:e8:a8:8e:b8:
                    81:a8:94:f1:41:8d:67:47:23:f4:5d:1b:53:11:ce:
                    d2:ea:b3:72:85:60:dd:90:0a:f2:88:ee:cc:a5:16:
                    c7:22:e5:aa:df:e6:f5:92:8e:bc:bc:e3:c0:d2:b1:
                    42:2f:d8:d2:1e:b1:5f:f8:a9:19:c5:d0:d2:76:1a:
                    5d:13:ce:1c:36:c9:0d:ac:85:ad:d4:1b:9f:4f:f1:
                    85:8b:0c:68:ec:82:90:f2:09:f3:ff:f5:2d:10:41:
                    d9:55:cf:ba:c6:7e:b3:f8:52:c2:91:0e:69:94:56:
                    69:b1:61:de:78:0e:b2:a6:af:81:44:b6:ee:e1:c7:
                    60:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4D:C1:BA:46:26:AE:6C:F3:52:A9:E0:2F:80:32:14:50:EA:2D:E6
            X509v3 Authority Key Identifier:
                keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C55784DE584111EE85E40820C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:25:92:cc:3c:ec:81:46:2a:08:37:04:b7:ac:bd:88:bf:60:
         be:ec:30:05:35:ea:0f:12:29:2e:c6:63:65:e6:5e:71:83:e2:
         02:51:a0:65:a1:9f:7e:85:83:38:99:ef:a7:21:01:63:c2:04:
         26:35:1f:d6:39:22:eb:9f:99:e3:ff:87:25:9a:10:31:d1:11:
         be:20:8c:d9:1e:d2:f0:d6:c3:b3:a2:b4:bf:7c:08:a6:32:b7:
         b0:e4:d4:82:ec:b7:8f:70:93:0c:9c:70:d2:a8:ff:a5:63:a5:
         ed:2f:07:46:d9:a3:f9:6c:85:85:21:b9:3c:77:08:09:8f:1c:
         ad:93:b3:47:82:4b:5e:2c:d0:d4:42:5c:38:1c:4c:69:b7:b4:
         40:d4:a3:2b:da:d3:05:c7:43:ab:4f:76:58:22:c6:02:7d:18:
         73:3e:04:e0:d3:35:d1:29:93:9a:ec:27:31:bf:a2:70:19:5c:
         f2:01:35:f8:ad:26:3c:25:76:e4:3a:83:ef:a1:53:0f:e7:ec:
         a8:91:00:a1:14:7e:f2:72:cb:11:e3:88:b8:df:ed:67:c3:a9:
         e7:d3:41:ef:d6:a6:34:39:7f:c5:03:47:49:2a:69:81:62:fa:
         a6:2d:4f:11:11:df:4c:89:ba:e0:11:0d:fb:31:24:3d:db:a5:
         9a:93:a9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:23 2024 by rpki-client on console-ams.rpki-client.org