Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/753703FE045C11EAB8BF0932C4F9AE02.roa
File:                     753703FE045C11EAB8BF0932C4F9AE02.roa (raw, json)
Hash identifier:          suETF+vFD1wbLZix4YvOuJSudoXGPltkTo1vKWv22Vk=
Subject key identifier:   DF:8C:C5:3E:76:D7:DE:6E:DB:2A:F1:2E:34:8A:5E:5A:E3:C4:95:0E
Certificate issuer:       /CN=A91764A1/serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728
Certificate serial:       0AF5
Authority key identifier: 5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/753703FE045C11EAB8BF0932C4F9AE02.roa
Signing time:             Wed 26 Jul 2023 18:56:47 +0000
ROA not before:           Wed 26 Jul 2023 18:56:47 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     134106
IP address blocks:        103.115.82.0/24 maxlen: 24
                          103.115.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl
                          rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Jun 2024 19:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2805 (0xaf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91764A1/serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728
        Validity
            Not Before: Jul 26 18:56:47 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64c16c6e-0b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d1:59:39:cf:79:ff:b3:64:74:e0:6c:fc:ab:
                    fa:a9:9d:cb:a0:bc:38:2f:0a:8b:ee:c4:63:50:9d:
                    af:09:1d:c6:eb:2e:1c:19:64:61:b3:27:e0:29:99:
                    d8:27:aa:1d:65:44:88:09:7e:e0:81:8b:26:b4:ef:
                    c7:0f:26:2b:e5:f7:ad:8e:10:8b:6b:f8:b2:cd:6d:
                    1a:83:97:55:66:cb:b5:9e:92:12:ca:2f:2e:a0:96:
                    9b:d3:7c:24:9a:ec:ae:a0:8f:f4:24:5c:7b:8c:82:
                    98:f1:2a:45:1f:06:5b:f3:0f:a4:2e:8f:d7:56:38:
                    e9:f0:77:07:0c:63:1c:ef:9f:94:f3:79:22:13:f6:
                    c7:50:b8:f6:7d:f7:13:29:78:7c:2f:04:ec:67:a4:
                    a7:d5:e3:0c:e5:1c:6a:15:b1:ea:af:29:40:8b:ed:
                    23:b8:a2:b8:4a:7d:32:1e:85:34:b0:d8:6a:f1:40:
                    a4:0d:04:e0:90:a3:d8:2a:3e:3f:5c:cd:c1:34:0c:
                    fc:bd:2e:a4:9a:60:9f:87:e9:d8:97:88:13:c9:be:
                    5d:69:83:45:fd:c8:b1:65:7f:72:45:b4:12:67:10:
                    bd:dd:5c:1c:3a:b8:8c:52:5e:6c:c4:d7:1e:3c:02:
                    89:a8:7e:70:b4:52:e3:fb:8f:04:b9:a1:e7:4f:70:
                    26:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8C:C5:3E:76:D7:DE:6E:DB:2A:F1:2E:34:8A:5E:5A:E3:C4:95:0E
            X509v3 Authority Key Identifier:
                keyid:5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/753703FE045C11EAB8BF0932C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:21:de:02:d1:9d:96:2a:40:a5:20:94:22:e5:c5:02:99:ac:
         0d:af:4d:19:b7:24:f5:7f:33:b5:7c:cf:6b:56:fb:e9:50:1b:
         d9:42:81:ac:73:a9:cc:99:20:b1:05:af:7b:91:de:52:d5:47:
         60:5e:a0:5f:e8:a8:ab:a8:99:45:28:96:c0:cf:37:ca:16:19:
         7c:57:08:5e:36:24:02:94:06:4c:37:58:0b:c1:7c:41:7d:f4:
         e2:aa:8b:02:3d:47:34:06:3d:5c:8f:e6:12:08:6c:19:c8:a9:
         a4:7a:93:3f:de:65:13:58:39:f6:f1:58:5d:93:8c:86:d0:af:
         09:0b:3b:99:08:30:46:68:d0:b3:3e:1b:9a:b6:e9:78:0b:27:
         ec:eb:56:6e:39:63:18:71:07:c7:a2:5d:16:f0:d5:e7:70:50:
         c1:04:8d:ee:c9:30:2f:68:80:cc:3c:5d:41:39:91:3e:07:be:
         04:69:66:8f:06:68:35:03:4e:0a:22:e5:7d:ac:6b:29:cf:b3:
         64:25:5d:b2:64:86:c5:c3:20:84:0f:18:a8:81:ab:2d:f6:9b:
         37:2c:92:09:d4:17:a2:54:ab:7f:b7:62:16:66:8b:69:a3:ad:
         40:ef:0e:97:3c:9e:bc:89:2f:6a:7d:8a:b3:a3:29:4e:9b:2e:
         c6:7d:15:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 23:05:31 2024 by rpki-client on console-ams.rpki-client.org