Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/57C505EA708411EDA8B14246C4F9AE02.roa
File:                     57C505EA708411EDA8B14246C4F9AE02.roa (raw, json)
Hash identifier:          Z9vK6BUEUyhkHCgbEYCQB83vkqUnWnDNuYhGe3OvPYQ=
Subject key identifier:   38:50:D4:D3:E0:56:EC:6B:DE:85:6E:FE:5F:60:63:38:F9:42:BF:08
Certificate issuer:       /CN=A91767B4/serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7
Certificate serial:       C3
Authority key identifier: 18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/57C505EA708411EDA8B14246C4F9AE02.roa
Signing time:             Mon 11 Dec 2023 04:54:34 +0000
ROA not before:           Mon 11 Dec 2023 04:54:34 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     38136
IP address blocks:        103.47.100.0/23 maxlen: 23
                          103.47.100.0/24 maxlen: 24
                          103.47.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl
                          rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 May 2024 05:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91767B4/serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7
        Validity
            Not Before: Dec 11 04:54:34 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6576960a-4f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:ac:a0:24:55:22:25:10:7f:c8:f8:4c:57:
                    74:a2:75:7b:1a:20:27:5b:99:0e:ef:fb:5a:9a:6d:
                    41:8b:f7:af:ae:20:91:f3:73:aa:9b:58:7f:48:c7:
                    63:12:5f:df:b1:9a:87:e0:dc:29:a1:cd:00:50:d9:
                    21:ed:13:fb:4f:98:a1:5f:50:5d:76:fd:4e:28:cf:
                    df:d7:ba:eb:e0:e8:0e:a5:86:08:ca:25:1d:4f:ac:
                    8a:30:3a:1d:ac:0d:53:29:35:3b:79:31:23:dd:47:
                    61:8b:5e:b1:2c:d1:32:d9:69:50:35:ce:a5:f2:c3:
                    44:cd:24:99:ee:6d:c4:90:84:6f:07:61:4a:79:1b:
                    26:78:77:29:69:a2:85:a3:26:e6:0b:74:bc:40:c2:
                    4a:6a:d9:87:75:41:9f:32:ec:bd:21:35:88:b4:07:
                    b8:ce:76:d0:0f:a3:ce:99:e4:e9:3c:6e:67:44:9c:
                    4b:4f:16:f9:62:24:46:3a:4e:32:fe:ba:3f:4d:93:
                    74:ec:97:ff:66:ff:a1:6d:88:9c:da:7c:18:23:73:
                    a1:4b:68:a4:8d:96:e1:38:ea:83:cf:14:95:d1:46:
                    90:30:77:70:22:ef:f1:82:87:92:39:20:91:a3:1f:
                    2f:f5:c1:15:97:21:9b:26:d6:ab:8d:5e:a5:57:08:
                    30:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:50:D4:D3:E0:56:EC:6B:DE:85:6E:FE:5F:60:63:38:F9:42:BF:08
            X509v3 Authority Key Identifier:
                keyid:18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/57C505EA708411EDA8B14246C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:ab:bc:2a:fb:30:e9:ec:0c:0f:d5:51:58:ec:0d:c1:f4:af:
         9d:f4:41:38:7c:1c:d7:5a:dd:f1:4d:cd:a7:79:f5:98:b1:43:
         10:d6:19:1a:9d:2d:c8:33:02:48:93:97:07:36:b1:dc:32:50:
         8f:48:b7:db:95:ee:cd:a2:dd:64:5d:91:63:54:3f:2c:ff:a2:
         6a:5e:18:d9:5c:9d:3e:0c:96:97:36:96:af:ad:36:9a:59:5c:
         2e:2e:1c:f2:92:9b:8d:bf:a4:26:76:c4:21:b5:4e:51:11:56:
         58:00:24:55:8c:62:89:f6:69:b7:2b:34:ac:31:e9:3e:f9:ef:
         a4:ad:c6:77:be:c1:cb:67:e4:6a:c5:3e:1c:65:ba:7e:20:64:
         62:92:6d:de:48:83:e0:89:40:2f:12:26:8a:4c:e3:fd:fc:07:
         15:2e:ee:c0:ef:97:d8:81:6b:34:2b:13:83:5a:09:1d:6a:2a:
         b5:ed:8d:d7:4a:d5:4d:93:bc:a6:5b:8e:9a:30:62:29:52:6d:
         d2:a1:53:a9:d6:43:65:3e:d4:d0:64:c0:14:f3:9a:2e:bd:ba:
         bb:10:6c:e7:8c:c7:ac:ee:ca:75:bd:99:e1:ce:92:93:ba:71:
         15:e6:dc:f1:d6:b3:6b:e8:34:de:ee:83:22:9b:ef:41:a6:21:
         fd:e7:42:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 05:59:12 2024 by rpki-client on console-fra.rpki-client.org