Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/873B172AA46611EFB7561648C4F9AE02.roa
File:                     873B172AA46611EFB7561648C4F9AE02.roa (raw, json)
Hash identifier:          vo5lQMl5I8uhZ1s6XXgPIO5Xr6twjgZLI/MtkF4v78k=
Subject key identifier:   1C:E9:F2:89:C8:D4:CF:7A:4B:59:78:83:E8:35:CE:73:F2:B0:6B:7A
Certificate issuer:       /CN=A917C716/serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2
Certificate serial:       5A
Authority key identifier: 5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/873B172AA46611EFB7561648C4F9AE02.roa
Signing time:             Sat 16 Nov 2024 22:02:53 +0000
ROA not before:           Sat 16 Nov 2024 22:02:53 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     20473
IP address blocks:        103.175.34.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl
                          rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C716/serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2
        Validity
            Not Before: Nov 16 22:02:53 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6739168d-932e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f2:54:de:c9:9c:4f:84:3a:97:26:2a:a9:cb:
                    75:51:f4:de:01:4d:49:83:8a:f2:0e:15:a9:62:60:
                    e7:66:4b:b6:e0:a7:f3:74:4e:08:bc:73:ee:5b:5d:
                    37:6d:66:c8:a9:ad:65:3a:10:12:49:da:6f:e1:87:
                    93:6e:24:73:78:4a:27:3a:3c:f2:7b:b7:1a:f7:96:
                    f2:9f:5d:1f:fb:5d:0e:84:f2:08:67:1b:93:80:1b:
                    0e:cb:77:22:8d:3b:dd:cc:53:89:16:a6:f2:0c:7f:
                    81:be:ff:e1:e9:76:5f:3e:b6:be:cb:38:6a:9b:48:
                    a8:f4:bc:0b:9b:22:ec:2d:ce:6b:7c:a2:51:e3:b8:
                    ed:80:ec:e7:df:00:4c:f0:96:4a:0b:a5:20:60:b2:
                    c0:05:e4:db:3f:34:2b:5b:b6:21:a7:ee:f5:fa:f0:
                    24:45:73:1b:f8:de:0f:04:c2:d7:d5:7b:fc:38:08:
                    43:8b:f2:69:69:da:13:af:de:f4:65:41:be:ad:9d:
                    a5:94:08:c0:3c:bc:00:69:15:d8:bb:80:12:27:79:
                    32:06:9d:4b:7c:57:51:71:e0:17:8f:48:66:82:1c:
                    06:0d:e0:49:12:e2:ad:97:32:e3:be:be:12:1f:04:
                    a4:ef:a9:12:de:76:24:c2:b6:da:ca:f7:1c:b9:4e:
                    d0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E9:F2:89:C8:D4:CF:7A:4B:59:78:83:E8:35:CE:73:F2:B0:6B:7A
            X509v3 Authority Key Identifier:
                keyid:5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/873B172AA46611EFB7561648C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:ca:b5:d2:63:fe:71:b7:b4:de:c9:18:77:72:0b:67:5b:8e:
         47:74:5d:88:e0:63:17:c3:12:28:f6:99:fb:7b:b3:77:da:02:
         6d:df:34:ae:09:d8:16:71:f2:48:02:8c:33:89:45:54:3a:f5:
         f2:d4:c3:ea:2e:eb:3e:f8:29:05:69:48:4c:7f:db:27:8e:02:
         3c:5a:dd:63:30:52:fd:23:18:77:1d:f0:4f:d8:0a:94:67:42:
         98:36:bf:85:c5:7d:6b:5c:01:d3:39:78:a6:cd:ec:e7:09:7a:
         09:31:19:73:b4:0c:d8:5f:be:8d:cb:37:68:c0:69:61:06:27:
         aa:39:bb:6e:73:00:ea:d0:17:61:6a:91:2b:bd:79:29:75:95:
         27:38:90:e9:e8:00:c9:1a:4c:2a:32:d2:88:07:87:c7:54:d8:
         03:22:a9:ee:48:13:0d:c7:78:c1:43:eb:b5:8d:da:6e:be:31:
         aa:67:20:ee:2b:5c:f2:35:79:bd:79:93:4d:10:ab:de:a3:98:
         57:45:93:a3:24:4b:42:d2:85:49:fd:15:c9:92:b8:72:43:d9:
         67:1e:30:ee:f8:a8:ea:ca:5b:97:70:51:16:83:98:df:5b:02:
         26:dd:fd:e3:df:6a:99:26:62:f5:9a:87:7b:90:9c:91:21:1b:
         6b:21:9a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:11:59 2024 by rpki-client on console-fra.rpki-client.org