Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/52FC6006A19911EA96035C38C4F9AE02.roa
File:                     52FC6006A19911EA96035C38C4F9AE02.roa (raw, json)
Hash identifier:          8JarBK7cFNi3wxrqzAeRvovwaE0DF52SW6hGG5D25Fs=
Subject key identifier:   6E:C4:E3:E1:62:C4:4A:43:E7:A8:FE:42:76:A7:2F:64:59:17:1E:8F
Certificate issuer:       /CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Certificate serial:       0835
Authority key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/52FC6006A19911EA96035C38C4F9AE02.roa
Signing time:             Fri 20 Oct 2023 21:09:05 +0000
ROA not before:           Fri 20 Oct 2023 21:09:05 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     136970
IP address blocks:        103.100.61.0/24 maxlen: 24
                          103.100.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl
                          rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 21:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2101 (0x835)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
        Validity
            Not Before: Oct 20 21:09:05 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6532ec70-b700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:11:a1:d3:f2:83:f6:a5:32:b2:d6:69:a7:46:
                    2b:89:53:cb:8d:e1:91:06:d0:9f:7b:f4:01:a0:14:
                    e4:38:a8:f5:95:49:0a:e8:14:b0:31:72:b9:9b:81:
                    d5:22:58:69:13:36:f7:55:5c:bc:c8:1e:60:46:59:
                    26:b7:84:23:94:88:ca:b3:d2:04:37:e7:89:f3:cb:
                    d2:88:0b:5b:74:b9:cd:86:ec:9e:98:07:75:3c:8f:
                    a6:84:bb:6c:0d:ee:28:00:6b:bc:2e:aa:8e:28:c5:
                    25:5e:2e:ec:70:d9:db:81:c1:93:4c:c7:4e:34:36:
                    69:d4:a4:5f:09:b2:5d:13:a6:13:1e:63:6f:a3:9b:
                    6c:a5:cf:11:5e:31:8c:b8:d9:e9:37:d3:22:b3:40:
                    5a:72:87:74:19:f8:87:cc:44:ec:b5:50:e1:1a:60:
                    3f:b1:96:5e:b3:9e:ed:55:03:35:b4:1d:1a:d4:91:
                    a7:08:61:4c:9b:52:5b:44:84:99:3d:50:98:79:48:
                    b7:8c:af:c8:2c:27:52:4f:e5:8f:94:43:84:24:37:
                    a0:5e:96:14:e8:35:df:f5:c9:bf:a7:20:72:b9:18:
                    af:32:84:bb:0e:f5:e6:5e:23:bc:63:a1:cb:92:27:
                    e8:53:a7:9e:78:a6:86:82:8f:99:92:3c:e1:8f:20:
                    f8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C4:E3:E1:62:C4:4A:43:E7:A8:FE:42:76:A7:2F:64:59:17:1E:8F
            X509v3 Authority Key Identifier:
                keyid:1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/52FC6006A19911EA96035C38C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.61.0/24
                  103.100.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:bc:f4:1e:d0:03:6f:2c:37:8f:9b:27:50:fc:8d:6d:5b:ff:
         ee:3d:0c:fd:df:c1:5b:a1:f4:71:36:14:b8:c5:c7:f3:53:48:
         44:46:21:b6:d2:7b:2b:02:86:13:e7:c3:d7:69:43:7f:2b:73:
         2a:78:f0:74:16:92:2b:16:f4:da:1f:bb:3f:af:fb:19:3f:ea:
         fe:43:97:fc:21:5e:24:0e:ed:1a:4f:99:f8:a2:88:92:f6:1e:
         a7:e9:af:1a:37:45:9d:4f:fc:da:4b:2e:61:d8:a9:29:c5:d5:
         5a:7a:10:86:ce:93:59:a2:b5:ee:f0:66:d0:01:2e:9a:d1:50:
         26:d3:28:af:51:9b:e9:e9:95:d9:aa:89:c8:92:fa:88:fd:e1:
         bf:81:85:09:2d:3c:4a:a2:2b:e7:9d:f1:3f:7b:fb:da:11:b3:
         ad:71:16:2d:ab:dc:f9:b6:2e:ce:df:ca:91:00:a8:9a:7e:a9:
         a9:5e:1f:43:04:8e:4f:f8:50:38:f2:af:c4:ba:f6:4d:24:5e:
         84:b6:df:fc:be:3d:63:5d:f0:75:31:e6:4a:f3:90:8e:90:98:
         ed:98:dd:52:0d:f4:7d:d8:8b:5e:40:8a:ec:e8:11:df:c7:c4:
         9b:a9:d3:2f:21:d0:f6:e7:74:82:a4:9c:0a:33:b9:35:3b:51:
         5e:b6:9b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:28:53 2024 by rpki-client on console-ams.rpki-client.org