Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/AC63C4A4A62E11ECBDD6843FC4F9AE02.roa
File:                     AC63C4A4A62E11ECBDD6843FC4F9AE02.roa (raw, json)
Hash identifier:          Bknqy8vDNEwulHKsHfY2Ejxd2DlHR35GwlVtw8qa37E=
Subject key identifier:   ED:20:CF:18:6F:D4:E1:9F:69:29:95:59:3F:CB:AF:9B:00:85:BC:E4
Certificate issuer:       /CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8
Certificate serial:       0336
Authority key identifier: DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/AC63C4A4A62E11ECBDD6843FC4F9AE02.roa
Signing time:             Tue 03 Oct 2023 01:42:55 +0000
ROA not before:           Tue 03 Oct 2023 01:42:55 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     138186
IP address blocks:        103.173.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl
                          rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 01:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 822 (0x336)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8
        Validity
            Not Before: Oct  3 01:42:55 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=651b719f-cdb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fa:b9:9e:38:23:38:88:19:3c:a9:1c:83:a5:
                    bd:d9:12:15:45:7c:6e:1e:ce:bd:25:b7:29:62:e6:
                    8e:9f:0c:55:56:71:bc:8a:ed:40:89:34:92:35:ce:
                    f5:83:c6:ff:b5:f9:e7:30:22:1c:02:30:cb:c1:d4:
                    d0:b5:b9:c0:81:69:c9:a9:ff:d6:19:f5:c4:a2:d0:
                    55:7e:7a:a7:2c:88:5e:b8:70:48:d6:03:53:c7:5d:
                    7b:55:89:30:6f:c0:49:95:0f:17:a7:5a:aa:70:ce:
                    67:70:12:56:5f:5e:e7:75:d3:e6:2c:d5:f4:f2:38:
                    a8:5e:7f:4c:3b:db:d5:db:28:c3:8c:b2:a7:7a:63:
                    84:b2:b1:90:82:1b:56:69:ba:fe:e8:5c:45:b7:49:
                    92:1a:90:9f:ae:a8:0e:78:0b:05:d3:84:82:18:6d:
                    89:f6:2c:84:ae:5f:11:e3:1b:25:64:d1:b1:05:c6:
                    bd:cd:e3:c0:ae:ae:a7:8d:e4:12:08:b1:c2:f9:63:
                    4e:de:89:c4:50:bb:e0:60:7f:90:9b:26:9b:e9:e3:
                    16:54:ae:9c:b9:97:34:42:9e:e2:00:46:f5:a0:a7:
                    dd:0a:c2:85:fe:b4:5d:d2:95:3f:ae:54:eb:5b:e6:
                    8d:3e:ea:f8:86:45:c7:50:0c:95:32:d8:34:62:da:
                    e6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:20:CF:18:6F:D4:E1:9F:69:29:95:59:3F:CB:AF:9B:00:85:BC:E4
            X509v3 Authority Key Identifier:
                keyid:DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/AC63C4A4A62E11ECBDD6843FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:82:3e:8c:c2:39:51:49:48:8f:8f:cd:8d:2e:89:99:cf:a7:
         5a:ea:b9:f6:3e:15:db:3c:31:5d:68:df:8e:47:29:3e:d0:c1:
         7c:64:8c:ac:ea:c9:f8:40:f6:95:21:8c:e5:4e:e1:f9:2e:ac:
         e0:04:42:09:ba:3c:a3:22:55:25:e8:0a:1e:5b:65:be:3b:07:
         dd:e1:2d:aa:8f:a6:23:01:ad:96:25:a6:88:bc:ce:5b:0a:f4:
         c4:21:bd:dc:2a:01:06:ad:c7:a1:2c:cd:fb:81:4b:bd:08:80:
         cc:27:2c:2c:50:1d:53:74:fd:a9:25:2d:e2:b0:8e:2e:2b:fa:
         fc:56:ba:d9:6d:6b:cd:25:6a:50:c2:8b:9d:b2:e4:0e:17:2e:
         b0:0f:61:a4:f1:c9:a2:c1:40:47:80:44:d7:6a:fe:34:6a:86:
         0a:0b:69:2b:83:d6:35:50:85:a3:eb:f5:3d:d2:fd:08:74:ad:
         49:29:cf:9a:62:94:bb:39:e5:d7:bf:5c:56:af:18:18:50:ed:
         0c:8c:ab:26:26:c3:b3:0a:13:11:2a:ab:56:9f:a7:fe:ad:02:
         ff:59:20:ae:ef:f3:b4:3d:aa:f8:c5:65:bb:ca:f9:0c:80:c8:
         b4:81:e2:0b:05:b1:39:8b:7c:2b:37:3e:68:c5:da:e2:16:3f:
         47:e9:6e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 03:08:25 2024 by rpki-client on console-ams.rpki-client.org