Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/53AA673C16A911ED88058C80C4F9AE02.roa
File:                     53AA673C16A911ED88058C80C4F9AE02.roa (raw, json)
Hash identifier:          TZ/n2fdCp6It0G4ugsLwMjkFuDgasyyKStMAe77+R34=
Subject key identifier:   0C:6D:FA:7D:4F:B0:50:74:47:D0:85:6B:15:70:BD:DD:6F:62:E3:9B
Certificate issuer:       /CN=A91AAB94/serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7
Certificate serial:       01FC
Authority key identifier: 5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/53AA673C16A911ED88058C80C4F9AE02.roa
Signing time:             Thu 07 Nov 2024 01:54:33 +0000
ROA not before:           Thu 07 Nov 2024 01:54:33 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     56294
IP address blocks:        103.157.106.0/24 maxlen: 24
                          103.157.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl
                          rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAB94/serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7
        Validity
            Not Before: Nov  7 01:54:33 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=672c1dd9-fc51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ec:21:ec:5a:08:0a:e0:46:c3:f6:1c:de:36:
                    f8:d8:72:2a:16:4a:28:fc:07:c5:1e:e5:94:6c:b4:
                    30:b0:0b:35:82:14:af:51:b9:4e:b4:13:e7:a6:5d:
                    15:87:4d:03:8a:ef:54:8e:f5:d8:3d:fa:a6:dc:4c:
                    d6:a8:cf:d8:f1:7b:b1:0c:a2:67:45:0c:6e:d1:45:
                    23:35:ca:9e:cb:45:5d:27:fc:c9:18:06:5b:fb:d7:
                    e4:b8:3f:bd:7d:cc:8c:4c:cb:e4:2f:7d:c7:53:b6:
                    a6:c0:b2:4e:11:bd:d9:9b:b7:d8:0d:39:b5:41:22:
                    69:9e:85:56:e1:02:95:a4:7b:6e:8d:84:22:1c:b3:
                    d7:4d:dd:01:0c:de:e7:01:10:d1:14:cd:e0:f6:7a:
                    bd:15:3a:ed:f3:25:b7:bf:04:51:5b:29:a4:03:e1:
                    db:29:5a:57:99:01:49:34:e1:23:11:9c:14:bf:cd:
                    5e:a8:12:56:29:9b:6e:8c:82:36:3d:d6:77:a6:93:
                    0c:4f:dc:58:6e:a5:7b:fb:84:d9:10:e9:8c:b7:5a:
                    e0:63:aa:41:6a:da:f8:e6:6f:f5:32:12:3e:62:7d:
                    45:63:2b:5e:23:2f:0c:9b:29:09:f1:50:d3:1e:fc:
                    ab:8d:51:28:c4:63:26:04:f0:ee:73:4d:ba:71:60:
                    ce:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6D:FA:7D:4F:B0:50:74:47:D0:85:6B:15:70:BD:DD:6F:62:E3:9B
            X509v3 Authority Key Identifier:
                keyid:5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/53AA673C16A911ED88058C80C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:bb:4e:08:04:60:bd:d9:8f:59:04:42:02:01:b8:fd:c2:bd:
         44:09:d8:00:09:d7:02:c4:ec:b3:23:6f:2e:10:49:e1:3d:a8:
         a5:86:3e:f4:32:49:66:0c:26:20:4d:26:2e:2b:c4:6d:fc:11:
         37:08:87:85:98:bc:d8:0e:dc:48:91:23:26:86:a6:48:32:ea:
         84:13:57:75:60:11:90:31:e4:16:ca:1c:f8:1c:34:58:8e:79:
         35:b1:2c:2f:c4:40:23:65:fd:4d:d9:c7:74:1d:c3:d2:36:85:
         ee:fb:0d:17:2a:e5:42:45:28:93:02:c9:b9:25:71:d9:ab:ea:
         ed:d3:af:21:3c:31:e2:96:8a:97:2a:91:e9:60:7c:fd:c7:85:
         12:e4:5e:15:c5:75:86:a8:e8:59:0a:ab:06:65:b6:83:f9:33:
         dc:8f:3e:bc:a9:7b:a1:76:70:d6:13:42:59:ee:54:99:10:6e:
         cf:59:e9:7e:09:0b:47:65:6b:a8:a4:7d:ed:5a:91:87:7e:35:
         08:8b:5a:b0:0d:37:a1:49:57:74:5a:46:19:e9:5d:5f:13:af:
         ee:fb:ec:ef:e2:f3:f3:97:7b:b3:49:6c:c2:8b:78:54:61:6a:
         30:55:01:aa:78:9d:9c:c2:a8:87:d4:ca:12:4a:1a:55:aa:65:
         94:ef:f5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:43 2024 by rpki-client on console-fra.rpki-client.org