Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/5BD4372457DE11EC88BC6713C4F9AE02.roa
File:                     5BD4372457DE11EC88BC6713C4F9AE02.roa (raw, json)
Hash identifier:          FiCTOia3dtnewSfPwDMA18gyV4CZ/I7iQt5+bH2v0P0=
Subject key identifier:   35:08:99:B9:53:F2:2C:E9:B0:50:88:DE:91:7C:2A:B8:54:94:30:DF
Certificate issuer:       /CN=A91AB001/serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17
Certificate serial:       0353
Authority key identifier: 96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/5BD4372457DE11EC88BC6713C4F9AE02.roa
Signing time:             Sat 27 Jan 2024 02:24:32 +0000
ROA not before:           Sat 27 Jan 2024 02:24:32 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     149048
IP address blocks:        103.177.118.0/23 maxlen: 24
                          2001:df0:2140::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl
                          rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 851 (0x353)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB001/serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17
        Validity
            Not Before: Jan 27 02:24:32 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65b46960-8457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:41:1b:de:cc:1d:c5:e7:78:67:44:c1:9c:
                    0d:9c:12:01:57:85:11:a6:4d:27:cd:56:0a:13:a2:
                    7b:0b:96:75:73:dc:1c:45:f8:54:d6:47:40:8f:35:
                    5e:40:cc:3f:92:80:8b:bc:58:ad:c7:78:06:5b:0d:
                    64:21:7b:59:3a:b1:8e:6c:0a:6f:bf:d8:41:84:c4:
                    69:a4:26:02:99:b6:9d:bc:aa:fd:8b:7b:de:ac:b6:
                    df:2a:2e:4d:b6:42:87:81:d2:ec:b4:f7:d9:fa:1f:
                    84:0f:ca:7a:37:bf:16:28:06:de:6d:b8:cb:ed:a2:
                    c7:ec:0b:44:63:6d:ca:fa:30:5e:a1:01:99:3c:f9:
                    9e:ca:31:50:45:fe:bd:05:90:69:8e:f2:46:5e:af:
                    a6:1a:12:bb:b1:ab:e8:56:8c:77:00:df:71:8f:9a:
                    bf:6d:c2:eb:17:aa:ef:d8:48:44:f1:a3:27:d8:b3:
                    a3:60:f0:11:78:f7:8b:46:b3:f5:a6:a1:e2:e5:04:
                    22:f3:53:71:d0:9d:d0:62:15:9e:5b:73:19:8c:52:
                    5d:3d:ba:d8:c1:fd:c1:29:58:40:7f:9e:b8:19:ff:
                    42:fe:3e:d9:ae:ae:2b:07:21:a8:f7:62:c2:3d:9f:
                    2d:38:f7:04:92:7b:35:d6:01:01:f1:0a:9c:61:89:
                    ee:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:08:99:B9:53:F2:2C:E9:B0:50:88:DE:91:7C:2A:B8:54:94:30:DF
            X509v3 Authority Key Identifier:
                keyid:96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/5BD4372457DE11EC88BC6713C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.118.0/23
                IPv6:
                  2001:df0:2140::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:f4:ab:81:9e:cc:07:10:4f:d6:17:c7:6f:0c:6f:da:16:29:
         74:85:85:07:33:8d:9f:2b:b1:8b:3e:c9:cf:05:ff:84:b6:b7:
         38:dd:9f:86:33:fc:41:88:10:ce:81:6f:69:26:47:0d:2d:5e:
         be:cf:95:73:bb:be:ab:0b:1f:6e:d0:24:ee:db:6d:da:f9:22:
         8f:6c:3c:3d:a5:c9:8e:47:4e:30:f9:07:f1:4a:d0:ad:99:04:
         1c:c2:fc:cd:fa:6a:dc:b4:6d:99:fd:ad:5f:9e:70:42:e3:3c:
         a6:f3:40:14:13:9a:81:07:79:f1:cb:b0:6d:2e:6d:2a:69:d5:
         8f:28:6b:7b:8a:b8:89:37:17:e5:23:a8:2e:19:6b:ab:8e:80:
         56:0a:95:78:95:8c:53:5d:68:57:e3:97:8c:7b:01:00:97:86:
         c4:f3:5c:d5:e8:9d:97:7b:81:0d:6a:89:ea:3f:18:2d:ad:9d:
         d2:49:df:37:aa:f5:6a:51:89:06:7e:07:41:86:c9:e5:31:4c:
         36:04:24:39:37:07:61:5d:42:92:9e:cf:a7:cd:9e:bd:bf:fc:
         93:95:cf:2a:2c:65:49:d1:ed:b7:a5:03:b3:c5:4d:6c:1e:9b:
         27:8c:57:e9:86:a2:3c:8f:21:31:06:46:3b:a4:39:7c:1f:b5:
         ad:02:f7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:38:15 2024 by rpki-client on console-ams.rpki-client.org