Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/1ED3BAF898A011ED9D31B05CC4F9AE02.roa
File:                     1ED3BAF898A011ED9D31B05CC4F9AE02.roa (raw, json)
Hash identifier:          oyJ8pYc57E6anvBg+OfGz7YjmNkraWU0j/Nep9q9F5U=
Subject key identifier:   17:6D:C0:88:13:1C:D4:9C:75:6C:A2:66:56:AF:BA:FB:3C:BD:87:FC
Certificate issuer:       /CN=A91AB8D7/serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC
Certificate serial:       C6
Authority key identifier: 05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/1ED3BAF898A011ED9D31B05CC4F9AE02.roa
Signing time:             Sun 21 Jan 2024 04:56:09 +0000
ROA not before:           Sun 21 Jan 2024 04:56:09 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     150445
IP address blocks:        103.76.116.0/23 maxlen: 23
                          2400:d360::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl
                          rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Jun 2024 05:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB8D7/serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC
        Validity
            Not Before: Jan 21 04:56:09 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65aca3e8-55b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7c:98:98:28:3a:b9:ad:10:5d:f4:cc:88:d3:
                    09:32:12:ac:0a:70:d3:48:8a:e5:7c:39:24:96:6a:
                    37:ac:e3:cb:0c:f0:ad:29:0a:4a:53:ae:ae:42:c0:
                    91:54:51:19:34:23:80:47:9c:2f:86:a2:0d:1b:0e:
                    28:5d:de:a0:d3:9b:ca:5b:59:a2:07:46:5c:23:ff:
                    74:56:de:e5:91:d9:03:d8:57:0f:56:f2:c0:83:ca:
                    40:23:37:4f:b2:34:08:c6:ac:75:78:8e:4f:9f:dc:
                    ad:00:c1:5e:0b:5d:46:ed:53:f2:9d:17:e5:08:cc:
                    25:8c:22:87:c1:39:41:11:4a:cf:a0:13:a9:6f:0f:
                    6e:82:8c:73:c1:52:81:f2:d9:99:eb:03:f6:98:ec:
                    6b:6c:0e:f9:0a:dd:0b:dd:d7:b1:6a:13:37:f4:2e:
                    d0:26:0d:e2:60:ea:aa:80:ee:7d:43:03:89:90:3c:
                    c9:ef:77:b8:9e:3a:a6:4e:23:b9:14:b6:44:b6:f7:
                    f6:2e:9c:a0:74:de:5d:b2:68:6b:e1:d7:62:90:ad:
                    e1:0e:63:45:cf:78:7e:de:30:23:2d:2c:80:4e:1c:
                    48:c8:57:c0:49:33:9c:80:6e:1e:d9:b2:e9:78:64:
                    29:ba:cb:87:c7:a1:0e:84:61:27:7e:a8:da:7e:ce:
                    e0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6D:C0:88:13:1C:D4:9C:75:6C:A2:66:56:AF:BA:FB:3C:BD:87:FC
            X509v3 Authority Key Identifier:
                keyid:05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/1ED3BAF898A011ED9D31B05CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.116.0/23
                IPv6:
                  2400:d360::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:1a:db:af:ce:03:94:98:f0:a1:07:14:99:12:1b:23:cb:d3:
         f9:97:53:28:ad:4c:1d:3e:7a:0a:11:42:82:56:3e:e0:24:5d:
         9f:d9:11:5b:1c:8c:19:1c:7d:5b:d7:03:4e:6e:e0:f3:b8:ca:
         e9:13:99:56:9d:7c:ba:98:e7:54:ab:f3:58:e7:7d:50:28:fb:
         bd:8b:e0:70:fc:3b:79:03:68:89:ee:38:7f:c3:9b:56:fc:58:
         57:98:0e:0f:e4:43:74:03:40:ba:87:a6:6e:97:12:a3:53:6a:
         3b:5d:ef:19:49:d3:af:08:b8:81:7e:86:09:84:0b:2d:9c:a6:
         62:f4:cc:07:6d:dd:25:a2:2c:a4:92:b8:67:6a:bf:be:20:e3:
         1b:ab:c2:9f:6b:0c:86:f9:16:b8:5f:cd:7e:11:c3:39:92:78:
         ad:f8:68:97:3f:3d:b7:80:75:a9:05:97:6b:9e:b6:3c:98:89:
         0c:12:30:2d:d8:42:04:cd:e2:40:08:8f:b6:6a:1e:94:60:68:
         98:2f:72:7b:97:b4:2d:52:0d:b6:36:78:56:d3:e3:78:dc:0d:
         d4:b8:49:08:09:ae:da:6e:7a:c0:40:a5:dc:35:9b:16:3e:58:
         0a:ee:95:58:b2:27:ca:e6:53:16:2f:0a:a4:f1:44:fc:27:8f:
         61:7f:31:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 5 06:49:11 2024 by rpki-client on console-fra.rpki-client.org