Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/3763B68C774C11EE81607E76C4F9AE02.roa
File:                     3763B68C774C11EE81607E76C4F9AE02.roa (raw, json)
Hash identifier:          lwIovDBhbWl0rKnDI2i+BH67T5RQmBVJUsGai/l3P3Q=
Subject key identifier:   11:CC:CC:3F:56:31:7F:6B:5B:B6:02:1D:F5:1D:21:46:B0:7B:BC:2E
Certificate issuer:       /CN=A91AD09B/serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8
Certificate serial:       1C
Authority key identifier: 1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/3763B68C774C11EE81607E76C4F9AE02.roa
Signing time:             Mon 30 Oct 2023 17:46:13 +0000
ROA not before:           Mon 30 Oct 2023 17:46:13 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     150774
IP address blocks:        103.7.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl
                          rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:37:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD09B/serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8
        Validity
            Not Before: Oct 30 17:46:13 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=653febe4-d51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:98:7d:02:61:d8:23:b8:fd:9f:24:75:12:71:
                    45:83:27:d8:50:5c:ed:b2:9a:a3:b6:fc:ac:4d:0e:
                    b9:32:21:3b:d8:69:8e:e5:27:04:a4:3c:ac:bd:4a:
                    1e:2d:99:e4:e4:de:b3:7e:70:f6:2f:31:08:41:1d:
                    8b:14:07:7d:66:35:cd:0c:c9:66:4d:02:93:15:d3:
                    9f:28:8e:77:43:fa:95:a4:d1:a8:0e:29:d6:10:42:
                    c8:1d:ce:21:f5:e4:f2:53:0e:8d:7b:e1:54:f0:f9:
                    d3:c1:ab:5a:44:3b:34:7e:a8:75:aa:1b:66:58:2b:
                    66:eb:77:4b:46:75:77:d5:c9:01:c0:42:c5:dd:27:
                    22:1d:12:38:18:50:9d:39:6d:ac:03:7e:8b:41:94:
                    eb:01:e9:bc:1f:ab:23:a0:2b:2a:73:bf:79:cf:66:
                    79:86:a4:99:47:01:c3:4b:82:6c:20:c7:a3:6c:93:
                    89:dc:a6:12:4a:06:82:ea:00:96:86:98:a5:04:95:
                    83:4d:28:73:72:35:f7:74:6f:4c:ad:20:fd:a9:f4:
                    b4:9c:46:23:33:e9:aa:d4:1e:1c:52:45:43:26:9d:
                    b3:2d:d9:b7:48:67:3b:87:de:65:7d:d2:da:37:96:
                    e6:5e:00:02:ad:de:7d:9b:ea:cc:ed:bb:63:5e:bb:
                    db:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CC:CC:3F:56:31:7F:6B:5B:B6:02:1D:F5:1D:21:46:B0:7B:BC:2E
            X509v3 Authority Key Identifier:
                keyid:1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/3763B68C774C11EE81607E76C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:30:c6:20:86:26:59:62:f3:4e:8c:3e:ac:ac:2a:1a:b8:4a:
         b1:fb:36:04:73:c8:50:bf:d2:fa:07:d5:63:80:a7:41:05:85:
         75:3b:5d:80:4a:11:5a:b0:06:61:26:ec:52:05:67:df:35:dc:
         03:dd:bb:35:07:6a:dc:1a:4c:1a:d0:c1:3e:78:7d:e1:4a:c6:
         73:94:b4:1b:a5:3f:6f:61:3b:52:96:1f:0e:c8:71:33:94:4f:
         62:94:fe:4f:77:64:00:0d:62:d9:a2:7c:d7:84:f4:68:c0:3b:
         12:a2:7e:83:98:39:84:ca:73:9e:f4:a2:c8:fc:5b:4e:6d:3e:
         50:e4:d9:91:6d:b2:10:43:44:2e:34:87:89:68:8e:3f:0f:1e:
         6b:70:e9:63:3b:06:23:f8:be:41:57:9d:d2:c2:97:8c:07:da:
         a2:d1:bb:12:b3:77:cc:57:dc:b0:4a:9b:c2:06:38:2b:f4:20:
         1f:9c:29:14:db:9b:40:ef:22:f5:82:53:03:4b:bb:ae:2e:dd:
         20:fd:f5:4e:9a:58:99:8d:63:f2:60:94:73:8c:bd:40:3a:fe:
         8d:0f:0a:82:3d:a5:cf:8c:08:80:9b:a9:3d:91:59:26:05:12:
         f7:f1:b0:dc:3d:30:97:2a:d8:bc:5f:be:6a:1e:20:16:1e:ac:
         d3:14:b3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:30 2024 by rpki-client on console-ams.rpki-client.org