Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/EEA8968C461A11ED898DD14FC4F9AE02.roa
File:                     EEA8968C461A11ED898DD14FC4F9AE02.roa (raw, json)
Hash identifier:          D6tQlG23D/injlTMjJzlRWilmhPrsP6m+ODUZtrQ44I=
Subject key identifier:   56:85:AA:32:C0:4F:F1:2B:E2:F7:AF:B4:20:81:1A:65:D9:2A:E6:55
Certificate issuer:       /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
Certificate serial:       D5
Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/EEA8968C461A11ED898DD14FC4F9AE02.roa
Signing time:             Wed 15 Nov 2023 04:35:23 +0000
ROA not before:           Wed 15 Nov 2023 04:35:23 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     150345
IP address blocks:        103.17.6.0/24 maxlen: 24
                          103.17.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl
                          rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 05:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
        Validity
            Not Before: Nov 15 04:35:23 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65544a8a-c237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:17:1e:de:7f:ca:9c:43:1f:7e:f7:69:40:71:
                    70:09:cb:1d:0e:df:24:96:cc:9d:f2:80:7e:3b:64:
                    85:7c:0f:3c:3e:d6:22:d7:3e:dc:56:30:60:6e:0d:
                    02:71:b0:d1:3c:31:e4:e2:59:a6:67:29:ea:b6:2c:
                    c5:92:3c:53:77:14:a7:4a:6f:cc:9f:51:43:16:f6:
                    41:e5:34:02:a0:23:e1:d9:c8:94:cf:d7:90:b1:c2:
                    9e:94:d2:1b:4c:87:d0:36:89:a0:86:46:f4:d0:75:
                    52:dd:92:2a:f1:f8:9b:27:5e:84:46:32:73:18:e4:
                    0a:77:52:21:ce:d5:06:51:52:56:d3:d8:5d:7a:4a:
                    76:57:42:e2:10:d6:78:b4:29:94:be:10:2b:cc:f1:
                    c2:6b:bb:39:a9:6d:31:d7:fa:61:a7:80:cb:c8:f6:
                    17:47:e9:7d:3d:a9:a3:94:31:4e:1f:9c:70:34:27:
                    a3:82:11:07:ea:3e:aa:13:82:65:a0:3a:5c:5a:d3:
                    e8:e8:86:4c:ea:aa:4c:ad:51:6e:c4:26:be:cf:39:
                    1f:0d:32:8a:fd:e9:32:f1:5e:d7:92:35:e3:69:82:
                    5d:35:68:d0:fa:4c:ea:92:bd:95:59:28:6d:ea:6a:
                    c9:43:0e:55:3f:14:55:8a:cb:a4:ac:dd:f1:60:f1:
                    ec:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:85:AA:32:C0:4F:F1:2B:E2:F7:AF:B4:20:81:1A:65:D9:2A:E6:55
            X509v3 Authority Key Identifier:
                keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/EEA8968C461A11ED898DD14FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:ea:59:5a:21:e7:89:e4:9d:49:83:a7:f5:00:05:ee:b4:ec:
         20:aa:22:36:17:86:de:f4:83:15:d2:5e:8b:8e:d9:a3:89:05:
         e5:f0:f6:6a:22:97:9b:36:31:8e:f2:04:75:74:d7:36:46:5a:
         b2:0f:51:a6:25:28:44:43:58:3c:1b:b2:88:8b:75:b2:da:ae:
         a3:3b:2c:31:4a:21:0a:a1:c2:cf:12:db:d1:c2:cc:10:70:6e:
         1d:fb:8d:95:5e:68:ba:5f:17:2d:10:11:d3:c1:88:23:8d:8a:
         b1:a9:69:24:7a:f8:db:9b:8f:7b:75:22:5e:39:5c:68:57:7f:
         58:29:1c:82:81:a0:cd:8c:a0:6e:0a:45:7e:da:bb:0b:d5:8f:
         2d:99:42:dd:c3:d3:08:22:b6:86:81:c0:ea:56:40:98:3f:ac:
         5e:fd:94:49:4c:9c:18:42:9f:3e:e8:17:29:b9:fd:53:f1:b4:
         18:21:89:9e:45:e4:f5:c9:ee:dc:1c:21:e4:4f:9e:be:44:38:
         fb:29:17:13:6a:22:86:d3:33:ce:ab:7a:36:d8:5e:07:9c:e9:
         bd:f8:04:07:13:66:2b:b2:2d:e3:73:13:1c:bd:96:be:95:f6:
         7b:a4:d4:0e:a6:c6:d2:8e:72:78:18:ce:43:f3:0b:91:4c:2c:
         26:62:8d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:46:26 2024 by rpki-client on console-ams.rpki-client.org