Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/76EBD456F72011EA8776EC28C4F9AE02.roa
File:                     76EBD456F72011EA8776EC28C4F9AE02.roa (raw, json)
Hash identifier:          UNwl/vcqz5udeTkpNn+Q9yRYEG5aLdX2gzifnWSInJ0=
Subject key identifier:   97:7A:7B:38:EA:5A:FD:6D:08:D6:CE:B7:D2:DE:37:7B:0C:5E:EA:C9
Certificate issuer:       /CN=A91B253D/serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B
Certificate serial:       05C8
Authority key identifier: 00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/76EBD456F72011EA8776EC28C4F9AE02.roa
Signing time:             Mon 26 Sep 2022 11:40:06 +0000
ROA not before:           Mon 26 Sep 2022 11:40:06 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     38203
IP address blocks:        103.155.178.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl
                          rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Mar 2023 23:32:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1480 (0x5c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B253D/serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B
        Validity
            Not Before: Sep 26 11:40:06 2022 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=63318f96-ed1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ef:09:2a:dd:2c:8f:5b:39:c6:cc:1b:0b:25:
                    f0:d4:54:e1:68:0e:7f:ff:1a:cb:19:dd:e9:b9:e1:
                    99:24:82:63:f2:b9:12:80:30:5c:d5:2e:ea:f1:85:
                    99:d0:6b:cc:c8:51:09:ea:9b:6b:9e:6d:2f:c7:1d:
                    1e:95:9d:7f:87:c8:8c:05:16:6e:72:8f:2f:f7:df:
                    af:41:a0:fb:94:55:46:05:1e:06:0b:ea:dc:0f:19:
                    3c:c4:d8:84:db:50:b5:b0:6d:35:d3:bc:c9:91:ae:
                    ae:dc:b3:e9:01:a0:46:83:91:a8:d1:7f:4e:ee:14:
                    6a:1a:3c:7b:7b:cf:41:40:35:d6:a3:c9:af:27:c2:
                    2c:2f:89:88:2a:05:65:7a:60:66:64:ad:e4:16:f7:
                    f3:89:84:74:d6:3a:f7:d0:d5:55:0d:84:f5:d7:fa:
                    32:bc:14:a2:1e:7b:09:ed:7f:09:d4:92:e3:13:02:
                    f1:7a:a1:13:71:0d:fa:a1:2e:46:e8:77:4b:e0:e2:
                    6f:43:22:bc:e9:1b:a9:20:ad:cd:c2:9f:b5:f7:59:
                    7f:b5:69:ba:dd:34:85:4a:e4:97:75:87:60:d4:d2:
                    04:73:7e:38:fa:23:2e:22:1f:a1:a9:1e:4e:84:d7:
                    fa:b2:1f:48:0c:0c:75:f7:5d:a2:56:fb:8b:42:1c:
                    f9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                97:7A:7B:38:EA:5A:FD:6D:08:D6:CE:B7:D2:DE:37:7B:0C:5E:EA:C9
            X509v3 Authority Key Identifier: 
                keyid:00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/76EBD456F72011EA8776EC28C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:fc:d1:70:6a:1e:34:1f:5b:4a:37:fe:fb:5d:ff:f3:51:96:
         36:43:f4:04:b6:ed:9a:c7:87:a4:1b:98:6c:59:61:c5:dc:af:
         13:6c:33:f9:f1:23:1c:c6:9d:3a:42:62:c6:3a:44:c2:80:b9:
         73:41:d4:30:00:a0:72:9b:bc:de:b6:0d:88:5b:02:f3:ea:25:
         df:9e:a3:1b:d0:e5:a1:28:0e:a3:70:d3:48:91:ef:9e:2d:31:
         8e:be:b5:60:e4:10:5e:bd:85:07:86:6f:cd:9c:c5:8d:17:91:
         b1:c4:ca:e8:ea:75:c1:3c:0f:6c:5a:ce:53:c2:cf:c5:f3:97:
         2a:8f:b4:67:e1:ba:4d:b8:55:b3:fc:e9:15:37:7a:13:5d:9e:
         cf:c2:2c:9c:fb:f8:71:21:3c:f6:fb:ca:ff:d4:1b:1d:59:ea:
         d4:44:e2:f9:27:5c:72:a7:f9:95:73:dd:dd:2e:29:4d:c8:ef:
         46:33:35:3e:3a:ed:98:82:0d:de:9f:da:b5:d6:c0:54:6a:8a:
         71:5f:28:61:a1:ae:c5:26:08:cc:73:d0:af:3e:e2:35:ec:4a:
         d7:21:14:95:7e:40:7b:4b:b0:61:89:c4:09:54:b7:42:71:96:
         8a:f7:a2:9f:4b:c1:55:f7:ae:d9:a9:0d:1a:0a:8b:c5:26:36:
         50:3a:d3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 11:54:12 2023 by rpki-client on console-fra.rpki-client.org