Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/346A2B4045AE11ECB857890EC4F9AE02.roa
File:                     346A2B4045AE11ECB857890EC4F9AE02.roa (raw, json)
Hash identifier:          kz1MrkZk8NcbY7byvwJtyN+an+xnb/IWd+chkZEyI8I=
Subject key identifier:   F9:CB:CE:3D:1F:FC:3F:1F:2F:85:FC:B8:91:FA:D3:B1:39:A8:D7:17
Certificate issuer:       /CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Certificate serial:       0341
Authority key identifier: CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/346A2B4045AE11ECB857890EC4F9AE02.roa
Signing time:             Tue 05 Sep 2023 01:32:08 +0000
ROA not before:           Tue 05 Sep 2023 01:32:08 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     132491
IP address blocks:        103.73.84.0/23 maxlen: 24
                          103.73.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl
                          rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 833 (0x341)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
        Validity
            Not Before: Sep  5 01:32:08 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64f68518-ce1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8c:af:0f:3d:dd:a9:e2:84:de:25:9f:e1:50:
                    b6:f1:9c:b9:2e:a3:47:4b:05:b8:b8:06:33:94:a2:
                    73:e9:41:af:eb:a4:19:ba:19:bd:ca:20:94:3a:75:
                    39:65:d2:c7:dc:7a:c4:a6:2e:7f:9b:a3:2f:15:4a:
                    45:7b:6d:3b:d4:e4:6a:ce:89:b9:21:27:8d:bb:60:
                    3e:ba:bc:9f:31:73:60:1e:e6:1b:e7:c7:ab:b9:00:
                    ab:a6:f0:89:f4:60:57:97:c0:3f:ca:4f:fa:b3:43:
                    33:a9:6d:66:57:7e:0d:a4:78:4c:0e:dc:61:87:e9:
                    5e:c9:e0:fc:89:0a:86:e4:9d:bb:84:ee:4c:b2:52:
                    07:88:f7:bc:0f:7c:07:1f:96:f0:f8:31:11:ab:cc:
                    27:6f:ec:bf:4f:65:a5:ff:ee:82:34:f6:7d:10:fa:
                    a6:db:f9:3c:49:c0:75:5d:3d:13:be:a8:e7:5a:90:
                    0b:4a:12:2c:18:e4:8f:6e:39:27:f1:28:14:92:4d:
                    bc:e0:e4:6c:07:e1:1d:35:ae:81:5e:9f:1a:f6:b7:
                    3a:5f:dc:99:01:24:e1:7c:b9:d0:c4:af:6e:11:0d:
                    e1:99:f2:7d:b6:a0:c2:9c:86:4d:3b:fd:13:38:d9:
                    45:60:54:47:05:af:69:1f:2a:a0:64:21:d9:b0:21:
                    49:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CB:CE:3D:1F:FC:3F:1F:2F:85:FC:B8:91:FA:D3:B1:39:A8:D7:17
            X509v3 Authority Key Identifier:
                keyid:CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/346A2B4045AE11ECB857890EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:83:50:e9:4f:80:5d:b0:03:7e:57:09:32:97:55:e7:db:9c:
         61:79:a9:40:8a:7e:0c:42:7b:3d:68:2e:30:0b:38:7d:26:f1:
         19:d1:fa:88:29:95:08:17:63:b1:a1:6c:5c:01:01:ea:64:6b:
         a7:b8:6c:f5:f1:dd:e2:04:d9:b7:d5:ea:ef:85:5e:22:5a:38:
         fb:65:1b:b1:4a:fa:36:92:e6:55:65:ac:6b:f2:d1:e3:a4:9f:
         cb:90:dc:41:95:2a:4a:c4:0c:3f:37:88:e4:cb:10:b7:be:d4:
         46:ce:34:1e:20:e5:c7:e2:ac:b8:bb:26:1f:93:10:7c:f2:2e:
         5a:38:c9:92:bd:2f:31:71:32:82:5a:db:eb:3f:24:0e:bc:53:
         b4:d6:81:19:47:50:13:38:26:38:1c:84:d9:46:11:ca:c2:4d:
         eb:e8:6d:8c:69:9e:4b:d9:b0:78:d8:a9:40:90:2e:ee:3d:fc:
         10:54:fc:04:e3:3f:24:68:83:01:a9:4d:f6:e8:5a:f2:b3:6b:
         1e:b7:0e:59:9a:55:f8:2b:e8:93:6e:df:d8:dc:a6:57:55:a3:
         28:da:5e:12:f2:e8:16:57:12:f2:8b:9a:c2:d1:11:72:ec:12:
         78:27:d4:28:a8:99:cb:3a:7b:9a:f2:91:10:e5:0c:78:72:eb:
         d4:77:64:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:17:00 2024 by rpki-client on console-fra.rpki-client.org