Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/351AC73E45AE11ECB857890EC4F9AE02.roa
File:                     351AC73E45AE11ECB857890EC4F9AE02.roa (raw, json)
Hash identifier:          FQ+fRqR/UsaUvYzEF/0X3CUOi1fWkGBVnjU3jp4LUsY=
Subject key identifier:   0D:5E:89:16:02:27:62:A3:5E:D6:68:19:C4:E0:81:6F:40:72:E5:10
Certificate issuer:       /CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Certificate serial:       0342
Authority key identifier: CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/351AC73E45AE11ECB857890EC4F9AE02.roa
Signing time:             Tue 05 Sep 2023 01:32:08 +0000
ROA not before:           Tue 05 Sep 2023 01:32:08 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     13335
IP address blocks:        103.73.84.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl
                          rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 834 (0x342)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
        Validity
            Not Before: Sep  5 01:32:08 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64f68518-f4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:88:48:e0:90:f3:b7:f5:5f:9a:44:19:4a:eb:
                    c7:83:8a:1e:4a:e9:34:92:a5:91:23:e4:62:e0:d2:
                    4f:6f:14:30:d7:d6:cd:f3:76:2c:c2:b6:2f:35:98:
                    b7:96:a0:cc:2c:67:3a:9d:23:6c:a4:16:cf:f7:59:
                    99:24:55:e3:8d:9d:d3:31:c9:29:88:bb:d5:86:af:
                    7a:b2:b1:e4:2e:95:4c:3e:c2:e7:a8:4a:36:a8:9c:
                    b7:ca:1c:ce:28:ce:92:2f:83:a2:ae:6e:cd:58:65:
                    84:8d:20:02:91:a4:4d:3d:3b:da:2b:16:f8:36:14:
                    48:52:b2:c0:b6:48:f4:69:2a:7e:99:3e:3f:07:b0:
                    3d:4b:51:2e:d9:22:67:ac:1a:d8:18:2b:4c:87:39:
                    39:00:fd:b5:56:31:99:8c:be:07:68:59:19:59:12:
                    c3:87:6f:e8:ae:e0:ca:5f:11:00:dc:99:f4:98:81:
                    c2:f9:96:2d:c9:42:78:51:60:ed:7e:33:69:07:3f:
                    76:1f:db:4f:a3:ea:4e:2a:1e:6c:a1:d1:6a:46:b6:
                    88:5e:99:1c:e4:cc:bb:44:d5:14:27:cd:c3:6e:5a:
                    a9:11:d6:55:95:61:69:eb:c8:27:45:e0:65:3f:84:
                    82:50:5f:9d:a2:9c:90:49:79:71:c7:c6:9e:39:4d:
                    ee:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5E:89:16:02:27:62:A3:5E:D6:68:19:C4:E0:81:6F:40:72:E5:10
            X509v3 Authority Key Identifier:
                keyid:CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/351AC73E45AE11ECB857890EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:76:f9:5f:0d:5b:66:8d:b9:6a:00:61:60:95:a4:b7:4d:1b:
         f8:a1:ac:c1:da:28:30:dc:72:df:95:42:52:f5:83:d6:74:06:
         2a:ff:e3:a6:27:55:7c:0d:cd:6a:98:e0:2a:60:c0:19:f7:4e:
         c8:10:49:56:8f:24:2c:5c:7c:00:46:b9:da:d9:21:d3:bf:16:
         7b:09:6f:63:d7:6f:f1:44:83:f6:f5:29:6a:7d:e4:d7:33:c7:
         e2:f6:fc:d4:9f:a1:69:51:12:9d:dd:be:0d:e2:f3:2f:1b:0f:
         37:ac:a4:f5:12:9a:58:e5:da:bc:38:4d:7d:3a:b9:7b:2e:52:
         fd:67:3e:78:c4:8a:25:73:e7:81:dd:95:05:38:58:0a:b0:03:
         b2:a6:7c:0b:3c:2b:0c:86:47:75:c2:d2:1d:20:84:a4:54:af:
         f6:e0:c2:d2:e9:13:5e:57:63:08:95:f9:8e:79:a8:5f:25:9e:
         64:04:59:e3:47:35:d9:22:c6:ac:e2:e4:28:a1:1e:f6:21:d4:
         3c:d7:f6:a6:37:27:7d:6d:6d:3f:f2:12:41:72:64:f8:3c:91:
         7e:ff:1a:89:d9:4c:f0:da:2b:45:7b:49:1f:86:3c:49:85:5a:
         01:af:51:77:d4:15:fe:d8:92:a4:6f:85:91:41:4d:67:93:ca:
         f4:09:bc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 03:51:29 2024 by rpki-client on console-ams.rpki-client.org