Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/837821AA9B0811EDB5FDAF75C4F9AE02.roa
File:                     837821AA9B0811EDB5FDAF75C4F9AE02.roa (raw, json)
Hash identifier:          6R58DKIp51BCGrrBGGy8fHU/1OuIVYOlSAZ5sOx4nqs=
Subject key identifier:   5D:47:09:A0:FB:C8:DE:15:3B:FB:ED:DE:11:2D:8E:E2:C0:FF:FC:99
Certificate issuer:       /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
Certificate serial:       0A0F
Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/837821AA9B0811EDB5FDAF75C4F9AE02.roa
Signing time:             Wed 06 Sep 2023 20:07:48 +0000
ROA not before:           Wed 06 Sep 2023 20:07:48 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     15083
IP address blocks:        103.101.50.0/24 maxlen: 24
                          103.101.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl
                          rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2575 (0xa0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
        Validity
            Not Before: Sep  6 20:07:48 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64f8dc14-b538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:82:c6:4e:a9:9f:2b:bc:25:34:d8:a1:5b:c8:
                    69:46:67:2a:64:c2:48:c7:6d:2d:47:de:72:bd:fd:
                    bf:e9:74:93:b5:19:19:0e:2e:8b:aa:ca:62:e4:ab:
                    1d:5d:60:ff:f9:cc:10:66:6e:f8:d0:f1:73:c6:56:
                    de:eb:91:50:84:8b:a3:a7:c8:2d:db:21:95:ee:6f:
                    1f:77:f0:63:86:de:e1:9d:ac:b8:d6:74:d5:36:8c:
                    72:b4:b1:21:99:b3:a7:bc:40:13:a5:ae:b5:d6:55:
                    08:99:70:4b:d3:e5:a4:72:ad:c4:37:b7:20:c3:2a:
                    22:0c:60:62:05:55:67:ad:8f:7e:a7:f0:44:1d:dc:
                    c3:85:27:d6:57:9a:9f:e4:36:3b:06:ea:27:0b:58:
                    ad:fd:59:48:cb:ac:f7:6f:8d:cf:57:c6:f1:00:91:
                    05:a0:e0:4d:39:d5:7b:10:8f:c1:a1:bc:de:8a:f7:
                    cf:50:c1:aa:73:32:57:4a:d3:23:97:b3:20:5d:b3:
                    8a:c6:8f:c6:62:3b:8d:19:de:99:7c:90:19:73:db:
                    74:f5:b5:95:1c:c7:a2:6d:4e:13:f8:4b:a4:e0:61:
                    e0:22:ec:92:66:ab:9d:51:5a:13:24:0c:7c:83:72:
                    a3:1a:e0:44:08:73:e4:3b:c3:4d:a7:f8:ec:76:ea:
                    d9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:47:09:A0:FB:C8:DE:15:3B:FB:ED:DE:11:2D:8E:E2:C0:FF:FC:99
            X509v3 Authority Key Identifier:
                keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/837821AA9B0811EDB5FDAF75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:09:48:67:cf:ad:09:6a:a6:f2:c1:f2:51:3f:ed:91:b8:19:
         98:b6:4c:db:43:f6:a8:41:7c:4a:db:3d:32:7f:55:b8:1c:f3:
         ce:ff:0c:21:f5:f1:72:ca:ec:ee:d0:c8:77:db:33:72:85:e5:
         5c:bc:9d:58:85:91:0b:3f:df:bd:8f:21:54:f3:41:93:e1:95:
         d9:cd:1d:a9:97:0d:7f:69:55:12:b1:bd:8f:ce:bb:17:12:ff:
         4b:cf:98:df:3a:03:66:11:85:96:d3:08:24:3c:1e:3d:d8:ae:
         56:64:e9:1e:c8:e4:ef:32:af:9e:90:63:3f:c0:b3:8a:a2:90:
         d5:3a:54:64:56:b3:4d:9d:95:5b:d6:15:a0:48:6e:92:29:d4:
         2a:69:11:f5:24:ef:13:36:10:32:95:95:3f:c6:a5:a8:b2:8a:
         6e:22:10:07:db:88:72:56:dc:b0:47:cf:97:cc:22:53:01:ce:
         ec:7c:ea:43:4b:fd:a4:ae:06:5a:d3:84:ee:69:3f:3d:a1:57:
         3b:9f:fa:a2:52:29:1b:c1:bf:e5:63:ce:27:ad:46:4c:47:7a:
         0d:fb:97:00:f5:5a:41:0e:4f:72:77:ee:58:57:5e:e2:a9:bb:
         93:cf:cd:c8:e2:3d:d3:57:83:4a:9d:d6:db:f5:df:64:29:65:
         6a:bd:98:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:34:52 2024 by rpki-client on console-ams.rpki-client.org