Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/837821AA9B0811EDB5FDAF75C4F9AE02.roa
File:                     837821AA9B0811EDB5FDAF75C4F9AE02.roa (raw, json)
Hash identifier:          kTlw3wh1lAf36RxrCeqt67ctmc2qb6ZS1z3/jQIhcLU=
Subject key identifier:   AD:63:DA:3E:10:BC:9F:A9:03:CF:F7:29:85:ED:8A:E6:64:30:CE:7E
Certificate issuer:       /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
Certificate serial:       0AD0
Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/837821AA9B0811EDB5FDAF75C4F9AE02.roa
Signing time:             Tue 10 Sep 2024 20:28:44 +0000
ROA not before:           Tue 10 Sep 2024 20:28:44 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     15083
IP address blocks:        103.101.50.0/24 maxlen: 24
                          103.101.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl
                          rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:05:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2768 (0xad0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
        Validity
            Not Before: Sep 10 20:28:44 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66e0abfb-3bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2b:1f:b4:42:ac:64:c6:eb:e2:2f:c3:7d:ad:
                    10:0c:97:02:14:ac:1e:0b:21:39:9c:db:09:98:10:
                    27:b9:20:20:92:22:7f:df:79:ca:f5:66:4c:e5:4b:
                    12:4f:71:08:b2:ce:5d:be:60:74:ee:c4:b4:d6:20:
                    d3:e9:f0:65:d9:38:69:4d:6e:51:f7:00:17:de:b2:
                    1f:29:4a:1b:a4:92:73:64:ed:0e:b5:4f:c7:41:78:
                    f6:ab:2b:6d:d5:07:50:82:02:1a:59:88:67:7e:bf:
                    a5:c1:a8:10:34:6e:d8:27:31:da:45:4b:79:cc:89:
                    0c:c3:b2:fe:03:2a:73:06:f9:e3:ad:8c:1e:28:86:
                    63:c2:57:98:91:a5:28:29:c3:e9:ae:1d:94:06:fe:
                    04:7d:05:cf:d1:58:6c:21:97:01:e3:f0:a0:bf:ac:
                    a7:c9:0d:c8:0d:c8:9a:1f:13:35:1e:81:63:b9:ad:
                    7a:7a:dd:0d:3f:93:a3:e0:30:77:82:6e:8f:96:86:
                    bc:6f:ae:96:ec:c2:f3:5d:e5:a9:cb:3b:56:d1:83:
                    73:de:89:c7:ad:1b:72:7b:b1:d5:e9:11:0a:a0:9f:
                    75:91:b2:05:24:1d:90:07:06:8f:f9:81:f3:2c:41:
                    d9:95:bc:29:6f:f2:81:d7:c2:9b:3a:2b:72:b9:27:
                    40:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:63:DA:3E:10:BC:9F:A9:03:CF:F7:29:85:ED:8A:E6:64:30:CE:7E
            X509v3 Authority Key Identifier:
                keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/837821AA9B0811EDB5FDAF75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:ce:79:b8:f8:d8:cb:8f:4e:88:38:bb:0f:ba:ef:b2:fa:c2:
         ea:4d:48:a2:6a:77:83:30:41:3e:86:00:e6:fa:d7:85:47:76:
         7a:82:f0:fb:9f:58:1c:c3:cc:71:3f:2d:8d:dd:9e:75:4f:15:
         9e:3b:0d:dc:06:df:68:67:1e:ad:36:fc:d1:8c:59:62:a4:96:
         6a:f6:68:42:5c:d8:2c:26:b9:7a:62:b5:94:52:ba:3e:c3:b6:
         5e:36:92:98:5f:15:46:e2:a3:50:de:ec:a4:da:32:a1:a1:73:
         87:95:95:9f:57:52:b2:43:36:b8:dc:e8:45:82:91:30:5c:b0:
         4d:43:62:6d:d3:c3:23:b1:cf:35:6e:ba:e5:2e:05:6b:d9:f1:
         2c:6c:43:86:15:a6:db:a0:db:58:95:b5:c8:30:61:f2:5d:ce:
         79:75:e6:45:16:50:56:84:6e:fd:3c:57:f4:05:d1:61:4a:0c:
         14:d9:77:d1:f8:8b:57:46:20:de:19:61:d4:73:82:28:ed:06:
         08:4f:31:f4:45:2d:51:33:0f:cd:4b:94:db:61:ec:aa:9b:96:
         ce:ab:d7:e4:cb:50:08:84:87:37:62:da:c5:64:af:ed:45:db:
         40:84:09:a0:0e:e0:aa:f1:33:c6:d9:0f:87:83:6a:a0:e0:a5:
         54:56:a0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:34:57 2024 by rpki-client on console-ams.rpki-client.org