Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/AE3FB66CC0A711EE97A2E984C4F9AE02.roa
File:                     AE3FB66CC0A711EE97A2E984C4F9AE02.roa (raw, json)
Hash identifier:          8WuVLtXpW7cGua7WEy7sq6GUNZjMo1nKjeIaIqPgw3Q=
Subject key identifier:   25:0C:24:21:A7:29:F0:48:08:1F:B1:D3:77:7E:62:C2:43:FA:C9:91
Certificate issuer:       /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
Certificate serial:       03B1
Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/AE3FB66CC0A711EE97A2E984C4F9AE02.roa
Signing time:             Thu 15 Feb 2024 02:14:32 +0000
ROA not before:           Thu 15 Feb 2024 02:14:32 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     149000
IP address blocks:        103.176.3.0/24 maxlen: 24
                          2001:df0:740::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl
                          rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:28:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 945 (0x3b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
        Validity
            Not Before: Feb 15 02:14:32 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65cd7388-dba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:48:fe:e7:e2:99:77:98:56:f2:d3:1c:de:
                    8e:3b:dc:7a:4d:8c:a8:4c:af:a7:36:ad:9e:bc:91:
                    de:17:8b:c5:e0:e5:63:60:54:1c:5a:0d:4c:e7:3e:
                    67:88:a8:53:51:34:02:7c:2d:7c:ab:bb:20:66:13:
                    f7:77:51:19:18:a8:10:6e:f7:57:b7:54:02:84:1d:
                    06:34:3f:1b:66:b6:53:cc:dc:fd:ac:8d:a0:78:f2:
                    93:60:81:74:f4:f3:34:45:19:46:4b:82:f8:2f:a1:
                    f7:c8:15:f8:04:c2:e9:17:d6:c7:c3:b6:eb:5f:cf:
                    55:23:2f:95:13:b0:36:fe:c1:f0:f5:2d:4b:b8:8f:
                    c3:02:02:97:1b:f4:d4:19:9f:60:e0:aa:cd:7a:87:
                    db:4c:ec:b3:68:0c:51:b0:c1:62:06:48:8b:fb:dc:
                    b2:67:1f:00:51:06:f8:2c:09:f2:94:44:05:b7:dc:
                    b4:5d:78:da:92:ec:22:8b:cb:9b:73:3e:f3:04:4b:
                    55:50:1c:22:38:eb:e5:50:f4:3d:02:14:56:43:9d:
                    72:20:b8:04:b8:a8:00:3d:20:f1:0d:ac:39:65:05:
                    b3:ce:a3:c4:e5:63:0b:2b:b2:cd:c2:01:a3:5f:06:
                    03:33:43:93:b5:b9:80:42:63:0c:de:47:7c:d4:59:
                    50:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0C:24:21:A7:29:F0:48:08:1F:B1:D3:77:7E:62:C2:43:FA:C9:91
            X509v3 Authority Key Identifier:
                keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/AE3FB66CC0A711EE97A2E984C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.3.0/24
                IPv6:
                  2001:df0:740::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:05:81:bc:87:f5:de:e9:cf:17:69:42:56:38:eb:10:b3:b5:
         78:54:25:c2:96:25:2e:66:49:b5:75:df:e0:1d:bd:f4:08:bb:
         5c:ab:d8:01:3a:10:f0:82:b1:5e:bb:c1:91:c1:b0:5e:4b:43:
         e1:3d:d8:c3:7a:34:64:e7:15:0e:a4:c6:b8:f1:3b:8c:ed:7d:
         89:79:22:08:44:3f:1c:c3:39:65:35:e2:84:08:ff:af:7c:3e:
         ac:9c:75:2d:ed:28:9e:96:e3:8f:04:f8:f5:d4:5b:d6:f8:f2:
         84:db:0e:10:72:fc:6b:e2:79:59:1d:8b:d9:ab:dc:da:e4:39:
         d8:5a:3c:a0:b8:a7:a3:1c:33:e3:d7:31:bf:38:f6:b7:a8:b6:
         d0:97:12:6d:a3:9f:af:85:f5:82:37:73:ef:8d:70:41:87:2a:
         3b:94:f9:ef:98:d0:cf:4a:f9:8d:a9:1d:17:52:ac:a8:59:62:
         0c:00:df:42:d8:1e:7b:9b:d9:09:27:e9:07:d8:18:aa:0a:2c:
         86:f0:ef:bc:8d:e0:17:5f:e3:1c:39:c4:3c:bc:1d:2d:d1:7b:
         db:d8:54:a8:4f:79:3f:ac:eb:8c:b6:af:09:b3:c3:c2:0e:1e:
         93:e2:36:fe:f7:ff:91:c8:9e:ec:37:cd:2a:f3:9d:52:6c:96:
         1a:1a:66:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:38:15 2024 by rpki-client on console-ams.rpki-client.org