Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/6135B1E2011B11EEBB26C24BC4F9AE02.roa
File:                     6135B1E2011B11EEBB26C24BC4F9AE02.roa (raw, json)
Hash identifier:          EMgw10msp56fFVqWWNcTVWdwyvIyUX9S86/d63PydTI=
Subject key identifier:   34:02:93:F8:13:E7:2F:E2:21:90:B4:3E:5E:E7:27:0D:92:B3:95:8E
Certificate issuer:       /CN=A91BB6DE/serialNumber=5AE6336939EA8F5EFB2A21E430673F80CCD5055A
Certificate serial:       9C
Authority key identifier: 5A:E6:33:69:39:EA:8F:5E:FB:2A:21:E4:30:67:3F:80:CC:D5:05:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuYzaTnqj177KiHkMGc_gMzVBVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/6135B1E2011B11EEBB26C24BC4F9AE02.roa
Signing time:             Wed 20 Dec 2023 23:34:42 +0000
ROA not before:           Wed 20 Dec 2023 23:34:42 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     150750
IP address blocks:        103.157.200.0/23 maxlen: 23
                          103.157.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.crl
                          rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuYzaTnqj177KiHkMGc_gMzVBVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB6DE/serialNumber=5AE6336939EA8F5EFB2A21E430673F80CCD5055A
        Validity
            Not Before: Dec 20 23:34:42 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65837a12-72a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:de:66:f5:c5:3b:94:c6:c5:52:cc:61:2e:cf:
                    b0:67:6d:a6:3d:ce:17:98:0e:62:e2:42:7c:69:c4:
                    53:90:52:a6:e0:02:2d:f4:35:9d:a9:1b:8a:71:5e:
                    f3:04:01:19:1d:64:b6:2c:28:c0:6b:8e:d1:c9:57:
                    dd:b6:c1:5f:76:35:bd:39:b1:57:18:08:e5:b5:d8:
                    55:09:ab:56:80:dc:b8:cb:64:9d:cc:a3:4d:26:fe:
                    08:de:b6:33:58:32:4e:c8:26:0c:f2:dd:dc:fc:74:
                    7e:7f:1d:20:32:06:c4:eb:78:a0:70:c7:3a:b7:d0:
                    d9:3b:b9:eb:82:f6:d1:b4:eb:c3:a8:04:f4:7a:7c:
                    09:53:a0:f7:34:b3:d8:d0:d9:5b:eb:36:46:76:5e:
                    f2:a7:88:49:47:c7:80:6d:57:d9:38:21:ad:cf:3c:
                    1b:81:99:e7:ff:47:16:d3:00:49:9d:12:60:5d:73:
                    d0:3a:7a:29:9f:ea:b3:6c:de:d6:b2:55:8e:eb:6f:
                    86:e4:d0:19:8e:94:7b:1c:09:a4:4a:55:4a:c9:39:
                    f9:7c:60:20:3c:0b:b1:4f:ff:d6:54:01:01:db:68:
                    fa:7c:21:81:2d:20:a2:77:06:60:c1:69:1d:79:aa:
                    42:ae:78:fb:ac:d7:c6:a9:54:5e:1e:38:d3:af:b6:
                    21:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:02:93:F8:13:E7:2F:E2:21:90:B4:3E:5E:E7:27:0D:92:B3:95:8E
            X509v3 Authority Key Identifier:
                keyid:5A:E6:33:69:39:EA:8F:5E:FB:2A:21:E4:30:67:3F:80:CC:D5:05:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuYzaTnqj177KiHkMGc_gMzVBVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/6135B1E2011B11EEBB26C24BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:0b:fe:c0:96:c8:75:3d:65:12:a3:4b:57:8a:35:97:c2:a4:
         03:d1:85:1a:b4:3d:97:e2:a2:26:d6:6a:39:57:6f:39:5f:37:
         34:2b:6a:6c:26:22:99:d4:91:8d:02:41:82:a0:14:e5:4e:92:
         3b:0b:7d:8a:f7:b4:f3:98:07:b5:af:1a:73:15:1b:2d:98:2a:
         49:fb:ab:08:90:15:07:cd:dd:df:5c:42:19:d2:de:c7:a1:0d:
         21:77:73:1e:70:0b:9f:ca:9f:43:dc:1f:86:c4:26:30:89:5e:
         76:a7:cb:ca:1c:8c:45:ce:23:83:2d:5b:a4:d3:a8:f6:f0:bf:
         0c:d2:2e:be:8b:76:6f:79:1d:1d:55:a7:91:11:ae:5c:33:c4:
         0e:cd:5b:d7:34:07:ea:b5:cf:7c:d5:4e:a2:62:a2:40:ca:16:
         ca:f3:de:80:9f:19:e1:52:83:35:53:e5:1a:c7:06:ac:45:ef:
         67:c6:15:8e:7d:52:b0:f1:ae:4d:f3:a2:c2:cf:35:5d:5f:ce:
         11:80:de:29:8b:b1:20:37:ba:77:d7:55:33:86:3c:95:d2:f8:
         69:ef:b0:c5:61:52:a2:a7:88:a8:e8:bd:49:73:6a:31:1b:91:
         e1:09:eb:6d:30:82:bd:98:46:4a:ea:5c:7d:38:88:c5:c9:59:
         b4:9e:ac:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:01:45 2024 by rpki-client on console-ams.rpki-client.org