Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/81D72348232B11EBB2348B23C4F9AE02.roa
File:                     81D72348232B11EBB2348B23C4F9AE02.roa (raw, json)
Hash identifier:          X9OisaOkwt/5KjenBaaHdfiXZFZsev8q5m2QettMK0Y=
Subject key identifier:   AB:6B:97:7A:9F:79:6B:48:B2:DC:CA:E0:15:49:9A:A3:17:D4:0A:E2
Certificate issuer:       /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Certificate serial:       062D
Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/81D72348232B11EBB2348B23C4F9AE02.roa
Signing time:             Wed 20 Sep 2023 22:40:44 +0000
ROA not before:           Wed 20 Sep 2023 22:40:44 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     137443
IP address blocks:        103.153.100.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
                          rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 23:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1581 (0x62d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
        Validity
            Not Before: Sep 20 22:40:44 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=650b74ec-a58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:15:2c:9a:2e:9d:a9:9b:8d:b4:00:92:95:07:
                    91:9e:e1:eb:c7:8a:46:5a:4a:be:5c:00:50:68:1b:
                    d7:ca:7a:6c:79:57:10:0a:8a:9a:18:33:62:37:ea:
                    11:c0:4f:a2:54:3d:b0:ee:55:d9:00:36:74:cb:e7:
                    19:18:8b:95:ca:9f:cb:40:c4:a1:de:5b:a3:e8:05:
                    c0:e6:7a:77:37:bf:88:42:0a:77:d5:ef:e7:6b:cd:
                    fa:9e:e4:fd:b8:3a:de:42:0e:f9:04:f2:63:8e:b2:
                    d3:4e:d9:44:24:e2:f9:f8:8b:f5:c1:9d:a0:45:5e:
                    d9:7e:c1:9e:ab:ed:ff:ad:b5:23:ca:0e:e3:84:9d:
                    22:e1:2b:45:56:01:e5:33:48:5f:fc:df:12:85:fc:
                    49:34:f9:01:25:a6:f5:1b:fe:05:e9:68:2a:af:6c:
                    e4:a6:af:cf:2b:bc:8d:8a:8f:8c:e6:c3:2e:5e:28:
                    8f:d4:d3:ff:78:b5:8e:2d:13:93:f3:d7:f3:b2:b7:
                    61:b8:49:92:a0:a3:48:35:08:61:fd:30:06:a5:93:
                    32:a0:af:60:55:53:33:ec:0d:ba:99:f2:79:7e:88:
                    7b:9c:b0:5e:99:a1:70:7d:ed:b8:00:4e:9f:98:c5:
                    7a:7c:2f:83:9f:e0:90:a7:69:32:36:f5:3f:01:85:
                    af:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6B:97:7A:9F:79:6B:48:B2:DC:CA:E0:15:49:9A:A3:17:D4:0A:E2
            X509v3 Authority Key Identifier:
                keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/81D72348232B11EBB2348B23C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:1f:7f:14:46:5c:ab:f4:df:f7:d1:3b:e0:d2:36:8e:47:08:
         03:03:c7:c3:37:b9:31:de:38:1e:67:56:25:af:72:f7:c3:37:
         b2:de:7e:f2:64:36:07:10:14:03:71:62:04:6b:f7:a2:57:a0:
         1e:28:14:70:78:15:64:54:2b:3f:f8:fe:be:92:62:88:99:94:
         af:df:3c:9f:05:ba:45:e1:bd:ea:74:19:2d:e2:e7:e6:7c:ab:
         50:4b:d3:b0:46:43:5a:7d:a0:b2:66:93:dc:91:5e:1e:b8:e5:
         e1:58:48:29:3b:17:07:f3:e2:c0:50:2d:96:16:b4:6a:94:4a:
         f9:a0:8b:f5:0f:51:ec:03:12:5c:20:4d:44:1c:39:a7:47:68:
         48:43:3e:e9:0b:39:75:41:be:e8:ec:25:9f:e2:f4:ac:33:b3:
         e8:0e:54:49:35:e5:ed:81:cc:61:b1:ba:8d:aa:0f:03:e4:fb:
         5a:48:a4:d9:06:06:08:17:f5:14:e3:3d:67:ce:28:40:05:2b:
         91:d4:72:7a:fd:c5:7d:3e:18:cd:24:25:eb:d1:43:31:da:82:
         70:ec:18:3f:de:b8:2c:b8:35:1b:4f:92:44:3c:6d:ab:1d:80:
         26:bc:52:a4:df:02:85:08:bb:e9:de:64:07:6e:08:ea:77:aa:
         cd:54:4e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:01:31 2024 by rpki-client on console-ams.rpki-client.org