Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/35525B92845611EFB053C341C4F9AE02.roa
File:                     35525B92845611EFB053C341C4F9AE02.roa (raw, json)
Hash identifier:          WnW59BqD7yxG6xwyHVyCL3N6dDBnzflFu8yKPNbhrU4=
Subject key identifier:   F3:AF:AE:02:6A:3F:EC:8D:ED:13:A6:23:F0:79:87:73:86:9D:BF:C5
Certificate issuer:       /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
Certificate serial:       02
Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/35525B92845611EFB053C341C4F9AE02.roa
Signing time:             Mon 07 Oct 2024 02:45:27 +0000
ROA not before:           Mon 07 Oct 2024 02:45:27 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     140133
IP address blocks:        103.13.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl
                          rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 05:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
        Validity
            Not Before: Oct  7 02:45:27 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=67034b47-45af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cf:8e:23:93:4c:c3:1a:4a:bf:8c:40:64:d5:
                    65:d9:13:21:6e:8a:5f:be:02:8e:06:46:dc:4c:85:
                    2a:e5:a4:53:02:fd:79:d9:d9:75:e2:cb:1f:43:b4:
                    1e:76:0b:22:6f:e3:dc:e4:25:ad:96:89:0a:59:d6:
                    eb:17:72:80:8d:a3:89:49:95:92:87:e5:16:40:8a:
                    1a:12:ce:b4:1b:68:f6:ea:ee:12:87:b4:ec:cf:cc:
                    e1:a0:59:e9:70:b9:e8:cb:fb:44:14:b2:1e:c7:07:
                    e4:ca:58:d7:0e:2c:b9:e4:9b:22:a8:e2:85:95:e9:
                    0f:05:fb:22:11:13:01:db:48:2e:93:07:a9:6b:f8:
                    fd:34:0e:46:fd:66:74:c1:62:1c:39:ee:32:a4:85:
                    64:41:01:4c:49:4a:51:a4:1a:ad:3a:28:60:40:5f:
                    c4:ef:d4:f3:76:e9:8b:d8:8b:3f:b2:d1:ea:61:1e:
                    7f:6b:d4:0c:bd:e7:1c:a0:99:ba:0a:3a:0e:06:d1:
                    6c:da:ac:a2:91:d8:6c:b7:d8:51:14:bc:3c:bf:fa:
                    60:43:0e:4d:fb:29:3a:55:6e:aa:2c:ff:ac:ae:2d:
                    f7:ee:37:87:72:c4:1b:50:a2:fe:99:52:1e:d2:c7:
                    48:74:6e:f9:64:15:b9:78:6d:59:a5:60:0d:7e:46:
                    46:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AF:AE:02:6A:3F:EC:8D:ED:13:A6:23:F0:79:87:73:86:9D:BF:C5
            X509v3 Authority Key Identifier:
                keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/35525B92845611EFB053C341C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:0e:6a:69:6b:c8:e0:63:dc:49:8f:ee:c6:c4:a9:df:c7:40:
         81:10:63:77:08:26:5f:13:03:68:39:05:53:c9:49:d5:d2:49:
         ff:d9:49:67:0e:34:7c:e0:16:8b:ad:78:2a:ab:04:4c:85:d2:
         ab:7f:be:02:c4:13:58:89:43:65:dd:47:b4:b3:48:29:34:6e:
         04:78:ec:b9:a5:c8:bd:f5:89:75:7e:2b:98:fa:6a:e4:8c:6e:
         ba:c8:8e:34:c2:9c:47:7d:39:7e:89:62:a7:05:4c:cd:87:ea:
         22:03:fc:35:79:2b:67:c7:3e:7f:2d:ba:48:4a:3e:de:0c:ef:
         7b:d1:0d:5d:32:52:6e:6c:40:9e:47:60:2a:34:5f:4e:1c:a5:
         e9:e5:ec:ec:12:dc:5e:59:90:89:1e:d2:f4:3c:aa:22:33:1e:
         c6:3e:71:4d:e1:ad:60:0e:91:a8:5d:2d:2d:05:04:6f:a9:70:
         47:b4:70:58:80:4e:f0:d7:5c:e1:ef:6e:07:0e:32:e4:62:21:
         d1:8c:10:6b:65:53:21:95:0f:2b:db:25:83:19:35:53:5f:f7:
         ce:71:3e:02:73:1b:24:fb:6b:d8:72:ba:b3:46:8e:45:75:f6:
         15:43:87:76:7b:d0:83:74:e6:fb:77:b7:29:f3:24:37:7b:63:
         c8:e9:01:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 07:46:02 2024 by rpki-client on console-ams.rpki-client.org