Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/73BCF8A4641B11ED9E27D420C4F9AE02.roa
File:                     73BCF8A4641B11ED9E27D420C4F9AE02.roa (raw, json)
Hash identifier:          ZSAm4l7rWYgugHI9K+lTltwUh3Cs8sZTAhaT4+qTchI=
Subject key identifier:   D3:88:5D:4A:0C:3B:5C:88:52:C6:35:43:86:4B:8F:B0:33:33:AC:A8
Certificate issuer:       /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
Certificate serial:       01DC
Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/73BCF8A4641B11ED9E27D420C4F9AE02.roa
Signing time:             Sun 03 Nov 2024 01:54:56 +0000
ROA not before:           Sun 03 Nov 2024 01:54:56 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     63526
IP address blocks:        103.205.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
        Validity
            Not Before: Nov  3 01:54:56 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=6726d7f0-d2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:76:26:0a:b2:73:10:9c:c5:ed:fd:96:60:
                    8d:76:f7:6a:9c:61:f5:ce:63:4e:47:1d:22:46:b5:
                    c3:fd:05:a7:a1:bf:6e:0f:f4:59:28:8c:b8:c8:67:
                    fd:2f:d2:4e:fe:2f:cc:8a:d9:34:c2:0a:c2:2a:d8:
                    7d:a6:22:0c:48:96:fb:16:2d:94:68:29:eb:85:19:
                    d5:f7:3d:1c:63:9e:c1:b6:23:84:92:c6:a6:fd:32:
                    fe:a3:3e:9e:18:42:ff:fe:76:dd:d4:67:6e:aa:2f:
                    de:15:82:c2:d2:e6:33:51:46:fa:ef:e7:70:e1:b4:
                    87:30:fe:eb:ce:d4:27:f6:36:58:b7:03:0c:b9:af:
                    4d:12:1a:51:a7:99:f1:2b:7b:39:db:57:ab:b5:b2:
                    9e:12:5b:ae:97:d5:f4:3c:0c:90:5f:6a:82:b6:66:
                    ba:94:2a:c1:21:6f:97:68:43:c2:85:29:05:8d:b8:
                    64:69:bd:98:f5:fe:53:9b:07:0a:9a:a3:8f:e1:ca:
                    ee:9b:b9:bb:9e:7d:fd:3d:fa:b9:64:8e:fd:02:57:
                    91:f7:6c:55:a6:a5:17:74:19:1b:8c:c0:df:a3:e4:
                    3b:af:7e:ec:1b:1e:96:75:e7:67:72:cf:a7:ad:ff:
                    82:37:ea:17:f5:12:77:2f:c0:20:a4:15:b6:54:3c:
                    a3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:88:5D:4A:0C:3B:5C:88:52:C6:35:43:86:4B:8F:B0:33:33:AC:A8
            X509v3 Authority Key Identifier:
                keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/73BCF8A4641B11ED9E27D420C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:11:9d:81:35:0f:41:3b:64:3b:73:34:03:c6:57:4e:12:fa:
         6b:25:1b:86:bc:42:45:91:ec:4a:1c:74:42:eb:d1:15:e9:bd:
         3a:ae:a0:e5:02:3c:41:25:f9:43:a1:24:3b:64:b9:b6:49:a8:
         6a:46:f7:26:bd:90:75:a5:29:ff:2f:e3:a0:88:2e:58:84:42:
         c2:7f:36:76:75:42:ce:bf:64:91:36:b6:88:ea:28:e8:71:0f:
         f8:84:a2:68:19:18:5f:0f:e5:40:c9:c6:26:d0:5e:17:aa:05:
         d2:1c:73:00:41:95:df:a3:f2:80:fd:f9:38:f8:ef:e9:70:15:
         49:c3:3d:2f:42:0b:1e:80:fe:92:2d:d3:f7:f5:9e:82:9b:56:
         23:a4:cf:87:05:d1:ea:cf:4c:78:ce:07:c4:3b:b6:84:12:3d:
         58:b5:54:ed:a1:14:ba:7a:e7:0e:3e:23:ee:95:93:b0:de:e9:
         a2:e5:2e:9e:fe:16:da:e6:e0:20:df:0b:17:b7:0d:29:46:61:
         4e:85:9e:02:16:d8:87:17:f8:bf:09:79:2c:c8:8b:40:a2:ac:
         ed:fa:ce:62:81:dd:eb:66:b6:5f:37:60:28:db:a9:8a:33:03:
         20:28:9f:67:8f:25:5d:ad:a3:91:c1:5c:9f:09:50:8b:64:ed:
         53:da:6d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:49 2024 by rpki-client on console-ams.rpki-client.org