Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/0E49D1E024CC11EFB113A27BC4F9AE02.roa
File:                     0E49D1E024CC11EFB113A27BC4F9AE02.roa (raw, json)
Hash identifier:          NR/+YgQkm7A4mmhSV+xz9O4OYp+ZS9oT3gP6zL7oedM=
Subject key identifier:   C6:EC:59:94:DB:EE:A9:54:70:61:BB:FB:24:C3:7A:BF:4B:47:CD:67
Certificate issuer:       /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Certificate serial:       51
Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/0E49D1E024CC11EFB113A27BC4F9AE02.roa
Signing time:             Wed 09 Oct 2024 06:20:23 +0000
ROA not before:           Wed 09 Oct 2024 06:20:23 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     137268
IP address blocks:        103.55.52.0/24 maxlen: 24
                          103.55.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
                          rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
        Validity
            Not Before: Oct  9 06:20:23 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=670620a6-97ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fe:59:e6:2e:2b:7a:7d:6e:38:af:93:f7:89:
                    dc:d0:5d:70:2e:54:a6:d9:46:b8:aa:e9:80:bc:12:
                    15:7f:32:b1:b3:81:95:3c:43:44:e0:a2:eb:6c:25:
                    3e:bd:a2:8b:e6:9b:0a:ca:fc:89:c0:73:ee:f5:c5:
                    c6:d8:c3:6d:45:1d:d1:b6:90:06:60:a7:52:03:bb:
                    a4:b7:ba:39:44:58:6c:db:72:16:84:82:1e:c1:6e:
                    e0:f8:91:40:82:f5:30:bf:39:e0:b4:66:0a:4d:87:
                    ce:79:86:3c:a9:c1:fb:4a:89:84:a3:85:3f:4a:69:
                    fd:38:45:eb:75:22:ba:72:96:6a:34:9c:f4:3d:9f:
                    17:a3:08:62:49:a8:27:72:d2:85:b7:63:47:aa:81:
                    ca:2a:d5:76:25:bd:b0:c3:2b:04:74:67:d1:2a:b8:
                    45:fb:1c:fc:82:9d:c2:b3:c6:f9:6b:fe:53:4f:3e:
                    b7:83:10:38:b7:5c:06:90:80:b7:9e:60:86:3d:1f:
                    f9:69:25:9d:39:ed:18:7c:10:62:02:c8:ce:f0:53:
                    0f:4a:72:c8:48:50:3c:62:6d:35:24:7c:7e:cd:28:
                    2e:ce:e8:3f:68:86:16:ea:dd:99:5c:a7:33:45:7f:
                    ae:65:de:94:39:af:60:ed:39:d0:8e:a6:71:f7:40:
                    56:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EC:59:94:DB:EE:A9:54:70:61:BB:FB:24:C3:7A:BF:4B:47:CD:67
            X509v3 Authority Key Identifier:
                keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/0E49D1E024CC11EFB113A27BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:d0:ad:52:aa:3d:73:5d:4a:21:fa:b4:43:1d:f0:a8:c8:8d:
         1d:a9:74:d3:02:c0:6d:b8:6e:12:85:bd:a9:6f:46:d1:54:26:
         77:8c:14:5b:70:48:40:5b:a9:b0:84:46:e8:4c:d1:2c:63:06:
         73:ce:93:f7:2a:3e:2f:46:f2:b0:ba:fc:c8:db:ab:36:9f:37:
         77:4b:8f:d8:c4:2d:16:3f:7d:ac:45:ee:62:8b:5f:2e:af:1d:
         d3:c7:fe:63:48:4e:0c:3a:29:47:36:a3:af:cf:37:a7:42:84:
         e7:27:08:fe:68:e1:9b:43:fc:8e:df:6f:31:da:65:ab:3f:6b:
         fa:92:7f:da:3c:a3:50:4b:92:d9:f4:43:63:09:b9:43:78:f3:
         7a:db:83:65:f7:71:f1:aa:75:3a:64:ca:11:ea:d5:ff:a7:2e:
         59:58:c7:27:0b:1f:7c:70:1d:aa:c5:cc:b9:87:c5:73:a7:4d:
         af:77:8c:27:93:83:d8:e7:9e:10:64:d2:11:f5:83:89:1f:f4:
         9f:57:f9:ae:1e:e6:14:62:a4:77:2f:b0:a0:cd:de:35:31:55:
         7d:79:a7:11:1d:67:7b:69:a9:63:64:80:1d:a7:8f:a8:c1:eb:
         a7:39:26:5e:21:1a:35:4e:6c:e5:e4:7c:77:ab:fe:c6:25:5f:
         cc:a4:94:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:22 2024 by rpki-client on console-ams.rpki-client.org