Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/A1732A0E24CA11EF93486579C4F9AE02.roa
File:                     A1732A0E24CA11EF93486579C4F9AE02.roa (raw, json)
Hash identifier:          mtFmrnqGfLHWu2Z4dfURxPhT/tNHf1PqV40ULrrFAGk=
Subject key identifier:   4D:8F:6F:5E:ED:4F:8B:CF:96:39:97:94:DC:51:A1:7B:69:43:B1:A3
Certificate issuer:       /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Certificate serial:       0B
Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/A1732A0E24CA11EF93486579C4F9AE02.roa
Signing time:             Fri 07 Jun 2024 12:48:19 +0000
ROA not before:           Fri 07 Jun 2024 12:48:19 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     139352
IP address blocks:        103.55.52.0/24 maxlen: 24
                          103.55.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
                          rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Sep 2024 04:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
        Validity
            Not Before: Jun  7 12:48:19 2024 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=66630193-8ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1f:81:8b:d1:3d:6a:07:5c:27:77:18:8a:e5:
                    5c:a8:58:a3:9c:cc:f3:70:5b:be:37:c0:36:94:ff:
                    e6:06:0c:66:47:00:05:2b:10:1a:91:2b:d7:0b:5c:
                    93:d1:9f:96:3b:7f:84:04:06:db:04:8c:5f:11:3f:
                    63:83:67:c5:0d:dd:ae:9a:02:00:67:f3:0a:0f:ef:
                    60:20:d2:1c:df:32:6a:6f:45:7d:85:93:bc:68:85:
                    22:e0:90:d9:5b:02:6d:68:b3:78:7a:41:c4:bd:60:
                    a6:ff:c3:2e:4f:b1:c6:75:df:dd:b2:61:bf:3c:f8:
                    ca:17:ec:58:b4:41:ce:7a:02:9e:71:90:f6:8d:13:
                    88:ed:cf:41:da:c0:7b:dc:ab:75:cc:d0:71:db:cb:
                    ed:a6:c9:8c:67:41:2a:3c:8a:63:96:d5:6a:e1:bc:
                    28:ea:b2:cf:52:d1:0f:03:35:b4:09:14:08:3a:e9:
                    75:90:0a:87:d7:69:74:60:f8:38:50:9f:97:49:7e:
                    d2:a3:99:8e:d3:93:30:90:ff:8d:60:c3:9b:b4:3a:
                    f1:fb:86:2e:26:b6:45:c4:23:91:57:4a:27:4d:eb:
                    f5:35:82:c3:8e:98:cc:ef:95:65:78:ed:84:8b:37:
                    08:5c:de:6b:50:e6:c1:48:5b:3e:0d:a7:e0:08:0d:
                    09:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8F:6F:5E:ED:4F:8B:CF:96:39:97:94:DC:51:A1:7B:69:43:B1:A3
            X509v3 Authority Key Identifier:
                keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/A1732A0E24CA11EF93486579C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:32:d8:59:b5:71:be:c1:d3:c3:9e:ad:f6:97:df:14:62:1b:
         c0:c4:70:55:9c:85:70:c9:09:73:45:d4:d4:ff:80:98:f4:f0:
         56:97:51:ec:b9:64:52:96:5e:94:34:d6:0d:09:61:63:78:04:
         c9:d4:04:af:60:bb:0b:33:db:7a:d4:d3:00:6f:7f:74:b3:d5:
         ce:47:cc:ca:7e:a6:d8:a1:06:57:98:9a:ef:89:a4:76:e9:ed:
         43:67:d9:ef:92:bc:eb:b7:a7:b0:6a:73:1d:4d:3d:b7:6d:9d:
         8f:29:5e:6c:2c:e9:1a:e2:55:40:80:6f:e0:ad:fa:f3:f2:43:
         bb:fa:88:d6:3b:ef:70:24:f2:18:02:8d:44:26:47:a2:ab:b6:
         9d:3e:d9:9f:af:44:53:a8:25:47:6a:ce:fd:4e:15:3e:6c:95:
         c8:7a:9f:3f:45:fc:2e:3a:8a:8e:ff:69:7f:69:1d:b3:19:f6:
         9c:f1:69:4a:fb:1a:7b:d0:ab:3c:a4:43:7b:53:1e:3d:ac:77:
         b7:06:7d:92:0e:e9:89:f3:d9:c0:e7:fd:4f:82:9c:1c:9d:07:
         4c:ee:28:d5:70:d7:bc:e6:87:a8:ed:e0:84:d5:f9:2f:fd:40:
         16:3d:aa:e2:bf:7d:20:3e:bd:f1:8f:f1:d0:32:ec:1f:ed:95:
         72:ac:64:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 08:12:29 2024 by rpki-client on console-ams.rpki-client.org