Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/51CC97DE72D711ED95179B5EC4F9AE02.roa
File:                     51CC97DE72D711ED95179B5EC4F9AE02.roa (raw, json)
Hash identifier:          rrPEmKXiVA4a8WLwDvdoL75de2L3H/mip5CkrpQQib0=
Subject key identifier:   60:0D:2D:91:B8:E7:53:DB:BE:85:C2:DF:4A:0D:61:B7:07:08:87:87
Certificate issuer:       /CN=A91C3ED8/serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14
Certificate serial:       CD
Authority key identifier: 1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/51CC97DE72D711ED95179B5EC4F9AE02.roa
Signing time:             Fri 29 Dec 2023 04:45:53 +0000
ROA not before:           Fri 29 Dec 2023 04:45:53 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     150459
IP address blocks:        103.47.182.0/23 maxlen: 23
                          103.47.182.0/24 maxlen: 24
                          103.47.183.0/24 maxlen: 24
                          2400:c6e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 05:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3ED8/serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14
        Validity
            Not Before: Dec 29 04:45:53 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658e4f00-3ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b4:4d:02:09:63:c8:d0:6e:6d:8f:bc:78:4b:
                    07:c7:59:2b:0e:24:0e:81:df:b9:46:4b:42:8d:17:
                    64:43:e6:42:46:1b:c0:ec:44:3f:48:b7:c6:31:ac:
                    91:c8:50:3a:c2:5e:0d:a4:61:99:17:72:78:16:1e:
                    9b:36:89:ba:1d:af:a7:40:85:de:e1:5b:be:ef:de:
                    7f:40:62:58:04:4e:b2:81:d9:0d:94:12:fc:03:34:
                    ed:1a:52:ef:6e:73:30:ad:80:45:96:69:89:2e:e5:
                    49:ea:31:95:d1:3f:db:f0:95:b9:69:da:6f:aa:c4:
                    72:3e:ca:69:b6:c1:f5:08:9f:52:99:4f:bc:6d:59:
                    64:b5:b2:56:cf:9f:24:bb:0d:ae:05:6e:a4:48:a4:
                    1a:76:c6:e8:4c:06:39:91:80:bc:26:3e:bb:30:cd:
                    49:8c:71:13:b7:ec:7e:79:35:b3:ba:8b:3f:6c:b6:
                    cd:6d:b0:7a:8e:56:fd:a9:f8:19:76:b5:2f:12:e9:
                    fc:fd:dd:dd:64:a1:03:4e:e4:57:09:7c:84:11:37:
                    f4:dd:3a:34:33:98:f8:35:7c:6e:d1:90:50:73:56:
                    e2:72:a7:77:d6:12:74:67:e0:e4:96:03:fc:4a:e9:
                    f1:e9:25:81:d4:a0:17:5c:9c:80:f6:9a:15:47:85:
                    96:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0D:2D:91:B8:E7:53:DB:BE:85:C2:DF:4A:0D:61:B7:07:08:87:87
            X509v3 Authority Key Identifier:
                keyid:1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/51CC97DE72D711ED95179B5EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.182.0/23
                IPv6:
                  2400:c6e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:5e:82:77:14:ad:7b:89:e8:84:4b:ae:47:a9:48:ba:14:e7:
         15:35:8e:8a:cc:7b:f7:9e:f1:20:15:7a:02:1a:34:96:58:7a:
         3a:a0:97:58:16:78:4d:7e:85:9a:60:db:02:9b:3a:e1:0f:f8:
         9b:90:a0:67:54:7a:61:4f:c8:ac:0b:ab:b8:68:03:ad:de:40:
         a8:28:3d:70:f8:9c:f5:1a:99:9c:de:5d:93:d1:ce:1f:cd:9c:
         67:67:d4:59:d0:52:86:d3:18:48:c9:9b:c4:1a:ad:b6:f7:61:
         ff:f7:fa:e4:ed:79:e9:d2:5c:38:5d:b2:47:13:ff:5a:6f:3c:
         53:04:4f:1f:75:2b:2f:a5:d5:2d:f3:da:2b:7a:00:3c:7f:39:
         7d:f6:08:a3:22:6b:97:14:b9:ac:e8:31:59:03:5a:b8:d0:83:
         35:82:c2:76:4e:49:08:57:77:e6:fb:e5:c7:ae:c1:6b:a2:09:
         5b:f8:d0:af:37:ac:90:42:67:b4:31:16:f6:d8:65:7a:c5:75:
         69:bf:2a:b1:20:72:1c:e1:90:f5:9e:e3:a2:8b:07:83:88:89:
         48:dc:d8:1d:e4:9c:10:af:a3:30:d4:94:84:1c:6f:90:b6:af:
         2f:e3:1e:00:35:94:e7:97:96:68:20:27:e0:04:49:c8:47:76:
         47:ab:a7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 06:30:14 2024 by rpki-client on console-ams.rpki-client.org