Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/AB8858D8772D11EF81C09464C4F9AE02.roa
File:                     AB8858D8772D11EF81C09464C4F9AE02.roa (raw, json)
Hash identifier:          6bihvvTuuH06Qtnv/WN867fRsCnf3ceF8njRfN4WAjY=
Subject key identifier:   CB:3C:00:08:EA:FD:80:39:CA:47:93:54:60:62:8C:78:26:39:20:DA
Certificate issuer:       /CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2
Certificate serial:       062A
Authority key identifier: C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/AB8858D8772D11EF81C09464C4F9AE02.roa
Signing time:             Fri 20 Sep 2024 08:53:48 +0000
ROA not before:           Fri 20 Sep 2024 08:53:48 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     135637
IP address blocks:        103.77.100.0/23 maxlen: 24
                          103.77.102.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl
                          rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Oct 2024 06:43:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1578 (0x62a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2
        Validity
            Not Before: Sep 20 08:53:48 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=66ed381c-7ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c1:9a:c0:17:c8:9c:5c:93:40:48:db:92:2d:
                    c6:cf:05:70:4c:59:34:12:7c:1b:7b:97:e1:89:91:
                    61:b3:b9:4c:99:db:11:14:92:ad:15:f8:82:29:22:
                    65:08:57:3f:a5:e5:6f:da:00:f7:8f:6c:88:fb:30:
                    59:3e:69:46:de:bc:de:4f:03:6c:12:0f:84:89:f8:
                    7d:2b:b4:69:92:1f:84:19:a4:2e:1f:68:90:b9:66:
                    b5:33:ee:9b:03:60:c5:75:83:3e:63:8d:cc:be:b9:
                    2a:eb:cc:d5:f1:5c:7f:f0:4f:97:74:d5:a3:30:87:
                    04:48:a3:f6:ca:9d:e3:e8:76:84:3c:d8:63:fc:c5:
                    8a:7a:ad:50:db:1d:7e:b3:8c:fc:08:98:4b:90:98:
                    0e:46:0b:fb:50:20:ca:53:64:1b:ed:0a:28:d4:b3:
                    bc:01:c8:99:7d:08:dc:9d:38:44:ac:27:e8:6b:20:
                    93:cd:b6:54:98:45:0b:0f:96:e1:a0:cd:8b:86:cf:
                    27:d5:3f:01:42:01:9f:36:e5:cf:55:83:a8:d1:82:
                    a3:7a:62:38:ba:ce:65:15:ab:0a:2e:71:e4:bf:1a:
                    cd:8b:b0:15:68:04:48:ea:a5:22:d3:81:74:1f:8c:
                    6b:3f:fd:78:30:81:75:1b:13:aa:87:61:66:9a:4e:
                    cb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3C:00:08:EA:FD:80:39:CA:47:93:54:60:62:8C:78:26:39:20:DA
            X509v3 Authority Key Identifier:
                keyid:C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/AB8858D8772D11EF81C09464C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:af:44:5f:11:8b:15:ef:5a:52:cb:0f:fe:95:7f:48:fe:29:
         4d:41:34:73:84:db:dc:8a:ec:77:68:ab:7c:da:2e:ae:3f:52:
         39:2d:35:f1:ab:e0:70:f3:d7:3d:8c:9a:47:b9:35:8c:3f:96:
         c0:6f:84:c4:8d:85:ec:ff:32:11:ef:ff:30:34:ab:0b:ff:11:
         33:f3:1b:28:44:c6:f5:88:47:d2:34:bf:c6:f3:12:28:2c:ba:
         27:4c:09:a3:66:22:a6:fc:56:b2:4f:6d:cc:f9:ab:fc:6e:cf:
         fc:c9:21:f2:1f:85:01:0b:e4:0c:d1:f9:35:34:d9:5a:86:ec:
         62:1c:e2:80:73:cc:c8:c5:51:08:52:15:17:da:91:fe:a0:11:
         c8:18:fe:dc:84:1e:bd:dc:b6:54:73:57:b7:e8:be:88:7a:ad:
         5b:9f:c7:53:42:66:a6:97:84:2c:d1:b7:bb:29:d8:78:26:71:
         f0:93:51:9a:2e:57:4e:1b:b6:0b:ce:00:18:bb:d7:fa:20:38:
         77:57:cb:60:b2:00:1a:a2:5e:9c:42:d7:c3:9f:31:3a:84:87:
         92:74:1c:7b:ee:fa:96:8e:51:71:be:4b:26:c5:8f:ed:f5:8f:
         1f:e0:43:42:f6:d8:2d:01:3b:d4:b8:62:74:ff:e2:ed:1c:b8:
         24:2a:f8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 12:04:17 2024 by rpki-client on console-ams.rpki-client.org