Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/AD797FA2F17E11EAA3CC597BC4F9AE02.roa
File:                     AD797FA2F17E11EAA3CC597BC4F9AE02.roa (raw, json)
Hash identifier:          l83Por6hOyQGHnJRjbOPWErATp3zYej63Ri9KjjPDGE=
Subject key identifier:   E3:A9:2F:24:18:D5:63:A3:FC:5C:A5:BC:E1:F1:89:09:72:C1:F3:C1
Certificate issuer:       /CN=A91D01AF/serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Certificate serial:       0681
Authority key identifier: 95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/AD797FA2F17E11EAA3CC597BC4F9AE02.roa
Signing time:             Sun 30 Jul 2023 21:58:48 +0000
ROA not before:           Sun 30 Jul 2023 21:58:48 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     134528
IP address blocks:        103.155.10.0/23 maxlen: 23
                          103.155.10.0/24 maxlen: 24
                          103.155.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl
                          rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1665 (0x681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D01AF/serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
        Validity
            Not Before: Jul 30 21:58:48 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64c6dd18-bad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:45:b0:84:92:1e:79:4f:f4:84:bd:f6:d3:dd:
                    80:80:8f:1c:12:7e:8d:96:b6:08:02:3c:0f:6a:41:
                    a9:3f:7e:aa:f8:7a:0d:9a:c5:e0:97:e7:a1:7f:4e:
                    1a:a2:30:5a:7c:cd:7d:07:f2:ba:8c:c0:bd:94:10:
                    b5:bc:c5:d8:a3:54:c3:8e:93:44:bc:d8:b5:22:fc:
                    b3:a9:fa:39:66:59:5d:1f:d8:2e:50:f8:77:0a:d3:
                    7d:eb:89:9c:6a:e1:98:11:4a:51:a4:fe:5a:67:72:
                    b0:11:4f:f3:bd:43:5b:c2:7f:7e:be:51:d2:0d:8d:
                    3b:aa:f0:e3:15:e8:e2:14:e2:0f:df:53:02:05:4b:
                    55:3a:e6:e9:a5:c2:be:4d:e7:8f:3a:6f:13:a3:46:
                    f5:f0:8e:02:90:39:54:32:46:2b:84:e2:9d:07:2b:
                    5c:3b:3d:64:6c:ef:3e:cb:e7:5f:f8:52:4f:33:f9:
                    88:30:c9:20:df:fc:8a:2f:05:e1:b3:96:15:d6:55:
                    42:57:1d:ea:fe:f7:4b:ce:03:b6:f0:d1:77:a1:4e:
                    04:21:ff:2b:64:85:93:76:e5:5a:02:db:05:60:32:
                    18:6b:38:bb:be:61:3b:94:8e:2a:ff:40:27:c6:53:
                    3d:99:c1:33:ca:28:0c:cb:8b:29:26:50:7a:a7:c6:
                    d5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A9:2F:24:18:D5:63:A3:FC:5C:A5:BC:E1:F1:89:09:72:C1:F3:C1
            X509v3 Authority Key Identifier:
                keyid:95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/AD797FA2F17E11EAA3CC597BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:18:55:3b:14:71:28:e3:18:2a:25:a9:02:ac:e6:a8:df:fc:
         dc:ce:1a:e1:10:61:77:ca:97:de:07:c8:bc:3e:97:ae:ad:fe:
         ff:db:92:03:73:6f:57:58:59:40:26:39:3f:c6:27:b8:29:20:
         e2:51:4c:25:1a:68:7d:aa:78:1c:cd:78:87:48:ea:27:57:cb:
         29:d9:2d:3a:b8:e5:14:52:29:ca:37:f1:f6:68:35:d1:30:2c:
         c5:dd:af:ea:b8:36:48:53:16:d2:9e:69:52:b4:f8:91:6d:11:
         45:6e:92:93:2e:1e:c8:80:9d:1d:40:98:4c:45:f6:04:ca:f6:
         e8:79:74:67:86:04:52:5d:c0:a7:b2:7d:e7:f1:d0:12:ad:ba:
         96:83:71:b6:93:1b:79:dd:21:38:e7:4f:be:af:fa:79:c3:de:
         18:b8:ac:cf:b3:42:8e:f8:2d:01:d7:3f:5d:e7:e5:3e:cc:c8:
         f1:68:b8:7d:3a:16:0b:d1:8e:52:db:01:3a:71:3e:d1:11:94:
         a0:84:c9:5c:50:73:6b:1e:f6:f8:33:95:94:ae:21:cb:ab:81:
         38:f7:3d:54:47:24:b2:2c:60:c0:52:42:e1:0e:27:73:e0:76:
         89:f2:2e:83:0d:9e:f0:0a:d6:42:78:4c:c0:2f:75:c1:ef:b2:
         c9:a3:a4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:19 2024 by rpki-client on console-fra.rpki-client.org