Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/3CC77D02EE8811EA9225690DC4F9AE02.roa
File:                     3CC77D02EE8811EA9225690DC4F9AE02.roa (raw, json)
Hash identifier:          Utfl7NMgZDPAo7Ap86JGiQ0omQLnscWYFE5jxI0jIYI=
Subject key identifier:   21:E0:3F:AA:E5:6A:5E:98:23:2A:D1:BB:7F:FF:57:E8:35:F2:CB:88
Certificate issuer:       /CN=A91D6503/serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA
Certificate serial:       069C
Authority key identifier: 93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/3CC77D02EE8811EA9225690DC4F9AE02.roa
Signing time:             Fri 08 Sep 2023 21:48:56 +0000
ROA not before:           Fri 08 Sep 2023 21:48:56 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     132890
IP address blocks:        103.38.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl
                          rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1692 (0x69c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6503/serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA
        Validity
            Not Before: Sep  8 21:48:56 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64fb96c7-2cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e4:4b:ff:b5:11:6c:e5:92:55:1b:ee:25:29:
                    3d:e6:5d:f6:bd:b4:a5:8c:42:94:47:86:c0:95:70:
                    d3:bc:70:bf:98:29:37:aa:e2:aa:c1:29:dd:ff:61:
                    11:43:ab:21:3b:62:02:25:f6:e3:f0:94:38:0f:90:
                    7d:a9:4a:1a:7c:ef:72:ab:aa:4a:4c:fc:a6:cf:e1:
                    d6:fa:ad:d1:a6:79:c0:97:ab:3c:b8:60:2c:55:af:
                    15:a8:b9:b0:79:15:b9:86:0c:e0:73:8b:d3:c2:78:
                    f3:4b:46:99:7d:36:2f:ca:eb:92:31:0b:e0:de:22:
                    63:84:2a:ad:16:a9:5d:51:a0:cf:04:50:80:37:df:
                    36:05:65:fe:e6:b7:ab:08:c5:18:b3:d3:6b:e3:da:
                    47:8c:a9:03:a5:40:09:d0:cf:d5:c4:c9:9b:de:b9:
                    c2:42:2b:05:5c:df:0b:52:1d:c2:86:7a:70:c6:90:
                    c4:e4:c1:74:2b:71:fe:87:10:c0:cf:55:aa:94:e6:
                    72:7d:9d:2b:b5:4e:d9:92:00:4b:b0:b0:9c:b1:97:
                    49:8f:20:88:7d:dd:9e:35:8c:cb:00:ee:cb:ee:5c:
                    da:40:d5:5d:31:92:5f:4c:f1:a0:ee:03:d3:f7:a6:
                    8e:00:ec:6d:a3:73:d6:6e:8b:74:ac:e0:60:c9:d0:
                    83:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E0:3F:AA:E5:6A:5E:98:23:2A:D1:BB:7F:FF:57:E8:35:F2:CB:88
            X509v3 Authority Key Identifier:
                keyid:93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/3CC77D02EE8811EA9225690DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:f6:3a:a0:ea:2f:79:f4:b2:fd:90:93:93:bf:2d:c6:5e:84:
         a5:e1:e7:02:b4:45:03:b1:16:2e:02:00:a1:7f:b8:8a:2e:35:
         86:6e:5d:f6:cb:1e:8b:86:35:96:39:37:4f:30:8b:a9:40:50:
         34:0b:c3:bf:81:f7:80:ea:09:07:57:0c:a3:2f:19:a4:c2:d4:
         c2:90:be:98:c3:3b:0f:03:96:43:63:60:8c:d8:bf:08:d1:30:
         2f:a6:a7:cc:62:32:dc:d4:54:17:ac:33:61:a1:68:ef:f6:ec:
         13:66:71:8e:c2:35:aa:37:89:9e:a2:e8:b0:43:8f:b5:23:21:
         a1:cc:b2:4b:5e:78:18:46:54:68:9f:aa:c5:b1:66:66:58:65:
         6e:9b:6b:84:ae:4f:14:e8:5c:18:fc:d7:94:c7:50:b3:8a:38:
         cb:6e:f3:28:ce:7d:a4:a4:27:28:aa:67:40:33:82:89:f0:2f:
         89:3d:9f:3e:8a:70:0d:3d:af:c1:2d:a8:4a:ee:85:4b:9d:18:
         49:28:1e:70:f2:e7:e6:85:4f:c6:f2:f1:a8:84:36:80:82:45:
         74:98:1f:64:b0:65:02:c5:23:37:bf:12:8f:4a:a4:73:eb:3c:
         57:ad:43:9c:35:58:fd:74:ef:7f:a8:0a:06:52:34:b0:29:b7:
         b9:bd:85:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 23:48:42 2024 by rpki-client on console-fra.rpki-client.org