Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/A21435C410EB11ED9C882A38C4F9AE02.roa
File:                     A21435C410EB11ED9C882A38C4F9AE02.roa (raw, json)
Hash identifier:          5EF0iAN9JRHhE6nWZ8EPIuzzwX38JNzCJ2F94kB78lQ=
Subject key identifier:   54:90:D9:2D:E0:C0:F5:A6:81:5B:57:5A:4C:95:7D:49:49:3B:04:FA
Certificate issuer:       /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial:       0236
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/A21435C410EB11ED9C882A38C4F9AE02.roa
Signing time:             Mon 09 Oct 2023 02:34:41 +0000
ROA not before:           Mon 09 Oct 2023 02:34:41 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     139043
IP address blocks:        103.172.166.0/24 maxlen: 24
                          103.172.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
                          rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
        Validity
            Not Before: Oct  9 02:34:41 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=652366c1-0312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:81:c4:48:1a:05:3a:89:f0:83:10:50:60:94:
                    df:3b:b7:1f:40:6c:e7:b3:68:02:c0:a6:d9:8f:ef:
                    74:cf:9e:84:cb:21:54:39:91:0e:4a:18:cf:c4:75:
                    20:4e:9f:5a:0f:ca:4e:a0:4a:ff:f9:29:a6:4b:f4:
                    72:e2:2e:0d:4e:de:b4:e0:4c:44:35:4b:56:74:de:
                    de:fc:0d:2e:60:e6:53:70:7d:33:e8:a2:c7:05:c0:
                    97:5d:e0:6f:0a:4c:41:bf:6c:90:35:e4:c1:9d:7e:
                    2c:96:16:d0:aa:5a:14:fe:18:0b:52:a6:ff:a7:54:
                    3e:7b:7f:81:4b:99:fd:1f:21:0b:95:e3:d9:54:fa:
                    cc:6d:6a:84:b2:06:67:d0:03:42:3e:1d:f5:6c:ee:
                    88:ca:82:14:eb:32:b5:02:0b:a0:0f:f6:cf:49:da:
                    d3:89:46:40:cb:30:0c:7b:39:65:d5:ea:6f:49:27:
                    b2:15:f3:30:0e:fa:3a:72:30:70:98:f6:27:79:12:
                    f5:76:b1:b7:3a:03:14:4f:22:85:c7:02:b2:b2:27:
                    6b:04:1e:ff:15:0e:6f:e3:1e:66:71:be:4f:6d:be:
                    14:21:6e:14:d5:6f:63:c0:91:19:c0:fd:c8:88:9b:
                    95:e6:0a:7d:70:0d:85:e3:11:df:8c:89:7b:80:28:
                    44:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:90:D9:2D:E0:C0:F5:A6:81:5B:57:5A:4C:95:7D:49:49:3B:04:FA
            X509v3 Authority Key Identifier:
                keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/A21435C410EB11ED9C882A38C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:c4:0d:58:f1:04:ab:40:21:ff:c4:9e:56:11:90:04:ac:a7:
         89:da:e4:5c:f6:2f:8e:2b:ef:1f:74:56:d9:f1:d7:51:61:1f:
         aa:32:00:17:66:e0:c2:f7:85:d2:26:e3:b4:c5:ca:29:28:cb:
         e0:84:9a:fb:bf:9f:99:76:c5:3a:3f:b3:6c:25:ba:0b:72:a5:
         99:b9:29:3f:c1:2f:2c:46:a7:5e:15:cc:ef:d1:02:ac:a2:2e:
         43:cd:4c:c8:bb:a4:83:43:c6:24:69:dd:99:94:e2:4c:31:05:
         a3:e8:ff:a2:11:f2:5b:32:98:b0:be:1a:e7:cd:9a:d9:d9:5a:
         ca:93:ea:93:fe:a0:58:b1:63:eb:c1:f6:fc:a9:0e:27:b0:4c:
         11:55:ee:59:c8:87:6c:cb:3c:b6:0f:15:20:78:38:13:e4:9e:
         1e:83:98:3f:8b:b0:a2:99:78:dd:e1:05:8d:90:9d:9d:8d:b1:
         e8:b3:d1:34:b4:17:2b:78:da:20:ba:cf:27:3d:3d:ab:84:34:
         36:92:5f:98:e8:3d:fc:78:3b:34:18:dc:72:a4:2f:68:fc:6f:
         ec:47:51:29:6f:48:2f:1c:0d:97:60:27:07:83:c1:8e:8a:7c:
         c6:1c:10:32:1f:aa:35:65:7a:3f:f4:1a:71:cf:be:2d:b0:39:
         d2:4b:5c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 04:21:41 2024 by rpki-client on console-fra.rpki-client.org