Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/D5C4A54A617B11EC82058668C4F9AE02.roa
File:                     D5C4A54A617B11EC82058668C4F9AE02.roa (raw, json)
Hash identifier:          v+vVA6ooBVXCQ78o+N06EeD4Zu2vKlMqLngnPLF5bAo=
Subject key identifier:   4F:E7:89:39:EC:1C:F9:62:F1:77:AB:C9:5E:12:52:65:5C:0E:93:CB
Certificate issuer:       /CN=A91DBB7D/serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11
Certificate serial:       03E1
Authority key identifier: DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/D5C4A54A617B11EC82058668C4F9AE02.roa
Signing time:             Thu 21 Mar 2024 09:19:37 +0000
ROA not before:           Thu 21 Mar 2024 09:19:36 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     147061
IP address blocks:        103.173.235.0/24 maxlen: 24
                          103.198.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl
                          rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 00:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 993 (0x3e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBB7D/serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11
        Validity
            Not Before: Mar 21 09:19:36 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65fbfba8-faa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:6b:1e:05:ae:45:55:c3:d5:cc:3f:9c:aa:
                    49:aa:a3:c9:29:e4:96:84:55:89:5c:0c:52:53:bf:
                    bd:69:54:00:0e:c7:3b:4a:3b:7e:b3:40:ce:a1:a6:
                    63:66:50:bf:7a:26:a7:5d:9f:57:6a:ff:66:00:bf:
                    fa:3c:cc:88:86:b1:7d:ed:df:6c:b4:93:5d:1c:0b:
                    79:b5:fe:7a:a9:18:4c:3a:2f:dc:e0:0d:ba:4e:ac:
                    49:17:8d:00:fd:7e:a7:30:5c:cc:83:ae:84:23:bb:
                    9a:c6:73:44:c1:ca:7b:1c:fb:4c:a6:47:2b:78:90:
                    e0:27:30:0e:8e:59:65:d4:53:f2:56:9a:7c:f8:19:
                    d4:79:e6:3e:e1:be:d6:c8:07:d5:c4:3b:b1:88:82:
                    40:19:b6:8a:83:44:ae:97:2b:17:88:87:8c:d8:7e:
                    e0:d7:ff:d2:07:cd:f7:54:10:f2:a0:9c:03:a7:3b:
                    3c:5c:0c:01:f1:51:7f:1c:89:82:83:d9:de:2d:ec:
                    06:16:c2:51:9c:18:1d:b3:97:f5:10:3a:17:fa:6d:
                    c9:0e:e8:76:f3:e8:ff:d1:48:44:42:67:67:4b:0d:
                    b1:ba:6f:05:91:6c:e9:6e:04:ed:47:ce:0a:1f:36:
                    82:47:36:c7:eb:46:34:b9:c2:a4:8f:65:56:f5:c8:
                    22:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E7:89:39:EC:1C:F9:62:F1:77:AB:C9:5E:12:52:65:5C:0E:93:CB
            X509v3 Authority Key Identifier:
                keyid:DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/D5C4A54A617B11EC82058668C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.235.0/24
                  103.198.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:4d:01:a2:a3:91:7d:ef:5b:a0:b9:3e:97:7b:7a:ae:22:f4:
         e6:6e:75:d2:01:cb:d6:07:dd:12:b5:fe:40:aa:8b:e6:72:75:
         c6:ff:6a:63:7a:92:2a:fb:fb:f7:7c:ba:c7:8a:43:8c:37:97:
         b5:7c:f1:f9:be:11:5e:3c:d3:1c:27:3a:e3:6d:92:1f:78:c3:
         19:9a:b2:78:28:59:7c:70:18:ad:9a:5b:c0:43:db:b0:1e:78:
         56:dc:ff:50:5d:2a:83:48:52:32:21:56:3c:ab:b9:e7:ba:73:
         d1:db:f6:15:1c:88:f2:87:bf:45:17:be:96:0a:e9:df:6d:ee:
         af:6d:21:65:d6:b7:c0:c4:9d:87:ea:22:0c:2e:96:ee:5b:2d:
         bf:64:28:d1:d2:d4:bb:11:07:33:b7:ae:f3:6b:97:3f:45:d7:
         ce:5f:16:63:22:08:0a:89:69:8e:06:a6:dc:55:5b:5b:65:b7:
         e3:ee:d2:9e:d0:7e:de:f9:07:a8:28:ce:d5:ac:5c:ed:96:8d:
         d0:bd:f5:af:d7:b4:bc:c8:0d:04:d6:a1:21:0f:3b:26:ab:83:
         9e:49:ab:48:38:4e:01:ef:ab:4f:bd:ff:ab:90:8a:e1:58:8c:
         69:b4:b1:3d:69:00:7c:dd:9c:54:b2:d8:49:aa:7e:b3:10:80:
         e3:07:c6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 02:57:05 2024 by rpki-client on console-fra.rpki-client.org