Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/4F7AD592169311EB89C20F1DC4F9AE02.roa
File:                     4F7AD592169311EB89C20F1DC4F9AE02.roa (raw, json)
Hash identifier:          XKVyEB5gGMdbZZklWgaxiu1Qm2EFMmnpQEz2Juw2PmY=
Subject key identifier:   FB:B4:F4:89:E8:EE:35:8F:FB:EA:E4:31:58:E6:D5:97:BD:4D:FD:71
Certificate issuer:       /CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
Certificate serial:       06A6
Authority key identifier: B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/4F7AD592169311EB89C20F1DC4F9AE02.roa
Signing time:             Thu 28 Mar 2024 23:31:56 +0000
ROA not before:           Thu 28 Mar 2024 23:31:56 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     136986
IP address blocks:        103.149.39.0/24 maxlen: 24
                          103.162.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl
                          rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 23:56:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1702 (0x6a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
        Validity
            Not Before: Mar 28 23:31:56 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=6605fdec-6b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:17:21:84:9b:1c:32:dd:20:09:3b:81:45:
                    3a:89:2a:11:7d:f7:55:ce:7f:45:a0:e8:ff:0b:71:
                    05:c1:8c:2c:c2:65:38:38:b6:a6:9f:26:cc:82:06:
                    f8:bd:2b:f8:c5:a9:86:56:8f:ae:37:34:31:2a:67:
                    e2:07:f2:43:9f:80:5e:ba:e4:11:06:28:b4:cb:b8:
                    4c:19:f6:6a:22:e2:0d:c1:8c:43:a7:c2:33:13:8e:
                    80:13:83:f0:ce:3b:a6:fb:a9:8a:9f:80:d5:48:e7:
                    07:40:6e:02:88:b9:b2:ec:9d:ff:d3:8c:fc:c5:8d:
                    5d:0d:11:bb:58:61:c2:9c:ef:31:58:26:4e:5b:b7:
                    ca:9b:bf:ea:0b:62:97:8c:b2:06:05:58:07:0c:cf:
                    3a:7b:da:98:b7:1a:5b:1d:ae:cc:a4:f7:f6:e3:2c:
                    a7:9b:4f:b1:e9:4b:e2:63:ab:3a:eb:94:e9:f6:2d:
                    2f:ef:d3:57:07:e8:98:c3:b9:92:83:20:52:94:f1:
                    27:cf:e7:f9:4b:74:a0:ca:fb:a0:1d:05:70:8c:f7:
                    13:9a:74:0d:ef:56:9b:8b:2a:2f:f7:d4:15:a7:70:
                    09:a4:78:74:42:ac:25:e8:15:22:24:0d:57:67:4b:
                    8c:15:e5:8c:76:f5:79:bf:20:b0:8e:86:2f:a3:ff:
                    cd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B4:F4:89:E8:EE:35:8F:FB:EA:E4:31:58:E6:D5:97:BD:4D:FD:71
            X509v3 Authority Key Identifier:
                keyid:B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/4F7AD592169311EB89C20F1DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.39.0/24
                  103.162.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:4b:9c:e1:96:ce:47:c9:80:c6:02:50:de:1a:4c:9e:a6:5e:
         12:8c:60:8a:75:22:b6:60:ea:23:95:6b:40:3d:28:ce:4e:57:
         d7:58:c4:b7:8a:9d:df:3b:c7:ab:33:32:de:60:a2:dc:55:fc:
         61:70:68:10:ec:f9:91:bf:50:c0:30:a3:5a:1f:5f:95:14:54:
         29:97:ea:ad:2f:fe:03:34:de:18:a9:9e:89:b4:fd:ca:24:8d:
         3f:73:ed:9a:18:6c:f5:80:29:aa:60:e9:8c:9f:c1:51:12:ef:
         18:ae:0b:96:73:49:96:29:77:61:93:05:79:0e:55:26:6f:12:
         41:80:40:a8:e3:59:45:4c:2e:e7:91:4a:94:34:39:c3:31:29:
         9c:72:77:8e:91:75:f8:3b:41:c1:a1:73:ff:60:b9:e4:7c:7a:
         e3:28:30:ef:e7:c6:1b:a7:98:53:de:f4:5b:de:65:15:af:67:
         56:39:47:77:84:c0:92:b1:35:76:3c:b4:6e:e8:bc:e5:1b:cd:
         99:30:0e:65:b3:e5:06:98:ee:7f:90:6f:e0:e4:44:84:04:50:
         57:67:3a:01:19:e8:ab:b5:d8:c5:49:f1:03:da:ed:d0:fb:14:
         78:01:0d:d6:9b:0a:27:df:aa:12:30:f5:3c:3f:48:49:c6:99:
         a7:49:38:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:01:24 2024 by rpki-client on console-ams.rpki-client.org