Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/709F3B2E145C11EC9A902165C4F9AE02.roa
File:                     709F3B2E145C11EC9A902165C4F9AE02.roa (raw, json)
Hash identifier:          jSv6IgsRwIfkDcFXv1cYxosZDSuxpdCLwAe0M4CWKRc=
Subject key identifier:   0D:99:C6:D3:4C:64:87:3C:57:EB:DC:B3:BC:51:98:81:08:E0:E3:6F
Certificate issuer:       /CN=A91E87AB/serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E
Certificate serial:       03DC
Authority key identifier: 04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/709F3B2E145C11EC9A902165C4F9AE02.roa
Signing time:             Wed 29 Nov 2023 01:52:56 +0000
ROA not before:           Wed 29 Nov 2023 01:52:56 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     135615
IP address blocks:        103.172.188.0/24 maxlen: 24
                          103.172.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl
                          rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 02:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 988 (0x3dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E87AB/serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E
        Validity
            Not Before: Nov 29 01:52:56 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65669978-226e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cc:d3:39:81:4a:73:55:fe:91:40:5c:f3:70:
                    3d:21:fb:2c:94:ad:d4:26:6d:6b:c0:e1:8a:27:b1:
                    4a:a5:93:6f:be:1f:70:28:f8:e3:a1:c4:b3:c6:2a:
                    6f:98:4f:3b:78:7e:c3:d6:49:0a:38:6e:e7:47:16:
                    04:f3:ac:48:7c:ba:c9:49:51:d4:a1:0f:d6:d8:cb:
                    1d:d4:98:09:cf:2e:65:54:8f:ac:68:d5:79:10:fd:
                    66:88:c5:2e:26:50:56:ee:fb:42:9f:d1:e7:56:0a:
                    1b:ee:6f:7d:92:2d:90:15:1f:b9:46:c6:98:5d:fb:
                    09:c7:f4:88:91:1b:20:fd:3d:0e:46:d3:20:f3:6b:
                    b6:7f:5e:d4:d8:d0:dd:05:98:5d:18:3c:4a:78:7e:
                    ee:b3:95:3e:91:47:fe:cf:4a:d6:96:12:2e:c5:40:
                    90:fe:12:97:e8:bc:c2:66:61:f7:fc:fa:ff:79:78:
                    6d:e3:1b:08:63:25:e5:09:f3:98:65:52:01:fd:ec:
                    50:68:3d:39:2f:75:dc:4c:fa:19:03:66:51:3d:4d:
                    31:00:8c:a6:7a:97:bd:db:8f:b6:93:6f:5a:96:5a:
                    21:64:a2:63:9b:ad:0f:13:3f:10:89:b1:7f:05:d7:
                    1e:1c:b3:b1:b0:d1:06:c1:2b:2e:98:7f:63:f0:ee:
                    7b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:99:C6:D3:4C:64:87:3C:57:EB:DC:B3:BC:51:98:81:08:E0:E3:6F
            X509v3 Authority Key Identifier:
                keyid:04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/709F3B2E145C11EC9A902165C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:ca:38:ab:12:c9:2e:f6:0c:e4:b3:16:aa:16:1d:9e:8f:2d:
         b7:ca:30:6f:10:28:ba:42:a0:bb:1f:e3:95:f2:53:dd:11:9e:
         1d:17:67:ba:49:50:f4:0a:d9:bb:04:4b:97:a4:83:c0:0b:21:
         17:46:ac:08:51:17:63:f7:c1:e3:f1:24:9d:64:03:be:58:0a:
         ab:79:1f:6d:69:5a:38:9b:5b:5c:4c:3a:95:53:35:6d:05:a2:
         cd:1a:3b:10:1f:1e:46:f3:46:d6:f5:09:57:8f:b0:82:d6:2f:
         ef:62:73:50:fe:32:a4:8e:68:7d:72:24:d6:68:97:40:c9:7e:
         46:14:61:6f:08:46:c3:fb:0c:52:fd:d7:7a:f9:ae:49:6a:33:
         f3:46:fe:41:36:14:c5:6e:5f:be:5c:ac:85:1b:4c:f0:36:8d:
         9e:22:42:69:24:1f:4d:4c:bf:79:f4:36:bc:b7:56:b6:0c:23:
         0f:ce:31:fd:74:89:0b:9f:b6:be:ef:ec:bc:23:c8:51:2d:e8:
         b7:72:5d:9a:f3:26:e1:1c:02:af:11:ad:66:85:08:55:16:e0:
         c4:6e:03:bc:2c:cb:4c:f9:e3:19:d6:a7:b9:6d:f7:43:8e:2e:
         b1:24:72:31:b5:20:f3:3b:bf:0f:60:2a:05:73:42:b4:7b:cc:
         dd:3b:4d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 05:04:09 2024 by rpki-client on console-ams.rpki-client.org