Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/B37444BA7B3711ED9820E681C4F9AE02.roa
File:                     B37444BA7B3711ED9820E681C4F9AE02.roa (raw, json)
Hash identifier:          lYipaoXm99rXiTOLg241E3V2EP4nbeHbdbOiNb+hSKw=
Subject key identifier:   A7:EF:7C:81:D0:35:1B:EE:F9:3F:D3:78:A5:D1:C4:BD:6C:8D:38:54
Certificate issuer:       /CN=A91ED836/serialNumber=2555ED39B16F6C8B6815D541B9D8362B9D3FD82A
Certificate serial:       E9
Authority key identifier: 25:55:ED:39:B1:6F:6C:8B:68:15:D5:41:B9:D8:36:2B:9D:3F:D8:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVXtObFvbItoFdVBudg2K50_2Co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/B37444BA7B3711ED9820E681C4F9AE02.roa
Signing time:             Thu 01 Feb 2024 05:17:19 +0000
ROA not before:           Thu 01 Feb 2024 05:17:19 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     139707
IP address blocks:        103.137.98.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.crl
                          rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVXtObFvbItoFdVBudg2K50_2Co.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED836/serialNumber=2555ED39B16F6C8B6815D541B9D8362B9D3FD82A
        Validity
            Not Before: Feb  1 05:17:19 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65bb295f-e33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:71:66:f5:a0:c5:41:f6:8d:d3:3b:79:57:b2:
                    cf:0d:33:15:ef:e9:18:f0:d1:65:1a:97:62:a6:51:
                    2d:6b:f6:d0:c5:a4:15:ea:cc:3a:36:c5:da:fc:10:
                    84:f4:08:4f:a3:a1:4f:e7:44:b6:44:45:b6:88:43:
                    11:ee:ef:bc:f2:b8:51:7b:88:98:13:02:c0:0d:fd:
                    0c:b7:8e:0f:24:c3:56:5e:09:64:3f:ee:25:9e:44:
                    dd:3a:c7:f9:11:ce:71:42:30:c4:1f:31:05:70:69:
                    6a:a8:e7:f6:29:9c:7e:41:2b:ba:c4:e7:a9:8e:da:
                    8f:80:42:f2:c2:ea:15:b8:a0:00:1c:63:af:16:fa:
                    85:c6:bd:ee:1e:08:2c:d9:3f:42:4e:1a:23:a7:a5:
                    fd:1b:dc:90:e7:aa:fa:b6:af:86:44:0a:81:fd:ce:
                    9c:c2:d1:48:3b:35:fe:be:de:87:ee:a0:32:a3:d5:
                    db:df:4f:48:84:fb:73:50:9b:1f:07:d5:ac:30:b1:
                    02:db:e6:4e:10:ff:cd:b8:13:d6:1f:ee:36:a6:c3:
                    41:39:77:8f:07:e0:c8:89:ac:24:5d:9d:ee:3e:bf:
                    d6:88:08:cb:bb:e7:88:68:e7:62:d8:9c:a7:d1:eb:
                    87:a1:06:6d:76:c8:0f:67:0a:52:6e:16:3b:e5:fc:
                    77:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:EF:7C:81:D0:35:1B:EE:F9:3F:D3:78:A5:D1:C4:BD:6C:8D:38:54
            X509v3 Authority Key Identifier:
                keyid:25:55:ED:39:B1:6F:6C:8B:68:15:D5:41:B9:D8:36:2B:9D:3F:D8:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVXtObFvbItoFdVBudg2K50_2Co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/B37444BA7B3711ED9820E681C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:d9:f0:f8:d7:3d:e5:91:03:85:96:db:54:e8:f1:b2:fe:e9:
         b0:58:e5:35:a7:31:3a:98:cb:99:f3:90:01:1c:d7:2e:6e:9a:
         bc:30:fa:c9:4d:eb:c9:bf:5f:6e:19:09:72:1b:55:d9:8b:d3:
         ce:60:bb:aa:a5:f5:e7:0d:79:e9:0a:c3:72:0f:95:04:71:3a:
         84:b7:c6:7f:8a:31:ba:44:f0:5c:fd:e3:4c:bc:ac:22:9c:25:
         97:cc:e7:2d:67:f6:ea:05:20:68:48:40:c6:d4:a0:cb:7f:e5:
         6f:b8:6f:84:a1:b2:70:f5:20:96:6c:5e:f4:e5:b5:b4:38:a5:
         13:29:33:8a:29:23:3a:77:ab:15:36:34:cd:a1:09:92:26:38:
         db:05:46:91:a4:a3:d6:63:14:5e:54:df:82:5c:d9:33:40:60:
         98:36:3c:98:0a:93:11:2d:1c:26:06:ef:1b:59:aa:08:ec:02:
         44:a0:2a:6f:20:92:a7:00:76:f4:74:8e:ca:2e:b7:f4:49:2b:
         30:6c:03:dc:02:3b:71:fb:f2:6f:b6:72:64:3a:42:72:36:33:
         77:26:16:2a:3b:cc:18:90:fa:f2:7b:21:a5:d3:41:46:78:35:
         0c:bc:ac:7c:32:d9:fd:d1:e3:32:5a:af:d2:c4:d8:3a:a4:ec:
         9c:2d:30:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:00 2024 by rpki-client on console-fra.rpki-client.org