Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/01C04C52FB8D11ECABCA1D0AC4F9AE02.roa
File:                     01C04C52FB8D11ECABCA1D0AC4F9AE02.roa (raw, json)
Hash identifier:          IdffaUaBoSta1anksGvusIKN2vlycl68X+OeRcTSpcY=
Subject key identifier:   6F:AF:F7:3D:DF:FC:78:1C:40:31:64:60:60:3A:1E:17:56:9D:B9:63
Certificate issuer:       /CN=A91F2A41/serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC
Certificate serial:       0229
Authority key identifier: EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/01C04C52FB8D11ECABCA1D0AC4F9AE02.roa
Signing time:             Wed 05 Jun 2024 04:32:14 +0000
ROA not before:           Wed 05 Jun 2024 04:32:14 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     7594
IP address blocks:        103.188.182.0/23 maxlen: 23
                          103.188.182.0/24 maxlen: 24
                          103.188.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl
                          rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2A41/serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC
        Validity
            Not Before: Jun  5 04:32:14 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=665fea4e-5343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:26:6f:6e:97:64:55:8d:4c:41:e5:be:a2:0a:
                    1d:0f:31:fc:6c:41:44:93:f4:5f:54:01:f0:46:90:
                    a1:fb:a9:2f:7e:67:69:fe:e2:52:fc:da:30:a2:ce:
                    f2:bd:2e:30:86:b1:2e:90:8d:0f:42:7e:61:52:6c:
                    73:b4:79:f8:89:90:3d:b5:85:4a:41:03:9d:73:83:
                    b9:04:91:79:0d:0e:02:6e:27:27:a9:d7:71:df:35:
                    3a:40:96:2f:6c:1c:ad:71:58:3a:0e:34:47:db:29:
                    7c:de:a0:5d:66:c7:85:9e:46:92:6c:4d:0e:94:7c:
                    36:a7:1d:80:61:1f:a9:e6:ba:e1:99:6c:55:a8:1b:
                    30:a7:d9:a9:98:0d:95:3a:6b:ee:27:90:9f:f7:6c:
                    dc:30:46:f9:71:0c:cb:50:78:7d:6c:05:f9:19:b5:
                    3d:53:c2:ab:c0:db:af:1e:b3:7f:79:24:46:08:0a:
                    11:8e:c6:e0:a4:71:b4:3e:83:26:3b:6b:d8:35:e7:
                    eb:93:41:bb:71:f3:4b:96:45:30:93:60:9b:f5:17:
                    53:fd:25:9c:58:da:c2:38:bc:f5:a8:2c:00:b6:df:
                    4c:d4:b2:9b:2d:b1:1c:22:27:63:c2:15:8a:15:c7:
                    f9:52:f2:a7:4f:f7:ce:db:4e:8a:79:26:f6:88:52:
                    78:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AF:F7:3D:DF:FC:78:1C:40:31:64:60:60:3A:1E:17:56:9D:B9:63
            X509v3 Authority Key Identifier:
                keyid:EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/01C04C52FB8D11ECABCA1D0AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:78:59:c3:8e:0d:b1:2f:ed:87:5a:4b:91:f7:af:ad:63:d5:
         c2:20:b8:91:9a:8e:b7:c3:95:62:a0:08:2d:f6:b5:8b:ba:e5:
         07:83:bd:4d:e9:c0:95:24:8e:5d:2a:ac:be:79:a8:93:bb:c9:
         91:10:58:e0:d0:31:f1:a1:4d:6d:b6:0d:93:03:b7:5c:99:b9:
         d5:ce:a4:e4:b9:70:49:1e:3a:fe:84:1d:61:1b:a7:30:d3:8a:
         27:60:f2:1b:76:33:9e:12:29:80:bd:6b:c4:38:78:30:52:01:
         ee:bf:a0:44:9e:2b:b0:6a:28:21:c3:f6:1d:ad:2c:58:f5:97:
         8a:5c:54:be:f4:2c:05:4a:9f:33:68:2a:bd:a7:92:9c:2d:3d:
         45:fc:95:0f:99:9a:f6:6a:fa:c3:b5:f3:0b:87:c7:8c:4f:bc:
         c1:ed:0b:46:45:3b:64:75:70:0e:f7:cd:30:2e:b6:aa:0d:85:
         d8:20:2b:e8:52:48:89:28:5a:35:22:99:52:0f:f1:bf:fb:41:
         53:4e:08:ce:e9:64:2f:36:ae:aa:7f:b4:a5:20:91:5f:ca:f0:
         52:2e:f2:4d:6c:bc:34:21:6e:83:1e:a5:ea:ef:c9:18:c6:85:
         55:29:53:d7:f8:71:7b:7a:c1:8f:b6:2a:6b:18:9f:0b:52:a1:
         a3:13:77:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:58 2024 by rpki-client on console-ams.rpki-client.org