Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/ADBF1F6EE93C11ECA5406975C4F9AE02.roa
File:                     ADBF1F6EE93C11ECA5406975C4F9AE02.roa (raw, json)
Hash identifier:          xon3Q3MSMcHk4UO2J/Ub7xBm3HW0cCOejYo5zbFPJzw=
Subject key identifier:   41:B6:CA:52:3A:C8:E9:1C:3C:B4:4D:E1:F1:63:E4:F5:7D:D7:0F:89
Certificate issuer:       /CN=A91F2A41/serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC
Certificate serial:       0168
Authority key identifier: EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/ADBF1F6EE93C11ECA5406975C4F9AE02.roa
Signing time:             Wed 07 Jun 2023 06:19:15 +0000
ROA not before:           Wed 07 Jun 2023 06:19:15 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     4826
IP address blocks:        103.188.182.0/23 maxlen: 23
                          103.188.182.0/24 maxlen: 24
                          103.188.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl
                          rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 04:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2A41/serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC
        Validity
            Not Before: Jun  7 06:19:15 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64802163-4f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ca:54:69:42:cf:e2:9d:b0:06:70:42:cc:a8:
                    eb:14:be:45:4a:05:00:ad:b0:e5:c8:92:78:d0:6c:
                    9f:62:cd:5a:3b:33:e5:40:52:30:7b:7e:f2:1f:23:
                    0a:3e:0f:ac:c8:11:ed:52:64:4d:25:b2:24:2c:29:
                    61:13:f3:59:a0:87:46:b6:e4:16:8a:8f:d1:ab:e2:
                    0e:87:c1:d3:04:5e:e5:56:ee:ae:83:00:c2:77:6f:
                    ea:13:70:77:72:95:5e:f0:68:fb:69:9b:1f:b5:4e:
                    9c:6c:a1:fd:b2:e1:a1:75:42:e2:fe:04:f3:a1:dd:
                    47:21:95:58:44:b9:3a:bd:d2:41:2f:02:0a:22:92:
                    d1:d2:f2:4c:bd:27:0b:f9:cd:46:45:bf:f9:40:16:
                    9f:a4:03:52:b8:8a:4c:74:4b:ae:0f:fb:18:14:6b:
                    4b:26:57:24:05:ee:5f:d5:24:95:b8:34:f0:bd:3b:
                    d5:30:cf:93:f9:c9:fb:91:d5:46:68:99:e4:6e:8b:
                    fe:e8:36:ac:89:92:2e:14:9c:8e:9d:19:df:3b:7b:
                    1f:a7:f0:8f:12:cd:52:50:58:f4:3d:80:6e:8b:1a:
                    b2:54:b0:34:6e:2f:be:9e:93:2d:18:24:88:56:bc:
                    63:0c:c3:0a:e4:27:03:70:34:0d:7f:09:17:18:00:
                    e3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B6:CA:52:3A:C8:E9:1C:3C:B4:4D:E1:F1:63:E4:F5:7D:D7:0F:89
            X509v3 Authority Key Identifier:
                keyid:EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/ADBF1F6EE93C11ECA5406975C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:52:df:95:f2:78:e5:e4:b0:2c:97:48:a2:7f:4f:57:49:14:
         b6:7b:a8:ba:0c:e4:4e:c6:ed:94:79:44:79:ee:6b:b8:c9:5d:
         2b:ed:2e:9a:eb:df:d6:d0:1c:89:8f:fb:f7:1d:91:64:71:9b:
         56:f4:fc:de:83:62:e8:ba:63:4e:6b:8c:13:5a:24:96:1e:11:
         9c:ff:41:af:6e:05:73:97:e5:f0:07:70:38:3f:f0:bd:b2:7c:
         e0:aa:e3:ea:41:bd:76:13:f6:b2:75:a7:d3:ab:70:91:6b:75:
         40:a3:eb:40:36:b6:bc:35:68:8c:8d:97:c4:bd:d4:59:42:4a:
         55:c3:bd:15:11:6b:ca:f8:2a:ce:eb:75:0c:6a:02:6c:14:c0:
         fc:a2:a7:02:0c:35:a1:58:ac:81:43:c2:7f:ba:34:99:1f:72:
         c1:6e:ca:86:0c:57:27:5b:99:e7:03:45:11:e3:87:0c:52:ee:
         b1:df:86:bc:f4:74:60:0b:de:02:1a:f7:fc:e0:67:a2:2c:1f:
         0c:9a:99:84:98:94:c9:e8:d7:17:70:5a:65:07:34:aa:17:16:
         ad:ea:78:0e:bd:f5:8a:93:7c:fc:1d:68:86:07:cb:b0:e2:62:
         49:9c:8c:e7:ec:98:50:a4:e6:43:55:20:72:9a:28:1c:20:ed:
         22:41:6b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:46:30 2024 by rpki-client on console-ams.rpki-client.org