Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/52D82696610411EDBAD5280FC4F9AE02.roa
File:                     52D82696610411EDBAD5280FC4F9AE02.roa (raw, json)
Hash identifier:          o0syssUb6kwIn2WrrTrkjQVpHGqPi0NTnZzEc8507fw=
Subject key identifier:   CB:DE:ED:52:32:B0:D4:6B:6C:10:A6:D7:EF:4E:6C:6C:3F:F5:83:3F
Certificate issuer:       /CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
Certificate serial:       0101
Authority key identifier: 4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/52D82696610411EDBAD5280FC4F9AE02.roa
Signing time:             Fri 07 Apr 2023 02:02:39 +0000
ROA not before:           Fri 07 Apr 2023 02:02:39 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     141778
IP address blocks:        103.163.255.0/24 maxlen: 24
                          2001:df6:3580::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl
                          rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jul 2023 23:58:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
        Validity
            Not Before: Apr  7 02:02:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=642f79bf-7471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:39:41:5f:a3:96:da:3f:2b:80:93:3c:c5:54:
                    60:05:53:bf:6c:b0:d5:f9:fc:b9:52:2b:ea:f9:36:
                    78:ed:51:09:4b:fd:bd:a9:e2:bd:4c:88:d5:7f:21:
                    3e:c5:1f:1d:93:1f:81:29:0f:6f:d4:4b:5e:b3:c4:
                    56:bb:5e:00:cc:15:7e:4b:1d:63:25:51:fc:2a:b9:
                    a4:11:7c:09:d9:2b:0e:e9:28:37:0d:05:39:a4:d1:
                    30:d1:38:23:94:1d:21:cb:e8:79:b6:7b:5b:76:e1:
                    94:fa:cd:2e:27:7c:38:6e:d1:59:b8:ba:60:1d:0c:
                    0c:56:f7:d3:42:37:92:40:a2:49:32:40:92:b1:4f:
                    88:99:ec:4f:1a:0c:05:95:95:0c:3b:e3:a9:ef:e8:
                    6f:e7:12:15:14:39:b0:ec:ba:60:48:f2:eb:f7:0b:
                    ea:f5:6a:c9:9e:bd:73:e8:f0:78:b1:90:fc:c6:00:
                    88:aa:25:5c:33:76:23:b9:02:10:d2:3d:07:ca:bd:
                    d0:2c:be:1c:f4:86:7a:f0:20:80:ef:6d:b1:e0:58:
                    b5:b6:cd:f7:19:30:1e:4b:38:ef:e4:d0:b3:26:35:
                    d5:66:6e:f1:f9:fb:73:44:ac:47:8b:ea:4f:76:02:
                    2c:82:1c:f1:ae:52:32:32:7f:fe:9f:70:52:e6:ec:
                    3a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DE:ED:52:32:B0:D4:6B:6C:10:A6:D7:EF:4E:6C:6C:3F:F5:83:3F
            X509v3 Authority Key Identifier:
                keyid:4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/52D82696610411EDBAD5280FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.255.0/24
                IPv6:
                  2001:df6:3580::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:43:8f:7f:b3:bf:a9:a9:75:51:76:8e:c9:f0:f1:a8:f1:26:
         dc:e6:3b:1c:8f:97:2d:63:8e:02:b8:94:b1:c8:c7:30:02:2a:
         0b:81:f1:42:08:cc:1d:8e:15:fc:4e:84:5a:f5:a8:09:8e:a4:
         11:25:c6:f5:51:b1:47:2f:f4:39:25:7a:0b:98:3e:69:cc:14:
         5a:2c:24:e1:0a:d7:53:b8:a1:0c:9a:ba:54:0f:b1:c7:45:8a:
         3a:73:ac:2d:ab:d2:4f:44:92:f1:69:1c:5b:ce:4a:56:c8:ff:
         39:a7:c8:0c:db:33:e2:e1:9a:be:1e:1a:a3:82:d2:ef:c8:87:
         7c:64:eb:87:f8:a6:a4:93:66:54:ea:34:7c:50:6f:8b:ee:b8:
         2d:e3:84:66:43:f0:b1:8b:da:02:1d:9a:8d:eb:8a:ff:8a:c8:
         7c:98:d3:e1:94:6c:25:f9:ec:94:2d:e3:62:47:18:df:7e:6b:
         8d:0c:ee:01:b6:9d:c1:64:d0:e3:c7:95:27:a2:1b:7c:8d:5f:
         c6:24:73:8c:d9:92:19:f0:53:92:33:27:04:18:04:63:3c:fc:
         bc:12:9b:0b:7f:85:8d:f1:97:83:c3:63:5d:d1:c7:c8:aa:39:
         98:4c:f7:4d:5a:02:6c:7a:f2:3d:0a:f7:cd:d5:f5:5c:90:83:
         0b:21:49:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-ams.rpki-client.org