Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/B5E806CC8BC711EE899A5284C4F9AE02.roa
File:                     B5E806CC8BC711EE899A5284C4F9AE02.roa (raw, json)
Hash identifier:          e4nlW3b1Gd+pOc4exYAE1ueBKcTmyXONvmF9PSvaz18=
Subject key identifier:   CC:23:EF:B3:C0:A0:A6:F5:0E:60:4B:7D:4B:A7:FA:1F:15:9F:54:17
Certificate issuer:       /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC
Certificate serial:       06F5
Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/B5E806CC8BC711EE899A5284C4F9AE02.roa
Signing time:             Sat 25 Nov 2023 19:20:36 +0000
ROA not before:           Sat 25 Nov 2023 19:20:36 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     135407
IP address blocks:        103.19.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl
                          rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 17:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1781 (0x6f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC
        Validity
            Not Before: Nov 25 19:20:36 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=65624904-d5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cd:5c:02:bb:17:ef:a6:65:2f:03:c5:fc:e4:
                    61:8d:d4:1f:81:a8:20:15:9e:af:4c:96:2a:55:55:
                    1c:b5:c6:91:84:4c:95:28:99:a1:e8:f1:55:f4:94:
                    1d:01:ef:05:99:b5:0e:3e:e3:ad:fd:9c:1b:d0:e2:
                    10:1a:7e:c7:bf:f0:18:39:41:0a:7b:dc:55:8c:d3:
                    59:fc:19:db:c4:0a:08:4d:cd:94:86:e6:ad:1e:91:
                    a4:86:84:bd:6d:f8:07:b7:41:a2:a1:12:c6:f5:48:
                    f8:e0:6c:d3:48:12:74:6c:c6:f1:62:7d:fb:32:8e:
                    f2:b0:14:61:b3:ac:7b:d4:0c:d5:1a:22:a6:c7:b9:
                    18:37:e8:19:16:77:a9:9f:13:ac:7a:70:81:30:6a:
                    ff:d4:b5:36:de:45:df:86:2d:f3:a5:46:27:38:a1:
                    b5:fe:46:88:c4:c2:58:c4:8f:59:28:1a:d0:c6:13:
                    3a:09:3a:a1:20:24:a6:06:1c:73:89:ff:1f:45:cb:
                    72:5b:c4:ca:f1:c2:e5:58:56:4b:c7:6b:17:7d:b2:
                    d2:bd:9a:8c:69:8a:cd:8d:44:1a:a3:58:11:cd:32:
                    57:c0:bb:fe:c1:8a:1f:9c:70:60:81:c6:7e:c2:e5:
                    7f:df:d0:0a:d5:32:a0:32:f3:24:92:73:eb:f0:7b:
                    ee:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:23:EF:B3:C0:A0:A6:F5:0E:60:4B:7D:4B:A7:FA:1F:15:9F:54:17
            X509v3 Authority Key Identifier:
                keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/B5E806CC8BC711EE899A5284C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:80:4d:c2:0d:09:ab:66:fc:af:91:00:5d:03:4c:03:b0:44:
         eb:81:07:1a:b6:d4:f9:30:83:71:ff:f8:21:d0:ac:3a:3f:27:
         71:8d:59:b4:a1:10:a1:9f:e2:45:0f:8d:56:58:85:1e:36:62:
         21:8d:19:78:e9:f6:c2:b2:7a:b3:e2:d4:a2:f5:e8:92:18:ef:
         ea:ef:04:c8:3f:75:70:30:38:24:02:ee:27:d6:3a:fe:63:d0:
         81:e7:fa:49:5e:13:b6:7f:2e:8a:87:de:da:1f:f5:db:c0:c3:
         a0:4a:a9:f8:0c:eb:a7:24:9a:fc:ab:20:09:3a:9b:de:2c:b2:
         c1:ca:2d:cb:24:e1:a1:af:40:82:a3:c1:32:5f:a3:1d:10:e6:
         90:00:c3:ae:63:48:6d:01:f6:d0:d0:dd:3e:7a:f2:96:02:3b:
         4b:a1:2b:33:ee:11:95:00:d0:5c:17:41:99:99:39:99:62:dd:
         3a:e8:57:cf:eb:66:08:28:38:1f:79:99:8c:92:38:2b:70:de:
         b4:0a:7f:28:e3:9e:29:59:b6:ea:67:14:85:57:b3:cb:8f:00:
         05:c4:89:1f:aa:38:78:57:9b:3a:68:e4:5f:64:a7:ec:73:aa:
         db:f6:c6:01:2d:ee:11:78:88:95:f2:e5:40:58:1e:cf:30:2a:
         ed:67:dd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 18:46:53 2024 by rpki-client on console-fra.rpki-client.org