Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/5AE4C7E2554C11EB87AB9070C4F9AE02.roa
File:                     5AE4C7E2554C11EB87AB9070C4F9AE02.roa (raw, json)
Hash identifier:          Or89czDxEvOmVhZzxW4eIqJ6wfH1q8wTK3ZnGTOYBjQ=
Subject key identifier:   48:4A:E3:5E:83:96:F0:BB:FA:4D:F3:B8:AC:6C:21:46:4E:45:A6:C8
Certificate issuer:       /CN=A91658B1/serialNumber=7C32E66F35C03BC27BE0DCF7CA46B96616099EE9
Certificate serial:       05E6
Authority key identifier: 7C:32:E6:6F:35:C0:3B:C2:7B:E0:DC:F7:CA:46:B9:66:16:09:9E:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDLmbzXAO8J74Nz3yka5ZhYJnuk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/5AE4C7E2554C11EB87AB9070C4F9AE02.roa
Signing time:             Mon 12 Feb 2024 23:42:13 +0000
ROA not before:           Mon 12 Feb 2024 23:42:13 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     9381
IP address blocks:        103.247.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/fDLmbzXAO8J74Nz3yka5ZhYJnuk.crl
                          rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/fDLmbzXAO8J74Nz3yka5ZhYJnuk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDLmbzXAO8J74Nz3yka5ZhYJnuk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 00:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1510 (0x5e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91658B1/serialNumber=7C32E66F35C03BC27BE0DCF7CA46B96616099EE9
        Validity
            Not Before: Feb 12 23:42:13 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65caacd5-d15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cd:b2:86:e1:55:28:89:51:e8:9d:2e:cc:11:
                    85:7e:c4:45:08:bb:04:1c:61:ad:3f:bc:6e:b0:d9:
                    14:af:29:35:85:73:e9:c5:c9:67:1d:ed:d6:6f:87:
                    cc:ed:30:2c:27:ed:d1:20:88:e5:63:45:c7:90:0f:
                    81:0c:f3:11:20:38:f7:a8:57:8a:b2:fe:35:ca:8c:
                    e2:c7:13:51:57:6c:c2:20:30:68:d2:df:77:d8:63:
                    8a:bd:67:ea:a3:14:19:da:0a:c4:e8:f8:a0:41:67:
                    48:37:5f:9c:9f:e7:92:9c:a2:f3:97:88:59:47:6e:
                    ae:8c:e4:67:47:f4:11:47:84:3e:e6:b5:85:ec:5e:
                    b6:5c:20:c9:cb:db:0a:52:91:f4:13:18:ce:4e:cd:
                    62:cf:e8:52:9a:1e:78:12:98:a4:98:62:6b:bd:2a:
                    6c:c1:f3:b6:c4:e7:3c:20:0c:32:96:aa:3b:ab:31:
                    64:fa:63:6d:16:1e:67:fd:e5:bc:ee:10:93:14:65:
                    2d:5c:e6:6a:68:bc:f3:07:b5:00:62:ee:70:3d:47:
                    8e:ac:a2:12:ce:7d:44:4a:32:b3:f1:40:75:2d:80:
                    8a:66:6e:9f:83:5a:6b:d3:91:f3:41:9c:b3:b8:bc:
                    bc:85:9e:16:dc:f1:7e:7d:9c:07:57:ca:ab:a5:60:
                    b7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4A:E3:5E:83:96:F0:BB:FA:4D:F3:B8:AC:6C:21:46:4E:45:A6:C8
            X509v3 Authority Key Identifier:
                keyid:7C:32:E6:6F:35:C0:3B:C2:7B:E0:DC:F7:CA:46:B9:66:16:09:9E:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/fDLmbzXAO8J74Nz3yka5ZhYJnuk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDLmbzXAO8J74Nz3yka5ZhYJnuk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/5AE4C7E2554C11EB87AB9070C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:ab:1e:50:fe:c5:79:d7:cc:06:80:7e:9e:e0:e6:3b:98:4a:
         5e:06:cd:f6:a8:3a:65:da:38:b5:b7:d6:ab:c8:43:27:1e:77:
         e8:e7:3d:30:47:16:59:04:96:3f:9f:e6:47:6e:94:6e:f3:79:
         43:21:6c:24:b6:9a:8f:0b:8d:76:d7:79:37:bc:02:d0:4c:a0:
         a6:fb:d6:08:f8:13:cd:57:c0:89:87:d9:23:2e:31:22:6e:2f:
         62:66:59:77:5b:f2:c2:0a:4e:7a:96:88:d3:fd:67:74:0b:52:
         41:9c:bf:8a:02:8f:22:55:5f:ec:3d:b3:f5:1d:5d:08:06:89:
         fa:03:b3:c9:cf:b2:51:de:20:b3:96:19:49:3b:e5:10:1f:d9:
         8e:dc:d5:56:a8:60:5f:38:67:28:20:42:19:36:12:f4:97:ec:
         64:d7:58:85:fa:12:33:52:50:7a:81:61:a4:0e:4c:85:a9:71:
         17:74:43:e0:9e:40:3f:b4:28:ce:a3:87:41:e1:7d:46:30:68:
         86:e3:d4:c5:62:c9:ee:15:2d:48:d6:c2:9d:5b:66:5b:40:78:
         1b:b3:65:d8:33:15:19:4e:36:eb:b1:f4:0d:26:e8:0b:27:7b:
         2c:31:b8:98:bb:c6:2b:91:fe:69:b4:f2:1f:d1:17:ed:a9:b9:
         12:86:82:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:01:15 2024 by rpki-client on console-ams.rpki-client.org