Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/8B802D485F2211EC88AA0F84C4F9AE02.roa
File:                     8B802D485F2211EC88AA0F84C4F9AE02.roa (raw, json)
Hash identifier:          K7z8kKU5BqzIOHwB0jfNZHDe2Ivnb5VNPYxOnFpEPT0=
Subject key identifier:   76:67:D7:9D:A0:55:6F:66:97:FC:5F:50:9F:CD:07:DD:67:36:11:99
Certificate issuer:       /CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6
Certificate serial:       092E
Authority key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/8B802D485F2211EC88AA0F84C4F9AE02.roa
Signing time:             Tue 28 May 2024 21:31:33 +0000
ROA not before:           Tue 28 May 2024 21:31:33 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     41477
IP address blocks:        103.219.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl
                          rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 21:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2350 (0x92e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6
        Validity
            Not Before: May 28 21:31:33 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66564d34-156b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bd:73:a6:45:63:a4:61:96:5b:bb:3f:e4:73:
                    c7:0c:3d:43:b0:2e:79:62:b4:1f:bb:25:ee:30:1d:
                    3a:22:c4:7e:62:b2:77:52:73:da:49:3f:bc:57:38:
                    c9:2f:22:bf:e6:29:92:09:67:ca:ea:c0:6a:b4:9b:
                    1a:4d:94:8a:3c:ca:90:28:5f:e3:24:64:ba:92:c7:
                    7b:05:9a:f4:4d:e8:de:95:11:65:ec:8e:62:9e:7f:
                    ae:ee:c2:61:b7:d8:d9:1b:72:e1:9c:72:5d:35:88:
                    90:92:48:a9:81:e4:a4:b7:c6:70:11:20:7e:b9:e8:
                    47:f6:dc:4d:68:d2:f0:fa:e7:75:86:71:74:57:bd:
                    29:ae:71:bb:6c:02:eb:eb:d8:91:48:d9:aa:4e:fb:
                    67:0e:a6:9e:9a:34:e1:46:aa:8f:67:34:02:c0:74:
                    ef:ac:94:82:fb:61:bc:75:02:1a:f4:1f:69:77:91:
                    2d:7e:0e:ae:97:43:45:a4:04:1f:30:7c:e4:b0:ee:
                    f8:04:c7:97:69:a6:8e:31:4e:1c:44:0c:56:c2:b2:
                    7e:e7:0c:37:06:40:ce:2b:5d:fc:fa:ff:c0:47:23:
                    a2:59:97:32:e0:48:f6:ef:7a:27:8d:d1:23:0a:a9:
                    07:48:ab:83:1f:61:df:11:75:0d:dc:aa:bf:47:49:
                    13:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:67:D7:9D:A0:55:6F:66:97:FC:5F:50:9F:CD:07:DD:67:36:11:99
            X509v3 Authority Key Identifier:
                keyid:8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/8B802D485F2211EC88AA0F84C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:bf:29:0e:46:29:5a:f6:02:dd:74:de:9a:73:62:b4:76:11:
         f0:d1:01:c2:e0:8d:c3:bc:ea:8b:e0:1a:0a:24:f2:41:74:cd:
         d7:52:e2:a5:49:ba:ea:02:2c:ec:93:87:be:6d:d0:1c:a7:e4:
         07:f0:99:8f:0c:80:45:ab:db:02:8c:2f:72:98:1c:86:f9:81:
         aa:99:5a:dd:a7:d1:49:4d:44:05:a5:91:31:5b:14:cc:fb:de:
         e8:e6:a9:d1:d8:34:6e:bf:2a:de:18:46:19:85:47:8f:7a:d8:
         de:7e:d1:9c:68:6e:68:5c:58:4a:4d:09:21:09:74:42:e7:4a:
         a9:56:0f:b8:b4:54:25:cc:2a:14:c2:4a:80:9a:26:61:0c:a0:
         4a:04:39:6d:3a:51:48:14:e9:4b:a2:25:0d:46:7c:c5:5a:48:
         4c:44:d4:ed:3b:4c:f5:ad:c5:2b:7f:f9:68:bf:80:99:93:4f:
         0d:be:7f:05:3c:0a:29:05:38:f8:48:34:fd:7d:49:0d:1f:d1:
         15:e0:1f:d5:d8:15:16:0a:b9:7f:26:c4:2c:a0:38:bd:ce:08:
         4c:b2:19:98:0f:9b:93:a3:0f:94:f6:53:36:ba:c7:1c:9e:d4:
         ba:a9:b7:57:b2:d6:05:a8:0a:3d:2b:db:b4:8c:df:3e:8f:91:
         62:16:ce:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:56:58 2024 by rpki-client on console-fra.rpki-client.org