Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/C2604920CFE011EE83247F7CC4F9AE02.roa
File:                     C2604920CFE011EE83247F7CC4F9AE02.roa (raw, json)
Hash identifier:          Y8aYATMgyv4+pPlr9qAtMhr2jnfx+UC3VtFrfI9Q/TE=
Subject key identifier:   0C:90:68:7D:F1:08:6D:92:22:AE:F3:76:1B:B3:BE:62:FB:FA:10:09
Certificate issuer:       /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Certificate serial:       55
Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/C2604920CFE011EE83247F7CC4F9AE02.roa
Signing time:             Tue 20 Feb 2024 11:11:13 +0000
ROA not before:           Tue 20 Feb 2024 11:11:13 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     135661
IP address blocks:        103.62.232.0/24 maxlen: 24
                          103.62.233.0/24 maxlen: 24
                          103.62.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 07:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
        Validity
            Not Before: Feb 20 11:11:13 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=65d488d1-bfa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b1:ee:90:1e:83:48:a4:44:64:5b:91:45:95:
                    da:34:f3:2f:d8:62:31:90:e6:f1:f3:67:32:a2:5d:
                    00:df:d4:ed:bf:9d:d8:33:93:78:8f:4f:d6:a4:65:
                    08:0e:fa:e8:a9:23:9a:e7:a0:91:85:2d:f8:5c:c2:
                    a7:de:93:e4:e2:e7:70:d3:06:d0:96:0a:a3:96:c8:
                    88:1d:0e:af:b4:07:bf:b6:21:50:d6:39:58:4d:8c:
                    dc:b7:f8:6d:3a:88:96:fc:cf:df:b4:d0:6e:8c:d1:
                    f9:04:18:9a:7f:d2:f7:05:60:4a:41:11:73:a1:07:
                    a8:fb:3a:a4:a1:26:e7:a5:51:34:c6:31:c0:65:31:
                    95:81:c4:1d:e8:ec:99:3f:e3:d4:cd:21:94:79:8e:
                    b5:60:ee:e4:28:eb:bd:51:c1:c1:20:d3:ee:aa:0c:
                    ce:01:86:e5:27:c0:85:9c:1b:50:c7:20:96:e7:e7:
                    de:37:fb:8a:0c:6d:a4:72:f3:7b:60:81:c0:a3:6f:
                    04:50:0c:78:75:a1:a0:ee:07:e5:c3:87:6c:32:3e:
                    c2:87:dc:e1:e3:5a:7e:94:63:cb:d7:21:19:90:f3:
                    46:33:77:1e:87:42:be:18:a5:23:8f:bf:ad:95:25:
                    87:f8:1f:49:c1:4b:c6:f8:08:92:79:12:20:ca:8c:
                    33:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:90:68:7D:F1:08:6D:92:22:AE:F3:76:1B:B3:BE:62:FB:FA:10:09
            X509v3 Authority Key Identifier:
                keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/C2604920CFE011EE83247F7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.232.0/23
                  103.62.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:0d:e3:77:bc:31:2c:b5:55:b1:e6:63:89:55:23:c3:eb:b0:
         67:c4:3b:81:70:d5:eb:bb:d5:85:3c:bb:f2:27:f9:6c:91:8b:
         a6:3e:93:7a:aa:71:a0:f4:fa:79:22:a2:23:30:78:8f:2b:14:
         ae:24:6b:ad:c9:cb:ad:fb:8a:d6:1e:ed:e4:3b:8c:57:8b:d2:
         82:18:82:3c:e6:cc:c1:43:4d:23:f3:e9:44:e9:d2:bc:8c:0a:
         93:58:d0:07:5e:07:11:ad:66:38:8e:67:0b:a0:fc:2e:ef:cc:
         25:4e:c5:1c:fb:4b:08:20:c4:f1:8c:a3:ae:f3:c6:1a:f3:c1:
         6f:61:f8:b7:f3:df:20:c9:46:81:2b:08:aa:38:15:1e:ce:8b:
         77:14:0a:77:dc:45:fb:0e:b9:b2:37:82:de:59:ac:b3:d7:cf:
         fc:35:62:1d:bd:5f:6f:ae:df:65:1d:25:db:a0:9b:b2:c3:96:
         3a:f0:30:f0:16:11:34:4b:91:62:48:20:5e:29:0b:29:da:e7:
         fb:b5:df:9b:77:c2:a1:fa:77:e1:38:d5:d4:09:52:8e:c8:ec:
         c6:44:29:34:62:f0:58:6b:45:52:c3:25:b6:2e:4c:44:f3:3f:
         d3:b0:93:b8:24:8a:50:93:a4:4c:fa:3a:04:10:26:2b:3a:f9:
         8b:ee:c8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 08:43:23 2024 by rpki-client on console-ams.rpki-client.org