Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5EEDB5FC79E411EC99DA1B51C4F9AE02.roa
File:                     5EEDB5FC79E411EC99DA1B51C4F9AE02.roa (raw, json)
Hash identifier:          8xxIAAehFnh+Soh3H5KFnC7vXFd43q6qMG1PGSHGtsY=
Subject key identifier:   E9:A2:5F:9A:19:00:43:69:28:45:9C:7A:5C:D6:05:B5:F2:2B:BD:F2
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3F37
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5EEDB5FC79E411EC99DA1B51C4F9AE02.roa
Signing time:             Tue 12 Sep 2023 02:44:22 +0000
ROA not before:           Tue 12 Sep 2023 02:44:22 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     63754
IP address blocks:        103.68.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 14:37:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16183 (0x3f37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 12 02:44:22 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ffd086-26e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a0:34:92:88:7f:a6:47:ab:26:63:a4:0d:3c:
                    a1:ff:70:a9:51:c7:e0:3a:5c:0a:1d:55:9c:e1:f6:
                    62:dc:f0:9a:cb:2e:7b:ae:5e:3a:4d:80:cf:4a:14:
                    fd:29:af:7e:e7:db:83:11:c6:4b:25:a4:5e:b7:f6:
                    49:a6:a8:65:ca:48:ca:29:80:19:09:f7:f5:79:15:
                    e4:b2:5c:84:80:ed:90:2b:29:cb:5e:0b:77:cc:f2:
                    e0:25:10:22:65:e3:ed:f7:2e:71:d3:ed:95:35:14:
                    ac:18:47:8e:65:e0:3c:ab:40:d1:76:20:f0:a3:0b:
                    24:e4:06:bf:97:27:89:b5:1a:52:8f:c7:22:fe:8b:
                    11:23:b2:91:d5:76:25:7d:23:5f:2d:44:75:6a:c9:
                    b7:fa:a9:97:55:e0:98:2c:36:33:fc:34:bf:3f:1f:
                    61:8b:f0:1c:7c:8c:7b:71:ba:f7:02:a8:6f:ce:d7:
                    fb:92:25:bc:b3:3e:42:c0:c5:4f:94:b9:e7:82:6e:
                    29:6a:9e:7e:10:ab:0a:76:82:b8:79:7a:42:3c:4e:
                    71:8b:51:df:7d:63:ca:a3:34:f5:df:b2:52:2b:4e:
                    d1:65:d7:35:1d:50:f1:40:7a:ad:f9:c1:ae:98:25:
                    14:b6:5c:fb:df:55:e6:f6:63:eb:04:fe:08:0c:93:
                    4f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A2:5F:9A:19:00:43:69:28:45:9C:7A:5C:D6:05:B5:F2:2B:BD:F2
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5EEDB5FC79E411EC99DA1B51C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:2e:99:f7:cb:28:6a:7e:91:f8:4a:0d:54:ec:b5:e8:70:34:
         2c:7b:2c:d2:23:4a:94:5c:a8:f9:b0:5e:73:b7:c5:d7:f5:33:
         ce:1f:11:cb:b6:b9:32:c3:9b:50:30:e6:7c:72:79:f6:0b:45:
         b8:f1:3d:27:c1:29:22:4c:f3:ed:0c:80:39:6c:98:04:ca:cb:
         5e:95:16:b3:78:80:f7:f6:8d:7a:f5:b1:ec:4e:2e:53:ee:7e:
         da:09:d6:0f:90:34:1a:95:ac:25:79:1e:87:42:ea:86:2f:63:
         93:f6:b2:29:2d:1c:90:77:9f:f9:ba:d4:38:3d:06:8b:c1:0b:
         58:d4:ed:f8:4b:84:9d:87:47:71:68:37:4f:6e:3d:3b:f4:7a:
         ef:49:d2:9c:84:1d:7f:63:37:a7:26:c5:f7:f3:f6:8e:49:c2:
         af:cc:ec:c7:6d:c5:9f:f9:60:19:90:83:c0:c0:88:90:b7:90:
         71:ee:83:6e:d7:07:05:40:46:aa:08:83:5c:8a:4b:99:4f:74:
         20:24:95:b6:2c:49:67:76:1e:a0:41:c8:4a:80:da:93:f1:c2:
         c5:06:fc:af:6e:a4:7a:ed:4e:19:71:32:ce:ce:9f:e0:a8:e2:
         94:f5:3f:15:cb:bb:da:8a:f3:ce:3c:8f:73:24:15:db:4a:62:
         55:b2:e6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 19:10:32 2024 by rpki-client on console-ams.rpki-client.org