Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E5E11D4093BD11EC8B2D9A58C4F9AE02.roa
File:                     E5E11D4093BD11EC8B2D9A58C4F9AE02.roa (raw, json)
Hash identifier:          2fjArFcngH71lgLA35e55hWGCS67+9vNpdwTSkPGiH4=
Subject key identifier:   6B:F5:BE:98:4B:1B:D9:A2:5A:63:F2:02:BC:6A:54:73:54:63:5B:34
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3E75
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E5E11D4093BD11EC8B2D9A58C4F9AE02.roa
Signing time:             Tue 12 Sep 2023 02:41:33 +0000
ROA not before:           Tue 12 Sep 2023 02:41:33 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     135936
IP address blocks:        103.109.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15989 (0x3e75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 12 02:41:33 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ffcfdd-17b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:45:c3:21:b0:7b:64:77:88:ed:d8:e7:c7:40:
                    08:f2:33:82:32:47:b1:82:7e:ea:9d:43:cf:5a:b9:
                    36:2c:5b:19:d8:e0:35:54:f4:df:27:30:f8:02:39:
                    ec:5e:dd:1a:4d:40:f5:de:2e:6e:48:11:f7:59:1e:
                    cd:d2:21:1e:28:f7:67:e8:80:ef:80:4f:22:52:6c:
                    2f:86:6c:fc:94:0d:bf:d2:d3:ac:bc:d0:04:c2:d0:
                    c4:27:f9:e1:06:a0:03:9a:4d:ca:97:49:05:74:a2:
                    76:b7:e2:f4:67:fa:80:7f:53:cd:dc:d7:cb:da:ae:
                    3d:72:38:28:40:26:2a:5b:9b:36:3e:c1:b4:2b:d6:
                    33:fa:79:72:26:ca:74:b7:45:c9:61:42:0b:4c:04:
                    54:3c:a1:ab:d4:df:7e:4b:c3:3f:f1:6a:2c:15:d8:
                    99:8f:8b:dc:a6:d8:c9:e5:8e:6f:84:56:af:9c:35:
                    65:9c:de:d8:08:0b:3c:c1:60:78:c6:2d:a1:5f:08:
                    3f:0a:60:7d:37:57:28:e6:45:ca:8a:ff:da:e7:74:
                    f6:d3:36:39:c1:ec:8d:60:b3:15:ee:85:8a:f0:27:
                    e3:38:a6:67:26:17:b1:75:a0:c8:2d:cb:cf:52:e2:
                    fe:10:e1:bd:c7:03:b3:49:48:02:74:05:3c:7b:d9:
                    f9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F5:BE:98:4B:1B:D9:A2:5A:63:F2:02:BC:6A:54:73:54:63:5B:34
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E5E11D4093BD11EC8B2D9A58C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:78:6c:82:16:6f:95:a7:7f:76:68:e0:4d:90:e4:13:b9:1e:
         89:99:99:d7:6b:d4:4e:e7:bf:66:c0:ce:96:62:6d:cc:f0:88:
         b1:f9:47:fd:3e:8b:c7:78:c6:23:04:91:fc:fc:52:1f:5b:db:
         67:53:e8:6b:2d:45:7e:79:88:d8:f3:49:ca:62:8e:af:6f:ba:
         7d:a3:c5:c3:37:2b:44:13:35:ae:56:c6:d3:3e:8a:d4:ec:d0:
         c2:f3:34:7d:b8:13:9a:62:2b:a8:74:af:48:6f:bf:65:b6:e4:
         6f:54:53:4e:13:02:9f:af:32:e5:78:3d:44:84:a9:95:96:96:
         ea:78:7c:04:df:fc:d8:d4:82:56:66:7d:8d:30:f4:ef:71:e3:
         0a:e5:48:86:99:73:35:08:ba:95:68:a5:16:b4:74:ce:d1:bf:
         c9:5a:db:b3:f6:bc:de:77:c6:bb:ce:83:17:b3:e8:4a:5f:d8:
         66:b0:b0:a2:fd:a2:3b:e2:92:2c:77:88:2d:0d:e1:0e:46:ee:
         dc:95:c1:fa:ec:f3:68:dc:8c:c5:8b:68:c9:8a:55:27:65:b7:
         64:33:ab:02:9d:2c:c9:1b:78:86:61:ff:61:b1:7d:07:87:42:
         89:89:73:3a:79:7b:9e:3a:f2:a8:94:b6:4f:33:0f:8a:71:5c:
         e4:99:01:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 16:41:41 2024 by rpki-client on console-ams.rpki-client.org