Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/567C8DB8354111ECBCC05B63C4F9AE02.roa
File:                     567C8DB8354111ECBCC05B63C4F9AE02.roa (raw, json)
Hash identifier:          LzWsufD3jBLBFlEvCAE5s8+avOurxtPFYFkw78OGI9U=
Subject key identifier:   B5:6A:F5:30:DE:9D:99:DB:52:AD:DE:22:FE:B7:03:B5:04:4B:6C:A8
Certificate issuer:       /CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
Certificate serial:       03F1
Authority key identifier: 53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/567C8DB8354111ECBCC05B63C4F9AE02.roa
Signing time:             Wed 23 Aug 2023 00:41:53 +0000
ROA not before:           Wed 23 Aug 2023 00:41:53 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     133329
IP address blocks:        103.141.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 02:39:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1009 (0x3f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
        Validity
            Not Before: Aug 23 00:41:53 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64e555d1-b0fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:03:1b:68:c1:9f:08:8e:bb:04:d9:f5:ad:da:
                    55:f9:48:2a:6e:0d:e4:82:b4:5e:9d:44:3a:be:76:
                    bb:31:46:ff:c5:bf:95:91:ec:1b:34:cf:f8:37:2e:
                    24:62:cf:5d:5e:bb:05:f6:9f:a4:98:dd:3e:a8:80:
                    16:6e:2e:80:90:1c:21:53:77:b0:cc:5b:9e:af:10:
                    8b:40:43:ad:67:c8:fa:b7:e9:b9:86:e6:c2:78:29:
                    0b:d5:fd:05:29:ef:95:fd:ec:7a:00:7f:f4:be:dd:
                    98:c9:a5:b2:1b:1b:69:26:4a:62:69:75:bc:8e:7b:
                    df:e4:e5:c8:9d:9a:93:86:ef:e9:29:f5:4f:90:0b:
                    40:99:f3:39:59:fc:1b:c1:71:6c:72:f2:14:7c:2e:
                    e5:99:72:5c:79:11:29:9f:c4:e4:a2:b9:81:b6:84:
                    d5:63:6f:5f:d9:73:4c:e6:01:45:f6:51:ea:16:7d:
                    90:21:58:c5:27:20:69:1a:df:9c:2e:23:3d:7f:12:
                    6b:fe:cb:8b:51:34:4c:aa:53:11:81:65:52:41:c3:
                    b4:11:9b:92:ec:1d:95:a1:64:9e:40:27:ff:5b:27:
                    eb:f3:b8:f8:8c:0d:be:89:e7:80:39:3a:dd:5e:3b:
                    b2:43:58:c6:b7:76:9d:b8:ae:96:c5:20:d6:dd:cc:
                    45:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6A:F5:30:DE:9D:99:DB:52:AD:DE:22:FE:B7:03:B5:04:4B:6C:A8
            X509v3 Authority Key Identifier:
                keyid:53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/567C8DB8354111ECBCC05B63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:e3:93:34:0b:30:3e:0f:37:50:20:ad:f3:3d:fd:27:65:32:
         09:32:ff:24:c3:69:e1:ef:1c:87:c1:88:89:1a:77:a8:ed:99:
         f1:57:30:03:da:16:45:ab:ac:fd:19:fc:d2:cf:8a:4e:f0:62:
         54:38:e9:4a:4a:ab:8e:7a:12:bb:a4:b9:2c:f7:a9:3d:20:7e:
         7f:a9:15:83:d8:c9:6b:41:9b:41:4d:0c:e1:64:98:6c:32:99:
         11:e6:41:a0:ab:10:7e:53:72:91:bf:85:59:15:bb:a9:75:e7:
         e3:3a:2f:10:f8:ca:63:78:2d:a3:90:2c:b3:43:54:f3:1b:62:
         a9:e9:e9:02:b1:c7:3d:c8:52:17:55:7b:ba:cd:da:ec:7e:20:
         26:55:f0:4c:d8:04:09:ef:66:91:ae:d9:ed:bb:1a:e1:83:c5:
         40:c9:ca:0f:11:9d:b1:3b:d9:73:75:f9:3a:e4:20:5a:e3:f6:
         13:2f:c7:ce:24:d6:1f:5a:38:b1:b4:c1:77:71:01:48:e6:cc:
         2b:e9:dc:4f:99:c9:15:9c:57:f9:13:d7:36:7c:a2:a4:5b:7e:
         02:73:72:8f:32:07:c8:dc:ce:83:13:9f:e8:3b:c0:af:77:c5:
         0e:01:65:ab:db:5f:cd:39:14:32:ad:17:e3:7b:fd:68:19:73:
         f6:c7:b4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:07:30 2024 by rpki-client on console-ams.rpki-client.org