Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/5563895C378911EABB08EC0EC4F9AE02.roa
File:                     5563895C378911EABB08EC0EC4F9AE02.roa (raw, json)
Hash identifier:          WnvG/G2ljF/bLCjnLck6amfr8nqRxURnaP7xF6JQcoo=
Subject key identifier:   05:62:6A:5A:01:38:FB:70:B5:A4:3C:E9:94:EC:0F:9F:FC:05:BC:91
Certificate issuer:       /CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752
Certificate serial:       0CA6
Authority key identifier: D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/5563895C378911EABB08EC0EC4F9AE02.roa
Signing time:             Tue 22 Oct 2024 18:26:57 +0000
ROA not before:           Tue 22 Oct 2024 18:26:57 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     139667
IP address blocks:        103.143.88.0/23 maxlen: 23
                          103.143.88.0/24 maxlen: 24
                          103.143.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl
                          rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3238 (0xca6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752
        Validity
            Not Before: Oct 22 18:26:57 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6717ee71-2298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:da:60:28:5c:28:77:94:8e:19:1b:6c:8a:44:
                    50:cd:d9:76:f7:9d:04:d7:ce:e1:c2:15:28:5b:17:
                    df:b7:8d:9d:a9:11:53:e5:6b:3f:c8:d5:88:bc:8a:
                    ec:8d:1c:d9:a3:17:e3:b9:c0:ee:b2:b2:87:08:57:
                    31:6b:7b:ed:56:fc:2f:fb:51:76:53:fc:ca:87:1f:
                    a9:af:7f:f2:89:26:20:53:23:ad:10:be:c3:f4:15:
                    61:89:0c:3a:3e:eb:1d:d7:a0:bd:90:cb:b8:93:8a:
                    4b:4f:b1:d7:42:af:3d:7b:90:d3:1d:8a:a4:2f:63:
                    b0:b9:a0:24:15:19:b9:ee:5a:20:4a:68:00:e6:fb:
                    c2:53:43:43:0a:4c:90:da:7d:20:93:f8:da:19:4e:
                    19:97:4c:f2:f5:c9:92:9d:e4:da:72:f8:cc:9b:fd:
                    e6:b9:f4:69:91:42:cd:02:29:65:5e:82:7c:39:9c:
                    57:a0:60:96:e0:b2:1a:36:cd:16:fe:36:b6:c9:10:
                    2d:5b:29:10:ec:27:2c:b4:55:ab:f8:c3:59:12:ad:
                    c5:a6:1b:d7:6d:93:f5:59:97:bc:19:d2:c1:24:9a:
                    8b:e5:02:80:60:71:fc:16:e0:16:e6:de:18:dd:be:
                    7b:ee:40:97:01:bd:f0:89:46:4a:c3:4e:c1:a4:6c:
                    ca:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:62:6A:5A:01:38:FB:70:B5:A4:3C:E9:94:EC:0F:9F:FC:05:BC:91
            X509v3 Authority Key Identifier:
                keyid:D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/5563895C378911EABB08EC0EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:59:0b:c3:c4:0c:43:33:a0:d7:57:5f:ea:69:e5:98:fa:c1:
         ac:52:66:62:c6:94:f0:6a:45:67:11:41:2b:68:17:a6:0b:bd:
         35:8e:e2:c8:d9:07:16:ea:31:2a:d4:81:69:46:43:42:4c:00:
         1c:6a:59:bd:8f:32:f5:c1:3c:c1:17:2b:78:6f:3c:85:0d:af:
         f0:6e:4e:59:82:df:3d:41:04:d7:c1:84:22:9a:5e:8c:1b:bf:
         e1:04:3e:52:d3:4d:d0:88:0d:92:02:64:4d:58:ca:e3:8c:4c:
         bd:bf:c8:31:bd:42:35:75:0a:ce:32:1e:13:44:81:90:2c:02:
         22:73:53:98:7a:c5:6a:f2:0f:86:20:28:92:0f:ad:a9:21:74:
         90:53:a0:04:12:04:49:6c:75:01:a2:12:8d:4a:6a:4e:e0:9e:
         fe:ab:de:8e:7c:8d:2c:c6:34:47:88:f6:2a:3d:52:0e:97:94:
         e3:f4:b6:6c:fa:4d:eb:60:1c:94:5a:7a:43:50:46:a1:5e:2b:
         a9:4f:a3:fd:36:11:3c:77:0d:8f:a4:fc:f8:1e:b4:41:49:6d:
         f2:fc:ea:47:39:d3:29:c8:bb:40:fa:4c:f8:f7:d6:28:b4:0c:
         fc:65:fa:2e:f2:7b:57:9e:e4:a2:c0:4b:33:ac:5a:d3:25:82:
         08:11:42:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:02 2024 by rpki-client on console-fra.rpki-client.org