Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/92C1EB1E044111ECA6AF2D4BC4F9AE02.roa
File:                     92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (raw, json)
Hash identifier:          eZ0VmxXOP11xwIAOMdTqb1lUHDMDXhbutgz1qbxhGRY=
Subject key identifier:   64:73:E8:C7:EC:4D:1A:BC:12:13:0D:C7:3B:A9:2B:45:22:A9:C4:8B
Certificate issuer:       /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Certificate serial:       0438
Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/92C1EB1E044111ECA6AF2D4BC4F9AE02.roa
Signing time:             Sat 15 Jul 2023 00:21:03 +0000
ROA not before:           Sat 15 Jul 2023 00:21:02 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     142421
IP address blocks:        103.168.40.0/23 maxlen: 24
                          2001:df6:cc80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
                          rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 02:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1080 (0x438)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
        Validity
            Not Before: Jul 15 00:21:02 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64b1e66e-4dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ad:28:05:cc:9e:df:b2:1f:32:2e:a3:90:18:
                    18:3e:be:82:8b:09:a4:a6:bf:88:c4:48:9d:d1:f3:
                    9b:04:fe:6b:55:e3:f9:59:e5:bb:e9:16:fa:d7:50:
                    37:8b:e4:f5:99:46:8f:36:6a:eb:c9:44:35:ab:36:
                    9f:e2:42:7d:78:26:2d:9e:95:96:fe:1b:69:bc:a8:
                    e4:4d:3a:b6:1b:04:1a:9a:bd:c5:25:82:1a:a7:71:
                    eb:75:22:38:f3:1d:8f:c1:98:f3:e7:a3:a7:e8:a4:
                    7c:8a:c6:ac:ba:11:b7:fc:9f:c6:a4:97:b6:e8:a1:
                    c3:4e:df:ce:46:2c:5e:1c:35:ca:5e:6b:3b:c0:31:
                    28:2f:34:8f:0a:d7:cf:35:40:aa:84:6f:b5:72:b3:
                    58:fd:a5:d8:ed:58:64:21:a7:e1:78:09:97:1d:49:
                    94:86:67:1d:17:e4:63:d3:f9:44:bd:22:50:2b:88:
                    82:70:de:8b:8e:2a:a9:77:e9:6c:67:f1:8a:16:22:
                    78:c0:6c:3a:38:e2:78:3c:28:73:f7:56:67:af:56:
                    4d:d9:85:d0:78:33:72:43:ac:4b:49:29:76:b5:ca:
                    78:07:67:2c:a2:27:4c:17:ba:1c:32:d3:69:27:9f:
                    92:43:11:9d:76:1c:51:55:95:e8:12:79:0c:c3:e8:
                    b8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:73:E8:C7:EC:4D:1A:BC:12:13:0D:C7:3B:A9:2B:45:22:A9:C4:8B
            X509v3 Authority Key Identifier:
                keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/92C1EB1E044111ECA6AF2D4BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.40.0/23
                IPv6:
                  2001:df6:cc80::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:02:09:d5:e3:34:ac:3a:24:f1:1e:0e:d9:47:ae:b0:86:7a:
         2c:4a:39:4c:bb:e9:46:60:41:94:33:b6:0e:01:a5:46:c7:25:
         80:be:8d:05:39:d2:5a:af:3c:22:9a:09:4d:68:57:2a:38:59:
         8c:36:ad:65:36:91:22:1b:97:5e:40:eb:ef:4f:bf:83:2e:48:
         0c:3b:80:4c:ae:ed:1b:c2:91:77:b0:62:0d:9c:51:a9:c2:11:
         50:2a:51:60:dc:bc:8d:08:fb:b9:f7:c3:b3:e2:91:ff:65:99:
         7e:e9:3b:46:a1:15:47:c4:24:ff:c1:05:c4:5b:c4:57:63:71:
         03:db:43:aa:e4:91:f6:b2:9e:b2:59:02:b6:22:0b:ac:ad:a1:
         18:be:51:44:70:33:cd:25:af:5e:c6:3e:da:c3:b5:ac:31:22:
         bf:2f:14:1a:a4:18:3f:7c:43:9d:97:f5:9a:6e:c1:dc:aa:8f:
         b5:f5:84:fb:8c:ea:7c:76:11:96:fc:7a:d3:ef:6d:67:2f:5a:
         b3:9c:5d:a1:47:83:25:07:d9:d4:93:ec:89:82:ce:b3:b4:2b:
         06:71:bb:cc:de:02:4a:40:ae:f2:45:93:9c:68:26:60:e2:86:
         21:e3:d6:27:c9:e4:10:ce:09:6e:b8:cd:74:69:e1:52:d4:3d:
         a7:2c:32:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:55:18 2024 by rpki-client on console-fra.rpki-client.org