Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/B5A7B020DBDB11EB8EC1494EC4F9AE02.roa
File:                     B5A7B020DBDB11EB8EC1494EC4F9AE02.roa (raw, json)
Hash identifier:          RmQ8zbwrgPfWmABubjovTPZFuV0KwF8EcH+Qm23I29E=
Subject key identifier:   B1:E2:49:72:3D:C9:BC:E9:36:BD:81:CF:2B:0B:89:B4:9B:AB:90:53
Certificate issuer:       /CN=A91D4DC1/serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB
Certificate serial:       04C5
Authority key identifier: 76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/B5A7B020DBDB11EB8EC1494EC4F9AE02.roa
Signing time:             Fri 31 May 2024 02:37:26 +0000
ROA not before:           Fri 31 May 2024 02:37:26 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     58602
IP address blocks:        103.8.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl
                          rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1221 (0x4c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4DC1/serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB
        Validity
            Not Before: May 31 02:37:26 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665937e5-d1f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0a:68:f5:88:1a:e9:3c:fa:41:1e:b4:60:f9:
                    05:cc:f6:ae:a9:c5:65:da:3a:c1:1f:6b:e7:40:ec:
                    a6:1b:9d:0b:5d:84:d6:dd:eb:2b:ae:e2:fc:d4:57:
                    be:63:ff:ab:cf:6b:a1:de:da:b5:07:44:66:13:ad:
                    c5:ba:ec:0c:16:d9:31:b4:24:d5:13:47:38:9c:71:
                    ac:e6:e9:83:d0:ec:b5:d5:6c:79:4a:7a:95:74:a1:
                    07:81:83:7d:15:e7:3a:e0:fa:56:2a:aa:c6:a9:ac:
                    bb:3c:56:77:b6:39:cb:e1:e0:3d:d6:27:40:dd:22:
                    83:63:f1:6e:2e:b9:04:57:ec:04:9b:e7:c5:f7:9f:
                    cf:bb:52:84:21:60:8d:1a:5f:f7:7b:a6:ee:22:6c:
                    25:4b:07:8c:c8:52:66:89:db:12:cd:83:5f:72:59:
                    3f:42:0a:04:60:0c:44:b4:c3:38:65:fd:bb:1a:97:
                    53:5c:7a:15:61:ce:90:13:60:a2:e5:e4:ec:35:3f:
                    f8:2a:be:e7:a6:8d:d8:e0:e5:95:bc:93:96:d7:e1:
                    be:c7:cf:5c:34:08:62:dd:78:7c:f4:ec:06:eb:ab:
                    24:5d:9f:37:d2:c2:86:0a:ee:8f:08:55:2a:9a:e5:
                    6e:a5:10:a0:6c:6e:bf:0b:e0:2f:d2:ef:73:79:72:
                    f2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E2:49:72:3D:C9:BC:E9:36:BD:81:CF:2B:0B:89:B4:9B:AB:90:53
            X509v3 Authority Key Identifier:
                keyid:76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/B5A7B020DBDB11EB8EC1494EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:44:d2:31:11:03:65:51:5c:92:40:54:3c:22:c5:2b:1b:a2:
         5b:ef:c6:71:df:f5:cf:e8:34:11:28:24:2d:82:70:85:42:b7:
         86:e5:1d:02:20:f4:47:ad:27:ae:83:93:2f:ad:62:60:c2:be:
         a3:29:e0:be:6e:e3:31:58:bc:b8:37:8c:02:36:c4:aa:ab:f9:
         e7:a1:19:30:1a:b8:67:da:84:b5:fc:ef:ae:c9:f6:ac:e8:62:
         49:25:07:3e:86:64:e7:71:e1:91:55:1c:a5:d9:3a:ae:b9:ce:
         09:a5:d3:d6:86:b0:41:6d:6d:fe:df:a2:86:49:c6:34:c8:50:
         fe:41:6d:35:f8:9d:f8:77:57:57:4b:6f:ef:d5:da:60:11:95:
         09:92:27:2c:33:51:92:e9:54:38:4e:01:85:77:48:21:69:d6:
         d3:70:04:9b:f8:c2:1a:86:33:72:b0:46:ad:4f:ba:1f:46:a0:
         ff:74:b5:a4:07:53:84:cd:b2:e3:c4:e3:f1:a4:35:a8:36:99:
         c4:71:82:bd:ba:7a:ec:23:e8:ae:18:1c:b5:35:6e:8a:88:86:
         e6:75:5f:b0:70:90:87:91:07:96:79:3d:a8:67:02:b9:68:55:
         94:dc:09:7b:a0:c0:7f:09:26:b3:2a:32:cd:42:a1:ea:43:6d:
         a8:bf:58:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org