Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/C53629FEEACE11EEA8513D34C4F9AE02.roa
File:                     C53629FEEACE11EEA8513D34C4F9AE02.roa (raw, json)
Hash identifier:          cNSIKDFXPz0jEje5WNOnX3Fx9CZkEBcmkqyne+pMwE0=
Subject key identifier:   6D:2A:D5:B1:FB:A5:B2:B1:78:2A:63:AF:11:75:0F:9C:8A:18:C6:E5
Certificate issuer:       /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial:       0A76
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/C53629FEEACE11EEA8513D34C4F9AE02.roa
Signing time:             Mon 25 Mar 2024 17:40:29 +0000
ROA not before:           Mon 25 Mar 2024 17:40:29 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     141351
IP address blocks:        103.116.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
                          rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 20:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2678 (0xa76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
        Validity
            Not Before: Mar 25 17:40:29 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6601b70d-30bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:ad:88:93:df:19:2b:cd:32:72:e9:f0:af:
                    32:71:73:50:44:8b:c0:dc:7a:f1:f6:a8:c2:88:6c:
                    88:ce:97:13:b3:48:da:4e:85:21:81:f5:20:44:79:
                    0a:ef:c3:67:04:41:58:0c:e9:20:cb:d6:7c:20:bb:
                    67:b4:4c:37:c5:dc:ef:8d:4e:4a:cb:1d:50:79:9f:
                    58:7e:f4:94:59:2c:f9:66:60:1d:98:e6:14:b9:5e:
                    e7:9d:df:68:c4:47:cf:1d:f7:74:79:3c:26:5e:29:
                    50:65:98:d1:d3:04:92:96:19:9f:8e:ed:70:3f:20:
                    91:18:a1:91:0e:43:cf:54:9c:e5:56:1b:56:6b:4d:
                    cf:f9:c3:82:f0:e2:81:92:da:56:15:7c:08:10:2e:
                    ce:79:bf:dd:b2:d2:e6:66:8e:1e:28:ac:ba:01:2c:
                    a8:f2:25:0a:7f:c9:0c:5d:0d:46:d1:1a:05:e4:91:
                    99:fb:0a:c2:f3:e3:76:d9:e2:d5:cd:81:55:a0:47:
                    92:b7:db:96:d3:2a:a4:91:0c:25:18:3e:55:5c:ca:
                    90:1a:80:08:42:e7:c6:27:1a:0d:08:2e:ad:95:74:
                    95:f6:98:58:32:0a:60:fd:70:1d:44:79:64:5d:05:
                    cd:48:da:fa:3c:c1:12:f1:e5:cf:c0:db:b0:bc:2c:
                    84:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2A:D5:B1:FB:A5:B2:B1:78:2A:63:AF:11:75:0F:9C:8A:18:C6:E5
            X509v3 Authority Key Identifier:
                keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/C53629FEEACE11EEA8513D34C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:f2:c9:62:36:3f:16:77:bf:5d:f4:c0:49:c5:91:bc:2f:ad:
         03:38:0c:f4:97:8d:49:05:a1:ef:30:9d:c3:e2:2c:98:bb:9f:
         d8:07:dc:e6:bb:b3:66:d4:3a:36:4c:fc:04:d4:b7:37:24:ad:
         dc:b8:16:1f:64:c8:0d:3b:e4:23:df:05:fa:1c:43:1e:5c:25:
         4a:8c:cc:c0:05:2c:04:56:54:57:3c:f9:d1:f2:9f:d0:01:42:
         bd:b4:72:3f:5e:ec:ed:d0:ec:ee:86:2a:5f:bd:7a:65:a4:f2:
         0f:65:58:af:06:c4:e0:18:15:2d:cf:16:e1:7e:63:3f:2f:0d:
         77:e7:b5:5c:2d:e8:23:6c:0b:78:02:7f:53:a2:fd:a5:4f:07:
         09:f6:60:7e:79:11:db:c5:d2:ea:fe:0d:d5:ba:d0:56:46:64:
         6c:fc:f4:c1:4e:b5:2e:94:93:99:79:86:6f:92:6d:34:de:70:
         03:4c:b9:c6:0b:6e:b4:52:a2:73:77:76:94:e5:1b:81:90:88:
         e5:16:2f:44:25:0e:00:66:b8:e7:5f:ed:e8:6e:89:3e:1f:c5:
         6d:3d:90:85:27:15:0c:66:7f:96:af:59:68:66:60:bc:c1:03:
         2f:64:82:66:1e:ec:20:ab:d5:49:3e:e8:06:80:7a:e3:ee:63:
         6c:5b:e6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:13:31 2024 by rpki-client on console-ams.rpki-client.org