Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/C5186FA283D311EEADE09225C4F9AE02.roa
File:                     C5186FA283D311EEADE09225C4F9AE02.roa (raw, json)
Hash identifier:          OSo59yjptase6UYWjPMVEsoK3BFfSOe7jd8A1zwV3Eg=
Subject key identifier:   6B:DC:15:2C:1E:40:FC:3E:75:AE:47:3B:06:84:37:21:7C:E5:82:D1
Certificate issuer:       /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial:       0604
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/C5186FA283D311EEADE09225C4F9AE02.roa
Signing time:             Wed 01 May 2024 00:32:58 +0000
ROA not before:           Wed 01 May 2024 00:32:58 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     135341
IP address blocks:        103.136.106.0/24 maxlen: 24
                          103.136.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
                          rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 00:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1540 (0x604)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
        Validity
            Not Before: May  1 00:32:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66318dba-c1d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:24:08:cf:da:78:05:e7:67:6c:75:17:d5:
                    fb:28:f6:6d:37:f4:a6:e6:48:ed:f9:16:18:26:ce:
                    8c:d3:56:c3:2c:bc:58:af:ce:05:e2:8a:f0:49:8f:
                    48:e5:e1:d6:fc:a6:a1:34:c6:8a:5f:59:6f:dd:ef:
                    88:f6:b5:55:75:b5:a1:84:62:64:5c:e9:10:fe:48:
                    50:38:9c:24:3b:25:f1:db:16:e3:f1:98:a6:23:b4:
                    9b:35:e8:9c:5f:0b:98:fb:ec:0c:90:0e:e8:a2:48:
                    ab:e4:66:40:b0:8b:7f:fa:d5:e8:58:6c:d6:19:4f:
                    54:ea:e6:21:0e:7e:94:5b:79:d3:3c:ae:c0:ee:ae:
                    2b:d5:cc:97:cf:cd:56:2f:3c:24:da:cf:13:af:0b:
                    e7:7f:32:ac:fe:55:75:f1:d6:a5:d0:8a:34:21:06:
                    50:1f:aa:19:d4:6a:42:80:a6:a7:85:49:78:2a:3d:
                    c7:55:b7:25:9e:ec:59:93:06:99:df:98:3d:de:2d:
                    5e:09:04:a5:73:c5:4f:05:0d:d4:04:67:96:30:98:
                    10:9c:c5:02:b8:1b:c8:69:10:ce:2f:70:fb:f3:8b:
                    98:0d:f0:fe:aa:a3:e0:6f:2e:03:2e:cd:05:af:7e:
                    cd:1c:47:c4:b3:e2:d5:99:3d:64:85:4d:22:f5:fb:
                    5c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DC:15:2C:1E:40:FC:3E:75:AE:47:3B:06:84:37:21:7C:E5:82:D1
            X509v3 Authority Key Identifier:
                keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/C5186FA283D311EEADE09225C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:3e:f9:cb:6e:8e:4b:4f:1a:96:de:1f:e8:3d:38:7d:28:82:
         b1:c9:0f:ff:29:cb:b4:58:0b:af:6b:fe:cf:f7:48:c5:70:d2:
         b0:40:2a:20:3a:85:24:c5:ef:57:fb:22:de:43:d6:c2:ce:46:
         bf:c8:7d:71:0f:81:84:ba:08:d6:25:24:2c:3e:e6:e2:4c:cf:
         44:bf:b7:5f:d1:72:20:0d:9c:6d:30:1a:46:9e:49:f5:57:ab:
         5c:8f:56:d1:96:d3:2a:e0:81:a0:3d:76:e6:22:af:b3:6c:b8:
         4b:74:c2:cd:d3:86:61:38:0f:76:aa:ab:b7:af:51:3e:1d:58:
         fb:f8:44:21:55:5c:ab:bf:d9:df:25:6f:76:8b:b9:7c:dc:15:
         82:14:89:16:e4:da:f8:18:8f:d5:a5:f3:4f:1b:52:9b:8a:5c:
         65:a3:ee:c8:f1:ce:e4:37:e3:05:3c:9d:37:1a:3d:19:6d:06:
         80:ec:d8:af:70:fa:e6:e8:4d:38:5c:b3:2a:de:84:d1:c6:ec:
         4b:4c:96:e0:6c:16:98:25:52:81:22:54:78:c9:c1:38:6b:ab:
         5f:34:01:bd:98:ea:7c:b9:29:3c:2f:e9:d2:a8:9b:c9:06:45:
         f4:67:51:93:55:2e:09:27:aa:44:37:4e:ce:69:46:35:25:78:
         1e:68:05:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 01:41:47 2024 by rpki-client on console-fra.rpki-client.org