Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/55BC5674573F11EAA8901D3EC4F9AE02.roa
File:                     55BC5674573F11EAA8901D3EC4F9AE02.roa (raw, json)
Hash identifier:          rdqj8/PeZ1X7JbGyHFdOgeZIkKmjTUjAK8v5yOyh4l0=
Subject key identifier:   82:0E:68:57:0E:39:16:DC:C2:EE:4A:73:38:18:5C:13:AA:93:7D:7E
Certificate issuer:       /CN=A91190B4/serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658
Certificate serial:       09C7
Authority key identifier: A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/55BC5674573F11EAA8901D3EC4F9AE02.roa
Signing time:             Thu 14 Mar 2024 20:39:20 +0000
ROA not before:           Thu 14 Mar 2024 20:39:20 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     4049
IP address blocks:        103.16.20.0/22 maxlen: 24
                          2405:e840::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl
                          rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2503 (0x9c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91190B4/serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658
        Validity
            Not Before: Mar 14 20:39:20 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65f36077-43ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cd:e9:98:8c:2e:0f:a0:ab:a0:9e:3a:97:ed:
                    b1:3d:06:36:ae:db:66:3e:0e:52:6d:7f:7b:f0:8a:
                    c8:83:0c:78:1e:d4:a1:77:b5:f0:1e:48:11:a6:04:
                    7e:f6:cd:de:67:e8:ee:d8:7c:8a:96:7b:e6:4f:fc:
                    74:e1:2a:66:a4:61:95:b9:f2:ae:eb:1e:40:ed:65:
                    7d:19:7d:de:e0:d0:64:e0:83:cf:f6:9b:9e:4c:6c:
                    b8:7e:ef:e4:a4:d8:18:db:b4:70:44:71:41:33:53:
                    73:d6:ee:05:7f:7a:1b:e7:e2:ed:23:5a:e1:9d:cb:
                    f9:8e:05:1e:9b:9b:d3:29:60:b6:92:d6:5c:f7:7c:
                    85:66:76:ae:00:90:38:45:b1:fb:92:c2:fb:15:cc:
                    ae:4b:29:0d:bf:9a:08:6d:73:1d:8f:f5:35:e1:92:
                    62:04:28:c3:10:40:38:b6:bc:c5:e8:7f:6a:26:c7:
                    cb:d8:2e:b6:19:1d:74:06:c5:82:78:b1:4c:e3:52:
                    a3:3d:d5:e6:ce:5e:50:a1:71:51:2e:e3:a0:c9:82:
                    94:23:a4:a3:61:2b:80:92:cb:f9:ab:7f:90:f2:00:
                    09:6d:1b:14:66:b7:6f:a6:dc:70:4b:bf:c2:a8:bf:
                    2f:94:19:e0:4a:41:28:80:6a:30:13:0f:a5:11:3e:
                    3f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0E:68:57:0E:39:16:DC:C2:EE:4A:73:38:18:5C:13:AA:93:7D:7E
            X509v3 Authority Key Identifier:
                keyid:A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/55BC5674573F11EAA8901D3EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.20.0/22
                IPv6:
                  2405:e840::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:f5:16:ec:32:02:8e:ec:1a:42:fc:79:bb:e6:04:e4:90:94:
         83:65:bc:96:b1:3f:71:8e:05:d8:e0:e6:77:97:45:2d:20:3d:
         22:44:45:0c:58:d9:aa:d1:c8:1b:05:16:a5:a9:b6:16:49:ba:
         98:b5:3b:46:4d:da:3a:ec:44:3f:a2:68:96:77:67:82:f9:18:
         8b:8f:18:6f:00:52:ee:4a:ba:22:64:56:7d:5f:ca:c4:f3:b5:
         41:c5:bf:a2:8f:5d:27:53:aa:77:e9:3e:39:f2:1c:09:a9:a9:
         70:89:04:98:91:f7:d3:fe:4f:34:0f:a2:24:bf:3f:08:ce:8f:
         f5:a6:de:1f:94:ac:f0:13:56:a7:4b:f7:a6:41:9a:8f:5e:7d:
         25:f7:0b:07:61:86:f5:cb:69:cf:58:be:aa:94:08:70:ee:86:
         49:18:c3:08:82:61:f4:7d:97:2e:85:53:89:c5:15:6f:d9:00:
         1f:1b:38:da:b4:27:43:54:66:a8:54:8c:8e:59:37:2b:4a:86:
         db:04:d6:61:01:b6:56:9f:39:a9:e4:90:bb:83:bc:f4:39:e6:
         3e:28:da:7d:7e:3a:12:9f:c4:ad:d2:d4:5f:5b:17:2d:dc:ce:
         4e:40:32:0d:e9:8f:7f:c9:00:21:67:89:a4:b5:07:19:8e:43:
         86:c2:89:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:21 2024 by rpki-client on console-ams.rpki-client.org