Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/5B39EBD693B511EF8AEA6810C4F9AE02.roa
File:                     5B39EBD693B511EF8AEA6810C4F9AE02.roa (raw, json)
Hash identifier:          bSwFDk6awCLG4yCeUFAgFzFigutUzb6MBdN06ltlpqE=
Subject key identifier:   1F:F4:B4:9A:2B:D1:E6:43:37:2C:50:B4:02:99:90:77:5C:6A:E5:9C
Certificate issuer:       /CN=A91338F0/serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2
Certificate serial:       05
Authority key identifier: 83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/5B39EBD693B511EF8AEA6810C4F9AE02.roa
Signing time:             Sat 26 Oct 2024 16:14:20 +0000
ROA not before:           Sat 26 Oct 2024 16:14:20 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     59241
IP address blocks:        203.56.90.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl
                          rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91338F0/serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2
        Validity
            Not Before: Oct 26 16:14:20 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=671d155c-91b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e8:c2:cd:6d:25:8b:93:b5:d1:27:c8:76:5b:
                    9a:cf:e9:c3:a5:46:3a:dc:79:90:13:5b:c2:e4:47:
                    12:76:97:56:78:b2:31:aa:97:b1:10:b4:a4:20:ac:
                    de:a6:dc:92:db:45:a9:22:c1:38:da:a5:eb:33:e9:
                    d0:8d:f5:c8:c4:28:4c:e8:b6:17:e7:3f:e6:2f:85:
                    31:3a:a5:7c:d4:c1:01:c2:9b:76:94:81:4b:98:6c:
                    0a:a1:b7:49:20:f8:34:a5:59:10:18:f2:cf:44:d6:
                    11:b8:fb:86:30:20:a4:6e:ce:db:26:b9:df:d4:fd:
                    98:aa:ab:ed:78:6f:98:b2:85:98:7b:7e:e5:52:22:
                    62:57:a2:da:ec:d1:fc:92:92:35:64:b7:a5:d2:14:
                    5f:07:4b:06:3a:7b:c6:e1:4c:4b:f0:47:46:de:78:
                    da:d9:45:55:3f:be:6e:91:9e:ff:ca:cc:ba:04:05:
                    ce:be:6c:38:4e:64:0f:ba:52:4b:1f:c7:8d:56:9f:
                    f3:d7:06:ee:21:32:16:54:f4:a8:0a:46:26:91:e4:
                    ea:07:74:13:e5:9c:db:ca:e2:e4:ce:2e:a9:41:5e:
                    ae:b9:9f:8f:18:21:74:71:1c:5b:b9:44:dd:85:fb:
                    a4:1d:4f:e5:88:ae:58:c5:e8:79:8f:f3:b1:cc:10:
                    6a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F4:B4:9A:2B:D1:E6:43:37:2C:50:B4:02:99:90:77:5C:6A:E5:9C
            X509v3 Authority Key Identifier:
                keyid:83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/5B39EBD693B511EF8AEA6810C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.56.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:e7:ca:7d:ee:42:b1:68:e9:ce:86:54:93:a4:54:2f:cc:0c:
         34:e7:91:99:6f:20:00:6f:85:4f:19:5f:9c:11:88:ef:d0:cb:
         9d:dc:35:33:5c:93:8a:c4:a2:4d:cf:e0:9e:59:1f:93:3f:7b:
         d4:90:a1:4b:c5:08:4f:6c:ea:c9:bb:e8:d7:96:1e:62:a2:7a:
         76:02:9c:5e:15:01:d6:2c:99:c0:f3:f8:d2:fb:e1:7d:34:45:
         ad:bc:4d:2b:c1:1b:16:d7:c7:34:e4:69:63:12:52:df:d4:0f:
         f1:21:1a:76:f8:67:10:be:46:6e:ad:7f:72:12:4e:4f:4c:57:
         25:b5:24:b8:e5:94:7f:7b:d0:8d:b3:99:a4:07:a4:0e:65:c5:
         64:82:25:2a:5f:90:2e:25:3a:d3:22:01:60:a5:ab:06:78:c2:
         35:36:7f:82:d7:08:80:bc:bb:83:4e:4c:40:03:be:ed:48:13:
         99:2b:c1:20:49:9f:ec:fd:0e:4a:51:d8:5c:79:16:c4:54:56:
         7d:54:73:0c:56:47:c8:99:67:02:35:11:1a:0a:a2:ef:b7:ed:
         3a:7c:7b:4b:96:c3:26:02:24:51:aa:24:0e:bf:87:30:57:49:
         71:ec:bf:4a:04:6f:a7:79:c1:ae:d2:84:d3:31:99:ed:d1:c7:
         4a:42:e2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:01 2024 by rpki-client on console-ams.rpki-client.org