Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/57B53F64DE9B11EC9AE23269C4F9AE02.roa
File:                     57B53F64DE9B11EC9AE23269C4F9AE02.roa (raw, json)
Hash identifier:          L+4Lrg0LST+xlCPRZ+c8/SmkJQOixAhrBKDqQLo3DG4=
Subject key identifier:   31:A6:24:30:72:E6:9E:1D:13:6C:67:36:BE:29:01:42:2C:C8:C7:2C
Certificate issuer:       /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Certificate serial:       0313
Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/57B53F64DE9B11EC9AE23269C4F9AE02.roa
Signing time:             Sun 31 Dec 2023 02:24:14 +0000
ROA not before:           Sun 31 Dec 2023 02:24:14 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     136526
IP address blocks:        103.80.132.0/24 maxlen: 24
                          103.80.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
                          rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 787 (0x313)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
        Validity
            Not Before: Dec 31 02:24:14 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6590d0cd-723b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cb:1c:6c:cd:73:e7:ab:e3:06:eb:be:aa:fd:
                    34:b5:58:b2:f4:62:b5:05:93:a9:af:2e:f8:b8:42:
                    94:8f:5e:5c:e4:b0:8d:9d:bd:a6:e2:d5:08:24:be:
                    35:03:5c:da:bf:3c:0f:6d:17:ed:c4:a6:b9:9f:c8:
                    0f:07:f8:c6:40:03:c6:11:1b:75:eb:96:9a:39:98:
                    b5:99:70:8a:14:2e:bf:bd:d7:46:9a:03:34:c6:8c:
                    ef:e8:e3:0f:9c:e4:d8:81:ba:1e:3e:f0:ba:a1:d1:
                    04:64:e3:50:10:f2:fa:a2:57:9a:ba:50:3c:05:52:
                    d9:60:8a:83:f6:ec:7d:5f:0d:da:3a:79:0d:15:a9:
                    82:1f:20:6c:9a:ba:1d:38:86:be:40:a4:72:52:f1:
                    6b:80:68:5e:00:cd:89:96:84:70:bf:b3:4b:5a:85:
                    32:c1:5a:b9:49:35:e2:8c:e5:30:d1:80:f9:a6:9d:
                    8f:59:0b:b9:69:c8:35:5e:e8:22:e3:c4:e2:f8:bc:
                    d1:4e:d4:6f:9b:7f:44:43:aa:b7:54:60:2d:62:62:
                    50:5c:39:59:71:c1:6d:a8:8f:e3:b6:4e:86:9f:bf:
                    88:3d:e9:6a:0e:ca:07:e1:be:5c:21:72:73:9a:e2:
                    2a:7c:91:7c:44:62:9f:bc:bf:99:cd:6c:19:72:fe:
                    ee:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A6:24:30:72:E6:9E:1D:13:6C:67:36:BE:29:01:42:2C:C8:C7:2C
            X509v3 Authority Key Identifier:
                keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/57B53F64DE9B11EC9AE23269C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.132.0/24
                  103.80.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:18:bb:03:e3:2a:34:b8:e8:fd:b9:f9:98:70:6b:31:02:fd:
         5b:66:82:07:c0:a6:98:f3:af:3c:45:01:1b:29:05:ee:0a:55:
         03:57:65:84:c5:4c:d9:4c:e9:dc:d8:34:44:b7:a0:bd:b9:9e:
         57:e0:c1:12:30:9e:2f:cd:a0:41:e3:07:13:ad:65:b0:35:d0:
         4b:84:15:d3:00:cd:2d:4b:02:b4:c1:3f:b9:12:c5:96:48:95:
         e1:5e:b5:26:79:db:d3:23:54:8f:22:ef:2e:32:d8:58:6c:03:
         c8:83:79:3b:8e:01:09:73:9d:d6:d4:53:9b:69:94:fb:49:52:
         17:2a:e2:a7:b9:4f:d3:d1:c2:ab:36:3c:9b:43:c0:06:23:89:
         65:f6:26:6d:d2:c1:2c:77:4c:de:24:aa:6a:8f:b6:11:fd:47:
         3e:95:05:34:8a:a9:f4:67:01:ae:4d:d6:bd:de:54:a3:20:3a:
         fb:f0:a8:21:1b:d8:81:0e:88:11:fb:43:37:fb:81:43:f5:e2:
         cc:d6:24:cc:32:43:71:77:68:96:04:ae:be:9d:03:eb:2d:fa:
         d6:bb:29:ca:e5:fc:9e:19:a5:45:11:67:d7:66:be:75:7f:34:
         02:8b:83:ba:65:26:84:a2:b9:2e:de:93:f2:f6:d7:4e:a2:e6:
         89:6e:15:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:50:06 2024 by rpki-client on console-fra.rpki-client.org