Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/5B17230CDE9B11EC9AE23269C4F9AE02.roa
File:                     5B17230CDE9B11EC9AE23269C4F9AE02.roa (raw, json)
Hash identifier:          N5LWFk30bxfGEjnI/0LUgGK8Je9skUkmcUeWBKL7XaM=
Subject key identifier:   1B:1D:C6:0C:37:71:B9:C4:2F:B7:7A:57:94:1D:FA:1F:10:90:66:57
Certificate issuer:       /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Certificate serial:       0317
Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/5B17230CDE9B11EC9AE23269C4F9AE02.roa
Signing time:             Sun 31 Dec 2023 02:24:18 +0000
ROA not before:           Sun 31 Dec 2023 02:24:18 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     3786
IP address blocks:        103.80.133.0/24 maxlen: 24
                          103.80.134.0/24 maxlen: 24
                          182.161.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
                          rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 02:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 791 (0x317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
        Validity
            Not Before: Dec 31 02:24:18 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6590d0d1-80fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:08:1b:6a:4e:41:38:c7:03:bc:34:26:5c:ff:
                    f0:f5:71:ec:d5:6b:d9:54:fd:d6:19:e4:36:29:60:
                    76:0e:87:b1:cc:a6:e4:75:94:9c:12:ae:63:75:8d:
                    f0:2a:e2:a1:d4:96:86:39:1e:89:58:04:cc:a0:fa:
                    1a:f5:82:0a:ab:01:4b:ef:aa:5a:e4:bf:74:e0:0f:
                    f9:5d:33:63:f1:5e:64:b3:17:b6:ed:40:bb:1f:44:
                    7f:83:ce:36:5e:fb:31:e8:db:b1:88:f4:d6:8a:fa:
                    19:f4:2a:de:46:2a:a4:42:6d:da:82:58:6e:e9:9d:
                    72:9a:7a:12:fa:7d:92:06:b0:77:bf:6c:76:25:28:
                    d8:2e:ce:80:61:a0:82:6e:05:30:d9:fe:40:40:46:
                    19:25:37:b8:e7:a3:07:69:6b:6f:d0:5d:1f:7d:c6:
                    ec:c6:04:4f:2d:b2:65:28:df:05:a4:6a:0c:9a:52:
                    00:78:0d:ce:d7:8b:b5:8e:f6:5a:ee:43:50:3e:ee:
                    82:36:4d:48:4d:71:d4:8a:ac:40:48:60:92:a8:b0:
                    a3:8e:c6:8a:75:13:a7:ab:c8:1c:3e:b9:bd:d2:60:
                    60:d9:9b:0a:60:65:1a:d5:87:97:42:10:38:f5:ad:
                    1a:6d:a3:9c:1a:37:d7:d2:01:d4:92:60:cc:de:20:
                    77:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1D:C6:0C:37:71:B9:C4:2F:B7:7A:57:94:1D:FA:1F:10:90:66:57
            X509v3 Authority Key Identifier:
                keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/5B17230CDE9B11EC9AE23269C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.133.0-103.80.134.255
                  182.161.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:a7:68:ab:c8:b2:fe:63:20:a5:8c:3b:6e:e2:6f:34:ea:09:
         1f:6f:98:39:e2:72:57:15:b8:bf:2d:16:69:91:6e:aa:a9:bf:
         21:34:06:3d:64:3d:32:51:cc:bb:8e:31:f8:ee:0d:10:d0:55:
         78:a5:d5:61:45:38:68:34:3b:06:a9:6e:5c:5a:45:4e:e4:4a:
         d5:47:79:83:ec:98:e8:ad:61:27:31:2b:4a:01:f5:e7:3c:8c:
         83:f8:50:1b:fa:85:c9:7b:a8:c0:04:b3:6c:70:67:f3:18:cd:
         8e:ab:14:be:29:f5:a1:dd:23:60:9d:c3:50:3a:9a:20:85:c9:
         f6:d2:87:64:00:56:3f:a9:cb:15:7f:82:a5:e1:ab:a9:6f:53:
         a2:a7:28:9a:e6:46:23:b1:2b:ef:6d:e6:39:04:f7:12:96:3b:
         3a:a6:8d:60:dc:df:c7:08:0d:d2:95:a7:f4:a9:5f:c5:5c:f0:
         8d:6c:08:a1:71:d4:1b:2d:47:cc:bd:8d:4f:67:b2:49:36:73:
         87:56:8c:1c:0a:7d:6d:35:11:35:53:3f:72:dd:75:9b:fe:a1:
         d1:e8:45:2e:d8:69:b9:5c:73:b3:cf:eb:c5:90:cc:fa:45:7c:
         64:15:6e:a4:90:40:76:06:d9:9c:d3:4c:d4:2c:03:e8:eb:e9:
         bb:d2:04:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 03:32:17 2024 by rpki-client on console-ams.rpki-client.org