Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/86BB53D0105611EB85F56114C4F9AE02.roa
File:                     86BB53D0105611EB85F56114C4F9AE02.roa (raw, json)
Hash identifier:          coNsqWlIs1IR7kR/A8Mb6dILYr6YwFGx5wxCyfnD3SQ=
Subject key identifier:   6E:AA:0B:B5:12:6C:BF:51:26:FE:0C:A2:99:11:9F:27:CE:BA:70:3F
Certificate issuer:       /CN=A913990E/serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6
Certificate serial:       0619
Authority key identifier: F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/86BB53D0105611EB85F56114C4F9AE02.roa
Signing time:             Sun 11 Jun 2023 00:06:32 +0000
ROA not before:           Sun 11 Jun 2023 00:06:32 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     136556
IP address blocks:        103.92.160.0/24 maxlen: 24
                          103.92.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.crl
                          rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 23:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1561 (0x619)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913990E/serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6
        Validity
            Not Before: Jun 11 00:06:32 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64851008-34a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:65:a1:19:bc:e4:57:c1:16:1d:c3:ff:f8:25:
                    96:d4:bb:06:51:af:ff:93:54:11:a5:70:49:d7:4c:
                    a7:c3:ab:8a:95:57:bf:45:65:f0:0e:d6:f5:53:f6:
                    6a:f4:ce:49:d3:1a:36:80:21:35:0a:1c:df:7a:7b:
                    b9:a4:ce:7b:aa:8d:b9:5b:17:1f:fe:db:48:65:fc:
                    43:5e:10:30:03:fa:cb:ec:1f:e1:ae:67:9c:6c:e3:
                    c5:14:17:60:8e:29:23:5b:f7:92:55:cd:9c:6c:ba:
                    00:18:12:c5:3c:66:e6:e8:d3:26:fb:32:1b:6b:94:
                    ad:9f:f0:d2:00:69:e3:d5:24:73:ab:e2:ad:41:a0:
                    e2:2b:af:8f:da:68:3d:38:00:c1:70:75:b5:26:38:
                    ae:79:33:13:7d:64:4c:13:59:70:70:ce:e1:1a:7c:
                    1d:96:28:1b:3c:66:d2:d8:ad:83:e4:0b:4f:44:69:
                    6c:77:b1:5f:79:bd:03:04:56:4c:4e:a1:cd:41:60:
                    64:63:aa:57:cf:36:78:b2:43:fc:85:04:d1:fd:15:
                    bd:39:ba:74:32:d7:ea:b9:25:59:e4:58:f2:0a:80:
                    54:46:14:01:40:20:47:db:40:28:7b:c4:8e:c3:a9:
                    eb:c3:33:5f:d0:65:95:f7:8b:ad:1c:0f:05:e9:92:
                    c1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AA:0B:B5:12:6C:BF:51:26:FE:0C:A2:99:11:9F:27:CE:BA:70:3F
            X509v3 Authority Key Identifier:
                keyid:F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/86BB53D0105611EB85F56114C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:4b:5e:5d:40:19:e5:03:d9:01:d8:44:5e:02:4d:a0:b5:f4:
         59:f0:a7:c1:ec:99:a1:5a:26:ab:9b:9c:7d:0c:45:84:b4:b6:
         dc:66:62:1d:51:55:46:dc:f6:e4:06:89:29:cd:70:e8:b5:92:
         ad:8b:a9:f7:4d:bf:a9:5b:01:b9:9f:19:47:fb:46:ea:0b:ae:
         4e:fc:3c:db:39:28:77:c5:8a:44:c8:3f:0e:1a:95:39:e0:0e:
         ac:4b:32:32:ba:17:ef:4b:9b:b8:30:14:57:a3:de:6f:26:6a:
         6f:f7:21:07:ca:89:3d:52:9b:33:bd:c8:90:e1:89:50:1e:85:
         f6:a5:62:bf:6c:42:0e:72:d7:08:c8:56:26:fa:e8:c7:17:74:
         a7:ab:cf:eb:0b:f9:65:4e:c5:20:0d:2e:9a:fa:91:9c:5e:3e:
         f4:eb:6a:30:fa:08:30:96:19:c5:69:ed:3b:d3:94:3b:0d:31:
         ae:ea:ff:d7:84:61:f1:f8:db:75:a0:a6:6d:d4:3f:19:80:4f:
         d2:ac:63:0c:6c:4d:d7:38:98:ae:19:c2:e1:80:05:17:a4:08:
         f4:03:87:14:b7:06:76:4d:44:32:b7:57:f0:4b:70:81:58:ce:
         3f:7c:1a:8f:66:a2:5f:a9:5b:83:38:b9:01:97:3c:f1:06:c8:
         aa:70:a7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:58:15 2024 by rpki-client on console-fra.rpki-client.org