Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/B5E806CC8BC711EE899A5284C4F9AE02.roa
File:                     B5E806CC8BC711EE899A5284C4F9AE02.roa (raw, json)
Hash identifier:          A9NER4RWLAzUHssj8hz2WdFFJOhX2P8OvSLz/oFPj9Y=
Subject key identifier:   24:2B:53:17:B4:C2:CA:E7:95:BB:C7:3A:4D:F7:61:11:6A:49:E1:F5
Certificate issuer:       /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC
Certificate serial:       0795
Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/B5E806CC8BC711EE899A5284C4F9AE02.roa
Signing time:             Fri 12 Jul 2024 17:24:48 +0000
ROA not before:           Fri 12 Jul 2024 17:24:48 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     135407
IP address blocks:        103.19.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl
                          rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1941 (0x795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC
        Validity
            Not Before: Jul 12 17:24:48 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=669166df-8339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bc:b8:59:6e:e4:72:51:5c:8f:17:4b:43:2e:
                    18:b6:a9:4e:48:7e:63:64:f2:72:d6:b7:67:2c:16:
                    dc:2b:a7:0b:3c:f9:f0:e4:3a:b6:a6:f1:50:a6:ab:
                    df:9d:2e:da:c5:81:bf:b6:7b:d0:fd:ca:bb:5b:42:
                    cd:e8:de:07:b0:5c:4a:08:7c:3d:12:05:f7:c7:d4:
                    02:2c:4f:5f:54:ec:12:bf:35:b9:75:29:96:e7:ad:
                    37:7a:a5:4f:56:81:44:2f:c2:41:40:0b:7a:5e:7d:
                    50:8d:b6:cc:1e:72:eb:90:33:6a:0f:14:2c:12:2a:
                    be:11:8e:38:55:4d:97:fa:4e:17:b3:a0:bd:aa:fa:
                    fa:99:9f:9d:0c:7c:7e:87:ee:b3:bd:6a:5d:18:b3:
                    a5:02:1a:31:a4:68:3f:bf:cd:cb:cf:16:ba:e3:f0:
                    32:ca:c5:79:cb:b0:4f:ef:df:6a:aa:4b:b7:83:d1:
                    72:56:29:a3:d2:21:fc:09:64:9b:3b:d3:8b:07:0b:
                    c1:88:b8:7a:d4:ef:cc:d8:16:e2:34:53:3d:16:44:
                    93:76:cf:17:13:f0:d7:99:46:19:40:4f:28:9c:a5:
                    34:b2:ac:13:a5:74:0b:50:6f:d2:71:6e:a6:b5:00:
                    ba:50:55:bf:bd:9e:72:34:f7:02:70:67:f2:1e:2e:
                    f7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2B:53:17:B4:C2:CA:E7:95:BB:C7:3A:4D:F7:61:11:6A:49:E1:F5
            X509v3 Authority Key Identifier:
                keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/B5E806CC8BC711EE899A5284C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:25:6e:81:2f:b0:f4:da:e3:5f:f2:5a:c4:c4:20:c7:bd:e1:
         01:43:00:fa:00:c6:7e:f0:4f:c6:59:98:43:2a:ee:3d:ad:fc:
         be:c4:ee:ee:03:40:3c:a1:ea:8c:c4:25:6e:c6:4d:1e:70:69:
         29:f1:66:55:56:a5:17:f4:d0:74:c9:27:0f:d1:85:92:a3:fd:
         87:30:34:95:3b:fa:73:89:af:bb:a1:63:ef:40:ca:ab:81:fc:
         6d:b3:0a:4b:58:63:94:fe:91:5c:d7:46:5d:20:e2:02:2c:66:
         0e:c7:f9:de:a0:be:9e:80:ab:1f:3f:c5:71:ae:ac:9f:64:50:
         d8:75:ac:01:45:39:6d:ea:78:80:4f:c1:55:f1:ac:31:ba:bb:
         e6:08:a1:20:a5:39:b7:c7:d8:8a:4c:8a:61:80:bb:53:2f:3d:
         66:0e:e7:42:94:7b:ad:26:10:e5:24:87:fd:e3:aa:ee:26:b9:
         df:ed:45:d7:93:07:6d:d3:d8:c1:d7:6c:f0:6d:91:75:74:e5:
         3a:5a:04:70:42:85:e9:7d:b3:17:b6:f1:28:a8:5d:a0:0d:ff:
         d3:c0:70:b0:72:09:ac:f0:b0:3b:3c:7f:f0:25:05:91:0b:cf:
         a3:2d:96:d8:32:29:18:e8:75:75:af:ba:48:a0:e2:f7:6a:0e:
         f7:24:5f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:46 2024 by rpki-client on console-fra.rpki-client.org