Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/5E979F10C6C811ECA5A9AB33C4F9AE02.roa
File:                     5E979F10C6C811ECA5A9AB33C4F9AE02.roa (raw, json)
Hash identifier:          hZ1F/54EU32b4+tOv1jdpwsQTgq+Rgy859FLjmzADU0=
Subject key identifier:   71:AA:48:CF:5A:93:10:59:AC:30:08:6A:E7:F3:18:DD:0D:F9:3F:9A
Certificate issuer:       /CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6
Certificate serial:       0271
Authority key identifier: AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/5E979F10C6C811ECA5A9AB33C4F9AE02.roa
Signing time:             Sat 11 May 2024 04:10:30 +0000
ROA not before:           Sat 11 May 2024 04:10:30 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     132742
IP address blocks:        45.115.240.0/22 maxlen: 24
                          103.56.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl
                          rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 May 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6
        Validity
            Not Before: May 11 04:10:30 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=663eefb6-821d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:99:23:1b:af:e7:bf:54:7e:a7:03:3b:57:
                    17:41:e0:ff:b9:46:35:a0:0b:28:b0:13:99:fa:2e:
                    4d:7c:34:71:78:7e:d7:cd:34:37:f8:79:ed:be:5a:
                    54:c5:2a:f9:20:a4:1b:8c:39:09:8a:3d:98:ca:3e:
                    d1:41:33:3d:41:3a:d4:31:09:1d:02:c6:4d:fb:88:
                    cb:cb:b5:aa:6b:53:eb:2c:c5:2d:f8:47:8d:42:49:
                    4a:3f:fe:05:60:a5:97:ef:a5:ac:8e:f3:f0:d5:86:
                    4d:e7:7a:69:68:5e:80:75:0f:5a:89:1b:33:49:a0:
                    43:7b:fd:df:90:66:8e:2b:66:a6:b9:08:bb:23:7a:
                    42:68:0a:90:96:88:c1:f9:71:da:26:38:86:74:7e:
                    97:f8:54:10:f8:0c:a2:d6:9b:48:88:80:ad:a5:bb:
                    a4:60:c2:76:67:60:fe:a2:66:ee:78:ca:7b:1c:37:
                    f6:21:e0:43:83:a3:58:83:1c:5a:ad:0d:f8:d1:f1:
                    2d:10:78:d3:d8:6c:cb:a2:5c:fd:28:be:59:6e:f7:
                    53:3a:37:3b:10:00:02:73:08:2e:34:ca:66:7b:39:
                    46:89:72:84:07:d1:80:66:76:4b:e7:b0:ed:96:46:
                    30:8a:b1:19:1f:67:f0:39:d7:6c:36:88:a8:7b:98:
                    dd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AA:48:CF:5A:93:10:59:AC:30:08:6A:E7:F3:18:DD:0D:F9:3F:9A
            X509v3 Authority Key Identifier:
                keyid:AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/5E979F10C6C811ECA5A9AB33C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.240.0/22
                  103.56.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:bf:ac:ea:6d:dd:20:2a:44:b3:1f:9a:0e:a1:28:63:38:51:
         ef:ce:6b:10:ff:44:c3:d9:b6:82:06:eb:25:55:49:06:ef:69:
         3b:fc:31:3c:e1:b5:61:6e:d0:d0:76:18:6d:00:48:22:99:67:
         c2:6b:87:b3:30:48:e8:a4:00:29:a4:af:25:f9:71:3b:7f:9a:
         fd:cd:5f:03:19:60:3d:9e:b5:fc:cf:c2:e8:b5:d1:95:8b:5b:
         9b:6b:66:20:a1:e6:54:95:5c:e0:9f:0f:1a:81:b1:2c:d8:cd:
         8c:c3:a4:4c:fe:f1:14:dd:91:7b:29:dd:47:f2:f2:a2:2f:b1:
         03:60:c5:43:16:b7:0a:29:c3:97:97:42:30:04:6a:cc:11:95:
         46:3e:fa:15:75:e6:04:ef:a0:08:c4:d5:c0:cb:a6:14:3c:8a:
         7f:db:47:c0:d7:0d:43:ba:1d:a7:6a:82:57:1f:2e:99:e9:2e:
         8d:f2:b4:30:b9:34:d8:a5:70:2e:d7:dc:39:05:a2:8e:62:bb:
         6d:dd:43:cb:9f:29:68:14:50:e1:90:79:f5:80:0f:d9:b0:cc:
         2e:21:15:94:24:33:72:91:cf:2a:08:81:2b:e7:40:51:22:be:
         1f:48:86:b2:f4:8e:8d:67:02:61:fc:e0:01:e1:d8:69:56:cb:
         71:c9:e6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 04:27:01 2024 by rpki-client on console-ams.rpki-client.org