Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5A5F40627F5911ECA27EA93CC4F9AE02.roa
File:                     5A5F40627F5911ECA27EA93CC4F9AE02.roa (raw, json)
Hash identifier:          nf6XcBM+jlBG9AsYqmBEb86iqXVC3F1gOgViTzeN194=
Subject key identifier:   A9:25:E0:59:D2:94:79:46:2E:73:90:3B:2F:C2:4D:61:EF:82:7D:8D
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4559
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5A5F40627F5911ECA27EA93CC4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:32:20 +0000
ROA not before:           Thu 05 Sep 2024 03:32:20 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     131440
IP address blocks:        103.245.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17753 (0x4559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:32:20 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d92644-03ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d6:2b:27:3e:c5:59:3a:a0:0e:ac:89:aa:c1:
                    53:11:3e:ce:4f:76:d0:4d:fe:57:74:e1:d4:1c:43:
                    4c:d3:f1:5c:f6:a7:71:52:c1:e1:3a:22:5b:bd:18:
                    f0:84:19:51:25:8c:5a:b2:03:e2:93:4d:b9:fe:0e:
                    d6:2f:57:bf:0b:11:53:8d:f2:88:d5:84:8a:ab:fa:
                    26:04:59:c5:cf:1b:f1:74:2d:d6:29:26:2c:db:93:
                    d3:3a:6d:94:c2:c3:57:19:4c:06:50:da:62:27:a0:
                    3e:77:5f:fc:40:7d:b7:04:12:55:e1:3d:03:12:c2:
                    9e:08:a0:b5:55:28:11:6a:46:dc:f8:2d:af:31:9c:
                    46:74:ae:47:f2:0a:34:0f:32:7e:9c:d0:96:f2:8e:
                    a4:62:22:14:40:2f:b4:ca:03:aa:b9:85:28:ec:88:
                    2c:d9:9f:0d:b5:33:81:3d:23:48:8e:f0:6c:e5:f3:
                    45:c2:a9:a0:aa:9b:12:1d:e9:78:68:1d:dd:7b:f2:
                    64:36:9e:31:a6:02:b8:c7:19:41:1a:d2:05:1a:66:
                    89:c0:ba:43:ee:89:7d:7f:b7:96:43:28:15:71:fb:
                    b0:8d:74:49:d0:8f:b9:d0:f6:eb:c1:cf:de:ac:a9:
                    f6:e9:07:a6:a2:49:8f:7d:64:f2:52:83:af:df:96:
                    35:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:25:E0:59:D2:94:79:46:2E:73:90:3B:2F:C2:4D:61:EF:82:7D:8D
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5A5F40627F5911ECA27EA93CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:00:17:ad:aa:9d:e9:e2:aa:9f:86:b0:50:78:a1:a5:7d:71:
         48:21:4f:c3:c8:a2:d8:73:30:ca:b2:f0:d5:a8:4c:bf:b4:0b:
         ed:93:b9:ac:67:e9:80:17:00:19:66:e8:03:35:08:78:98:ae:
         cf:8d:3d:d5:09:4e:84:50:c5:86:41:86:7a:49:a5:e4:29:fe:
         e5:e1:e4:2c:b4:52:26:34:51:0d:f6:a8:71:9f:2a:8a:99:a8:
         af:6a:b1:9b:ce:a2:4a:4b:94:fa:b9:54:bd:26:b1:d3:51:95:
         e5:5d:32:31:93:01:a5:e5:99:ab:7e:bb:6e:81:1c:ca:5c:23:
         e8:2d:0e:ee:62:45:e5:ab:f4:08:f0:e8:8d:93:4e:e3:7b:2e:
         42:7a:e0:b8:5f:da:b0:77:87:a7:4f:b3:37:94:0d:b8:bb:07:
         d2:16:05:dc:b2:fd:7c:4f:07:92:07:4f:c9:26:5a:ea:92:cf:
         60:72:5e:56:5c:91:36:47:cc:9c:3e:7a:f1:ba:3c:72:2e:22:
         b7:08:d1:fa:c0:6e:af:d4:58:b5:4f:8f:71:20:5a:e7:b6:dd:
         e8:a8:8e:f0:8e:3d:dc:87:98:ab:69:ff:ba:81:2d:50:0e:4b:
         a6:a3:08:bf:1c:ad:46:c2:ef:b5:df:0d:be:d3:25:20:86:0d:
         ad:27:11:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:32 2024 by rpki-client on console-ams.rpki-client.org