Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C85D0F7E477711EBB4044E31C4F9AE02.roa
File:                     C85D0F7E477711EBB4044E31C4F9AE02.roa (raw, json)
Hash identifier:          Bhz7N8pZoKpTA86d7VHsfPqDjwr9atp9lYNrAhBYh2s=
Subject key identifier:   DF:D0:65:50:77:3F:A3:F4:76:C4:68:14:20:E4:99:08:55:A9:7A:F5
Certificate issuer:       /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
Certificate serial:       1A9A
Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C85D0F7E477711EBB4044E31C4F9AE02.roa
Signing time:             Fri 02 Feb 2024 17:04:10 +0000
ROA not before:           Fri 02 Feb 2024 17:04:10 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     61317
IP address blocks:        103.5.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 16:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6810 (0x1a9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
        Validity
            Not Before: Feb  2 17:04:10 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65bd208a-5041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f4:0c:fd:a7:2e:8d:2e:39:ea:f3:ba:7f:bf:
                    b4:3e:aa:ce:88:bf:48:09:5f:58:b1:29:55:17:a9:
                    12:24:65:15:fc:46:e0:a4:8f:4e:fb:2a:61:d9:32:
                    b3:0b:e2:1e:9d:d2:bc:94:59:1a:2b:88:36:a0:63:
                    ba:91:f1:75:b4:87:4c:4f:0e:9a:2f:81:91:1e:70:
                    db:7f:ad:b9:aa:a8:56:7a:df:95:68:9c:00:f7:1c:
                    ac:66:2a:8e:c1:c0:e0:a9:da:c0:74:5a:4c:c0:dd:
                    71:db:db:e8:18:08:c4:39:de:7c:3a:91:f2:93:85:
                    9c:3a:da:30:a8:f1:0d:51:31:e4:32:24:1f:13:1b:
                    d8:24:95:e5:11:11:30:ba:5e:01:8e:92:25:60:0d:
                    3f:72:a1:cb:7f:d9:fe:aa:91:c4:07:56:11:04:a8:
                    0c:3b:15:9a:5a:e1:7e:f4:7f:9a:a1:0e:84:34:60:
                    32:1d:6c:0d:5e:87:d1:ba:d5:1a:e7:77:ef:3c:0e:
                    cd:e5:e2:a6:5c:0f:e4:d8:22:ac:80:f8:d3:6b:89:
                    00:97:16:58:51:e0:21:75:04:6a:95:c6:46:43:4f:
                    26:9d:29:8d:6f:e1:9f:42:8c:e6:8f:8a:cb:2d:21:
                    48:db:d5:04:74:2d:41:28:f1:3c:3d:44:75:3b:e5:
                    a6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D0:65:50:77:3F:A3:F4:76:C4:68:14:20:E4:99:08:55:A9:7A:F5
            X509v3 Authority Key Identifier:
                keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C85D0F7E477711EBB4044E31C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:45:54:fb:2d:ba:fa:c9:32:60:79:b0:26:04:f6:59:1b:e6:
         5b:80:ac:a8:38:bb:2d:52:c2:2e:6a:fe:8b:07:8f:0d:3b:39:
         3d:2d:c9:1b:ed:61:2f:e5:50:29:9b:ed:4b:16:a7:91:88:1c:
         4d:bc:6e:68:70:ca:10:c1:37:3b:03:04:47:4b:31:a0:19:e5:
         06:58:be:ff:db:b9:94:49:27:17:87:26:d7:27:0e:98:ab:bc:
         8f:bf:42:28:66:ab:c9:55:9c:ee:9f:15:1e:16:7b:93:08:12:
         ea:ed:94:cb:84:d6:f5:f2:aa:c3:35:02:39:7e:2e:f4:1b:e1:
         4c:30:9a:84:db:24:8b:b3:15:c7:3b:6d:93:92:27:cd:08:4d:
         d1:e6:96:41:69:1f:76:97:18:68:6a:af:75:64:a7:e4:35:4e:
         bf:8a:18:23:aa:0a:cf:3d:ae:de:79:f7:e1:03:d0:56:88:c1:
         d6:3e:bc:1c:38:b0:24:23:9f:1c:b0:3f:dd:be:5d:37:b4:06:
         3c:2c:81:f0:05:31:5c:40:81:01:08:be:9a:24:b2:3c:73:82:
         19:26:bd:2f:87:dc:9c:86:e6:1b:dc:5e:59:2e:b4:ef:b1:1e:
         fc:70:fa:f7:fa:92:33:51:b7:8d:5e:bd:c1:ea:3e:89:1f:68:
         cd:15:35:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:06:05 2024 by rpki-client on console-ams.rpki-client.org