Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/A1F46062A64611EAA24E1461C4F9AE02.roa
File:                     A1F46062A64611EAA24E1461C4F9AE02.roa (raw, json)
Hash identifier:          YrnpZi3m8PFhcPzx8yyJW6kEGkbxejrCHTaF/Tb14LA=
Subject key identifier:   1A:CF:CE:4A:EF:EB:E9:7B:A9:A0:23:2C:99:89:96:FC:F5:2B:B6:1B
Certificate issuer:       /CN=A91BD090/serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4
Certificate serial:       081B
Authority key identifier: E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/A1F46062A64611EAA24E1461C4F9AE02.roa
Signing time:             Sat 10 Feb 2024 21:29:14 +0000
ROA not before:           Sat 10 Feb 2024 21:29:14 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     134074
IP address blocks:        103.51.60.0/24 maxlen: 24
                          103.142.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 20:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2075 (0x81b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD090/serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4
        Validity
            Not Before: Feb 10 21:29:14 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65c7eaaa-8bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c4:57:2f:8a:81:aa:7f:7a:de:a0:e9:f2:eb:
                    f5:a9:e0:99:45:92:88:30:84:79:ec:9f:a7:ed:4b:
                    1c:59:83:a7:50:0c:a1:7e:90:5b:20:ae:c0:4f:d8:
                    81:20:2f:60:d0:ba:bc:84:71:0e:15:b6:61:54:bc:
                    07:f6:96:56:cd:78:74:8c:8f:ab:3f:c1:d8:8d:fc:
                    ea:8e:3b:91:45:20:d9:99:c7:10:d1:1b:a9:9d:67:
                    75:31:71:eb:82:34:3a:70:cd:03:98:f5:c2:14:17:
                    66:3d:b3:41:35:50:f7:01:60:32:70:2f:85:e6:f5:
                    8a:b7:0b:e2:a8:77:bd:f7:b0:95:28:15:88:5b:0c:
                    5d:2b:2b:c5:08:27:aa:84:03:1a:71:06:3a:1d:d6:
                    c3:59:8d:d8:5f:a5:f2:78:a7:db:9a:21:55:86:3e:
                    1c:74:ea:1c:b7:c2:d4:17:b3:ec:f4:12:e5:fb:a6:
                    18:45:21:40:a8:69:a3:62:01:57:79:62:84:0e:ba:
                    a1:8e:26:4f:39:a8:c2:fe:6b:54:1d:7d:48:75:e1:
                    42:ad:5b:5a:a5:d0:60:72:81:38:e7:37:d2:31:4f:
                    64:4c:48:89:3c:d7:63:45:01:03:76:a4:04:bf:bf:
                    b4:0a:e5:76:d5:64:4e:de:54:cb:29:bc:f6:f4:9d:
                    64:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CF:CE:4A:EF:EB:E9:7B:A9:A0:23:2C:99:89:96:FC:F5:2B:B6:1B
            X509v3 Authority Key Identifier:
                keyid:E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/A1F46062A64611EAA24E1461C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.60.0/24
                  103.142.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:cd:e1:67:a8:90:61:db:36:ee:f8:ce:eb:cc:5d:3e:a8:72:
         60:7c:47:19:19:c3:b0:0e:16:2d:21:a5:ef:df:e6:a2:9e:02:
         8b:bc:1f:63:8a:06:26:33:b1:d9:2c:ae:4f:cc:47:f8:b2:23:
         9c:53:72:bf:e8:69:90:e9:2c:6d:e4:50:31:d1:fb:0e:b2:ad:
         9b:2f:da:14:81:c1:e0:4d:c1:6d:eb:6c:f6:87:cf:98:1f:e4:
         41:cc:ef:a2:5b:c0:ea:6a:9d:8c:62:c9:51:10:81:96:ed:70:
         9b:96:91:73:9a:fc:2d:65:4a:09:4d:a2:07:95:36:63:02:9d:
         94:82:c6:9b:35:7c:57:4f:0a:2e:a8:89:58:af:03:a0:fd:e7:
         df:52:e6:fe:46:6f:03:f8:62:7a:54:73:3b:c7:31:0e:0d:7b:
         03:54:bf:c8:22:0c:45:e9:d6:d6:57:e9:17:60:f8:37:28:76:
         d6:c7:98:1a:0e:a7:ca:9e:63:5f:3c:20:50:00:4a:6d:11:33:
         e3:89:b4:5b:dc:82:ef:f1:45:c6:65:16:ec:16:14:22:63:95:
         62:56:c3:3b:c8:45:41:cb:d9:81:bf:6b:f2:ed:31:af:07:be:
         92:5a:fa:ba:db:8c:18:44:de:a6:36:87:fb:3f:00:eb:25:9b:
         96:17:36:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:41:02 2024 by rpki-client on console-ams.rpki-client.org