Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/5122B56A51F311E9AB54691EC4F9AE02.roa
File:                     5122B56A51F311E9AB54691EC4F9AE02.roa (raw, json)
Hash identifier:          ulDXXytzKLhDZDPUF/WwhWO/+4HtH6mgUrwehHRDvEU=
Subject key identifier:   94:C0:9B:A8:5F:07:AF:A6:19:9C:2D:F8:03:E5:A0:11:99:66:9C:B1
Certificate issuer:       /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Certificate serial:       11C4
Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/5122B56A51F311E9AB54691EC4F9AE02.roa
Signing time:             Mon 20 May 2024 17:56:00 +0000
ROA not before:           Mon 20 May 2024 17:56:00 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     133219
IP address blocks:        103.14.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
                          rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 17:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4548 (0x11c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
        Validity
            Not Before: May 20 17:56:00 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=664b8eaf-98b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:b2:36:eb:9e:30:be:55:86:f0:c6:95:b8:
                    7e:1f:c9:58:64:b9:bd:11:b4:8a:f1:fb:41:0b:ac:
                    10:ff:a3:ef:17:26:bb:76:52:f0:94:e5:b8:df:b9:
                    93:99:6e:32:06:02:60:47:18:60:c2:d3:a8:bc:d1:
                    71:79:7a:51:47:38:9a:2b:94:8d:b3:65:2f:3b:a0:
                    1c:91:71:8c:7c:51:34:f7:e7:b7:c4:56:9c:6b:09:
                    27:02:e4:fa:0c:03:3b:55:7e:2e:d5:45:ff:ce:40:
                    ef:6f:e9:38:b2:3b:39:fe:3e:fa:a2:e7:2a:15:d4:
                    70:13:0d:d5:40:37:9b:a3:8e:e4:b2:6c:95:9f:a6:
                    4d:4a:c4:f4:24:e0:77:0d:b7:b3:f1:a9:de:eb:f4:
                    29:6e:8a:a8:6d:55:02:11:a8:3d:16:d3:87:23:74:
                    d8:20:7f:4d:85:55:53:d6:6d:df:d6:74:ae:39:5d:
                    b1:b2:f7:51:fd:bc:98:50:c6:40:26:fd:59:ff:2a:
                    67:8a:c5:28:27:75:16:87:69:4c:2a:6f:43:b0:91:
                    54:60:62:af:f6:60:20:35:28:22:0e:ea:4b:33:6b:
                    c6:d7:46:23:3e:23:04:c5:3a:cf:65:66:d9:0e:02:
                    33:32:8b:1f:17:6c:c7:7e:9e:94:10:f9:cd:9b:51:
                    79:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C0:9B:A8:5F:07:AF:A6:19:9C:2D:F8:03:E5:A0:11:99:66:9C:B1
            X509v3 Authority Key Identifier:
                keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/5122B56A51F311E9AB54691EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:16:2c:f4:6a:77:18:87:99:93:06:a8:42:d7:a0:75:42:24:
         c9:41:ae:1f:e6:28:d4:08:b6:95:79:53:9a:3e:2e:60:d8:e4:
         93:6f:d0:43:29:ce:87:65:73:86:5f:ca:a2:57:30:5c:e5:e8:
         48:22:d7:4e:f3:16:97:e2:30:5b:ff:ce:04:75:a8:e7:df:01:
         fb:85:c9:c0:28:aa:10:b1:26:b1:7c:d3:63:13:0e:aa:6b:09:
         83:46:13:1c:a2:5b:a8:f7:2e:cd:d9:1b:9f:9a:c5:5f:51:32:
         15:b3:17:62:b4:02:e7:2c:e1:3f:26:0b:ff:b9:3e:fd:41:1c:
         99:9d:ff:90:d9:a8:3e:4b:27:58:f3:c9:90:6d:d1:77:6e:d2:
         ec:d4:86:b8:35:1f:43:79:b0:90:b7:d4:8c:62:62:5c:26:b3:
         c0:12:58:b3:a1:a4:4a:ad:35:26:26:ef:d5:f0:45:5c:66:d5:
         0f:ed:b7:ac:28:f3:7f:01:68:0b:a1:5b:eb:fd:d3:76:52:e3:
         0c:60:e8:7d:a9:52:ad:1e:96:84:f9:e8:43:a4:80:cd:33:7f:
         a7:5e:ac:cb:4d:f9:91:1a:e5:67:ff:1b:ec:c5:82:9d:78:cb:
         ca:f2:0f:a3:20:22:31:f8:cd:a3:a0:a3:e7:3b:d9:11:34:2a:
         42:09:0d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:45:04 2024 by rpki-client on console-fra.rpki-client.org