Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/A0841A68D0D511EC81001E73C4F9AE02.roa
File:                     A0841A68D0D511EC81001E73C4F9AE02.roa (raw, json)
Hash identifier:          HT+iJuMBxdgYK5g+jEQD2a03TeM+F29o6gZsZ/BsbjI=
Subject key identifier:   67:B4:B7:35:60:6A:64:CA:F7:E3:A5:17:9B:A9:3B:12:E4:26:8A:58
Certificate issuer:       /CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Certificate serial:       022A
Authority key identifier: D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/A0841A68D0D511EC81001E73C4F9AE02.roa
Signing time:             Sun 31 Dec 2023 03:04:37 +0000
ROA not before:           Sun 31 Dec 2023 03:04:37 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     132742
IP address blocks:        103.80.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl
                          rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
        Validity
            Not Before: Dec 31 03:04:37 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6590da44-6d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:4d:c4:77:94:6c:bb:4e:bf:1e:05:a2:4e:
                    4f:9a:51:f2:b7:36:8d:50:8f:d7:2e:93:28:5b:16:
                    a3:56:ca:1d:d3:4e:fa:71:e6:f9:7d:83:47:65:5e:
                    27:cb:da:6d:be:de:48:09:ba:1b:58:43:a1:53:41:
                    77:b7:35:a9:80:1d:26:d9:96:37:55:a5:ea:66:33:
                    68:1e:62:ed:dc:f3:74:9b:47:cc:47:c9:20:01:f2:
                    a0:96:22:56:62:da:a3:62:e4:3d:4d:b5:80:04:7c:
                    8d:16:25:75:68:7e:dd:cd:0e:fc:32:06:5c:57:d3:
                    cb:cd:42:5e:ad:c1:e8:20:05:9e:3f:a2:1f:c0:a5:
                    67:a0:aa:ce:a8:1b:7d:03:a0:10:53:37:f3:b5:e7:
                    7a:b3:67:b5:1d:63:74:9b:40:a7:c8:1e:75:f3:15:
                    2b:88:ed:42:1e:be:81:4e:3d:cd:a0:66:67:13:47:
                    85:56:c9:76:b0:42:14:4d:ab:6d:07:c2:8e:f7:d8:
                    2f:65:9f:84:c1:4b:05:24:9d:3e:ec:37:1b:2f:c1:
                    12:31:15:37:84:bc:b0:05:44:a2:af:9d:d4:a4:b4:
                    f8:48:a9:c1:a0:92:a8:7a:ae:fc:5f:ed:f6:ed:63:
                    7f:4e:8b:ee:7d:7b:a4:a9:b6:5e:85:80:55:cd:a0:
                    6a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B4:B7:35:60:6A:64:CA:F7:E3:A5:17:9B:A9:3B:12:E4:26:8A:58
            X509v3 Authority Key Identifier:
                keyid:D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/A0841A68D0D511EC81001E73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:50:d4:e9:fb:16:62:b3:eb:02:04:0c:cf:ac:cb:e3:c2:74:
         58:e1:60:32:9c:88:7a:3d:2f:6f:24:7c:2b:ac:c1:26:88:e9:
         19:66:16:4f:d6:e4:19:64:20:cf:eb:93:e2:bf:ca:77:2c:62:
         ef:81:52:5a:9d:58:37:06:b2:5b:4c:57:f4:1c:27:de:0d:27:
         33:20:23:c2:a7:32:b7:52:89:e1:ad:c7:12:12:2d:b0:37:a1:
         56:5e:2e:58:28:c6:07:e1:57:0b:15:79:f3:32:14:bb:a0:03:
         f5:3c:aa:65:33:20:8d:81:12:ef:ab:30:48:a8:2d:74:4c:7f:
         e8:ed:5a:06:49:30:1a:33:95:9f:e5:3b:de:1a:67:3d:89:cb:
         e1:53:89:d1:13:38:1f:7f:1e:8f:76:2f:fe:cc:45:36:85:cd:
         4c:95:b6:e0:9b:7b:1d:4f:d8:39:c3:c9:a0:43:a4:1b:d9:89:
         ba:7b:1f:23:bf:0f:58:ed:73:88:cd:dc:4a:d7:a7:a6:fe:81:
         97:dc:4b:06:0b:69:0f:c3:5d:03:31:5e:5b:b5:3c:74:84:ea:
         a4:d5:02:ff:16:db:ea:fe:e0:f7:ec:8e:e3:0c:41:46:b8:c4:
         96:36:7c:13:6d:76:21:e2:ee:72:5c:81:1a:90:a0:1c:e3:1e:
         20:ec:cd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:44:32 2024 by rpki-client on console-ams.rpki-client.org