Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/E5B25D84B0D211ECB7B1BA7DC4F9AE02.roa
File:                     E5B25D84B0D211ECB7B1BA7DC4F9AE02.roa (raw, json)
Hash identifier:          OVG2VV/+X1G5er7IDg5kaj5uYEytBjj8waEAE7a2mDo=
Subject key identifier:   2C:05:0A:31:3A:9F:E3:FF:F5:AF:70:57:BC:0A:0A:8A:81:71:8A:22
Certificate issuer:       /CN=A91D1C7F/serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B
Certificate serial:       0204
Authority key identifier: DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/E5B25D84B0D211ECB7B1BA7DC4F9AE02.roa
Signing time:             Sun 09 Jul 2023 02:22:12 +0000
ROA not before:           Sun 09 Jul 2023 02:22:12 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     136553
IP address blocks:        103.92.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl
                          rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 03:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1C7F/serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B
        Validity
            Not Before: Jul  9 02:22:12 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64aa19d4-b8c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fa:b4:63:ae:44:4a:d3:2d:10:37:4e:a5:18:
                    24:9b:e3:3c:8e:ed:9b:73:3c:1b:2f:cc:20:af:2b:
                    a5:1d:54:cc:fa:1f:3b:09:fe:d8:46:00:77:80:eb:
                    a5:78:e5:a4:4e:44:42:0e:4d:c5:a7:f8:b1:4f:fa:
                    52:38:7b:81:05:ca:cb:c4:e5:58:c4:12:80:54:30:
                    41:1b:5e:be:76:05:81:84:68:52:92:fb:36:0b:17:
                    09:2a:87:0f:b7:eb:ed:b0:d5:a7:ea:7b:6a:74:0e:
                    5a:85:b9:39:1c:2d:c3:66:77:70:e3:67:5b:67:ff:
                    78:d8:9d:7f:88:c0:97:94:29:0a:2c:ee:f8:43:82:
                    98:f1:3a:09:22:aa:83:05:87:a5:03:14:11:84:30:
                    4c:2d:b9:4b:62:75:3b:ee:3e:8f:a3:3a:57:02:3c:
                    12:10:c4:8f:31:60:3a:1f:00:d9:b5:c7:f4:2f:40:
                    26:76:a4:7e:33:c1:4e:5c:24:2a:88:9a:a5:8d:15:
                    67:1a:92:e2:61:83:6a:df:af:b8:2a:9c:a7:96:a9:
                    8c:37:b7:e1:7c:73:e2:f7:05:1f:03:dc:ca:0b:19:
                    da:1a:b9:43:25:bf:0b:65:79:d3:38:46:f9:c6:1e:
                    cc:17:4a:54:c1:80:e4:88:ae:ac:2c:65:44:c2:ed:
                    c7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:05:0A:31:3A:9F:E3:FF:F5:AF:70:57:BC:0A:0A:8A:81:71:8A:22
            X509v3 Authority Key Identifier:
                keyid:DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/E5B25D84B0D211ECB7B1BA7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:da:52:98:14:a2:fe:a0:57:97:90:77:99:70:7c:da:61:bb:
         2e:66:9e:4e:36:ca:b8:ef:42:44:3d:eb:d2:a6:a6:06:41:6c:
         7e:8f:23:6a:e5:cf:39:c5:ff:fc:e7:45:55:de:17:4d:75:81:
         b2:63:da:e0:af:5e:94:1d:cf:f2:4f:7a:05:73:10:d2:7a:98:
         cd:a8:57:2c:8b:54:5d:0c:d2:0f:03:73:93:1a:b0:16:12:ca:
         5d:8e:b3:d0:25:52:e3:05:6f:ed:15:a5:f4:ea:64:85:cf:23:
         be:11:23:22:e4:e3:d1:88:b6:6b:6e:77:c5:db:f7:ab:b6:ed:
         aa:71:4d:39:50:8f:1e:b8:75:44:f1:17:0c:a9:ac:9c:83:60:
         ff:7d:02:75:c5:45:59:a5:46:40:ec:9b:35:75:99:86:c4:c4:
         95:ce:8e:c5:40:22:3a:67:35:fb:cd:ea:af:d6:57:14:2a:da:
         b9:6d:7f:5a:fd:ac:86:63:88:af:d3:45:f7:26:6e:e9:ae:8e:
         99:01:bb:39:b2:ca:5c:9d:b0:11:5a:8f:99:e0:74:5f:0f:f9:
         cf:dd:61:f4:64:f3:f8:bf:19:78:a2:a1:bd:92:58:81:24:f4:
         6c:7f:6e:20:eb:0e:a4:99:2e:a8:dd:dd:00:d1:ec:84:93:68:
         67:26:d5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 06:12:25 2024 by rpki-client on console-ams.rpki-client.org