Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/F47CB05C5AE011EFB4CD7428C4F9AE02.roa
File:                     F47CB05C5AE011EFB4CD7428C4F9AE02.roa (raw, json)
Hash identifier:          SolE9/ls/4rdz8cVUNMpZ46SrWa9Gee/JJmOyfWq0t8=
Subject key identifier:   00:5B:68:5A:05:60:97:1C:40:DE:A5:9A:F4:60:A8:E1:60:76:C8:55
Certificate issuer:       /CN=A91D2B62/serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720
Certificate serial:       02
Authority key identifier: E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/F47CB05C5AE011EFB4CD7428C4F9AE02.roa
Signing time:             Thu 15 Aug 2024 08:32:49 +0000
ROA not before:           Thu 15 Aug 2024 08:32:49 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     26658
IP address blocks:        59.153.144.0/22 maxlen: 22
                          103.198.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl
                          rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Sep 2024 06:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2B62/serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720
        Validity
            Not Before: Aug 15 08:32:49 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=66bdbd31-8af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:73:4c:83:f1:29:bf:b8:d8:ee:91:14:a4:52:
                    b1:17:cc:c6:24:86:3b:3c:41:25:0b:c6:bb:d0:95:
                    ec:5c:26:7e:9b:11:55:a9:5f:69:f9:0a:26:c6:fd:
                    75:0a:46:a4:d5:19:4a:54:94:fd:46:93:12:21:34:
                    d7:a4:76:13:cd:75:a2:b2:95:80:da:04:81:ee:09:
                    17:5a:ed:ea:4a:4c:a0:a9:ee:81:58:18:19:cf:35:
                    8c:64:18:c9:ed:65:8f:8d:9c:b7:30:5d:02:3e:25:
                    c6:7a:f2:3a:c8:2e:37:ad:41:95:da:7d:29:f9:d2:
                    b9:75:64:63:be:99:30:ab:af:ff:f3:85:2c:97:c5:
                    5f:0a:23:0f:17:ae:65:27:67:32:2e:36:81:e8:7e:
                    2c:0f:74:f3:ea:1c:11:87:77:11:96:b5:0a:0f:69:
                    e0:b8:2e:a8:9f:c7:45:c4:8f:bb:ad:6b:4a:07:03:
                    ba:ca:88:0b:46:72:91:99:21:c3:42:8a:c3:03:24:
                    f2:0a:87:9d:ef:4e:f6:9d:bc:b9:6c:db:1f:31:41:
                    ae:f7:7a:25:ec:03:4e:4b:31:63:e7:d5:7a:5f:18:
                    26:f9:44:58:c1:16:0e:96:16:a1:6c:4c:bd:37:0e:
                    7e:a6:f0:fa:a1:78:6d:17:a9:60:22:44:a8:eb:f2:
                    ae:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5B:68:5A:05:60:97:1C:40:DE:A5:9A:F4:60:A8:E1:60:76:C8:55
            X509v3 Authority Key Identifier:
                keyid:E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/F47CB05C5AE011EFB4CD7428C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.153.144.0/22
                  103.198.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:dd:23:fe:e8:b3:a2:f0:b3:7e:fe:5c:c6:1c:95:a6:6a:cf:
         b8:d5:0c:f2:f6:84:b2:b4:96:31:9a:55:77:06:12:c0:cb:46:
         e7:01:19:ef:f2:33:4d:98:14:e6:d9:a2:d2:8c:0e:32:c2:0b:
         33:e2:b3:2c:17:ed:d2:f1:93:78:37:03:40:8d:f2:6d:c0:47:
         63:a3:ca:0d:47:c7:17:90:10:1c:fa:64:8e:8b:59:92:7a:00:
         2f:82:5c:5b:09:9d:78:e7:4f:31:f0:b8:3c:c5:af:1b:10:d9:
         b5:f0:18:68:25:1f:59:2d:84:dc:7e:c8:76:15:6f:20:0b:0d:
         e0:b5:42:93:4c:ce:de:2a:e2:df:36:c0:ca:a7:e2:88:9a:ba:
         8b:33:68:f2:fb:e7:95:6a:e8:be:33:8e:67:4e:23:75:ec:69:
         b3:07:22:19:cb:b3:d4:36:15:75:c0:39:c4:8d:f4:41:63:eb:
         5b:4f:38:c6:12:86:1a:6e:bd:56:eb:37:6c:ea:29:af:20:bb:
         ca:69:c3:20:03:d3:1c:0b:bc:e0:cf:06:bf:77:05:01:27:f8:
         d8:2b:10:bd:06:6a:4d:25:44:9f:d6:db:9f:2c:65:73:77:27:
         8c:85:43:5f:35:31:88:c3:9f:89:87:ee:3c:40:32:a9:b5:92:
         c3:a9:1b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 07:14:24 2024 by rpki-client on console-fra.rpki-client.org