Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/6108822AB03C11EC918CBA0EC4F9AE02.roa
File:                     6108822AB03C11EC918CBA0EC4F9AE02.roa (raw, json)
Hash identifier:          7B7xZtAsyaDILpWRkOtStPc0FvXS15c7erODj+yoV30=
Subject key identifier:   3D:2E:F6:DE:41:1A:60:E3:4C:A5:72:DF:9E:F5:DD:C8:5C:DD:12:6E
Certificate issuer:       /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814
Certificate serial:       01E4
Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/6108822AB03C11EC918CBA0EC4F9AE02.roa
Signing time:             Wed 03 May 2023 05:45:59 +0000
ROA not before:           Wed 03 May 2023 05:45:59 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     59865
IP address blocks:        103.90.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484 (0x1e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814
        Validity
            Not Before: May  3 05:45:59 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6451f517-6ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:de:59:c8:bc:cc:4f:04:3a:33:45:03:51:
                    6a:74:d7:52:e3:36:9e:94:50:40:27:f2:08:77:65:
                    1a:81:a6:20:9c:f0:5c:5f:dd:58:b7:58:75:41:86:
                    47:69:4b:35:7e:ea:e8:e5:17:15:76:64:d4:cc:3a:
                    86:e5:43:7d:cd:6d:d6:1b:2e:d3:0f:6f:13:ad:b2:
                    b6:ac:73:24:81:3b:8f:d7:0e:e0:43:63:c6:12:e3:
                    ac:79:f2:1b:17:a7:51:c9:ce:e0:57:4d:ce:ce:2d:
                    5f:05:4f:ae:28:68:76:c8:ad:9b:98:dc:5c:98:e3:
                    27:19:ad:76:3d:64:43:9d:1e:24:9c:f7:9b:8e:ee:
                    59:9a:19:ef:4c:c9:4c:6e:b6:86:0f:cf:0e:7b:b4:
                    ca:f6:48:8c:7c:8a:da:00:7a:4f:20:bc:7f:70:3d:
                    c1:2d:6a:67:1f:ea:ec:da:db:d6:f3:c7:d0:77:21:
                    e9:6b:0d:56:06:6c:81:22:d9:ff:08:c0:a7:c2:f1:
                    84:ac:79:04:62:d6:00:61:a1:bb:34:4e:74:2b:21:
                    a7:b2:ae:4b:64:53:54:61:1a:c9:46:00:95:33:59:
                    3c:b5:c3:1c:e1:03:b3:8f:94:69:c4:0f:23:1f:66:
                    86:b5:13:77:4f:8f:ea:c2:1f:c7:3d:ed:a3:45:89:
                    f7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2E:F6:DE:41:1A:60:E3:4C:A5:72:DF:9E:F5:DD:C8:5C:DD:12:6E
            X509v3 Authority Key Identifier:
                keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/6108822AB03C11EC918CBA0EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:49:a9:79:fb:fe:14:d6:38:86:96:cf:ef:66:b3:44:da:e5:
         54:5f:6a:ce:20:06:81:49:24:d0:72:a9:a9:e4:53:44:2a:cf:
         24:50:a7:b5:7b:80:87:e2:a4:66:25:ad:27:75:92:4e:1f:c4:
         7a:ab:2c:57:51:8d:48:47:3a:ea:da:53:25:db:2a:38:9d:35:
         e6:6f:4a:42:62:96:74:8f:17:24:07:d7:cf:08:b1:d7:f2:c1:
         b7:40:3d:ba:f1:2d:c8:d1:d8:f3:02:3d:17:15:56:88:2f:0b:
         0f:a2:c0:b9:ce:f8:7b:a2:ac:54:32:d2:5d:f6:72:c5:5d:b5:
         db:ed:6c:3c:63:f6:f5:2f:00:39:6e:04:ee:0f:8c:c6:8d:b6:
         d6:c7:08:8a:31:e8:be:f4:12:95:8c:9d:8b:cb:a4:f3:c9:9e:
         0c:aa:4d:45:b5:00:14:b4:f7:f1:b1:af:d8:40:a9:36:69:2c:
         83:3f:1a:40:08:e2:83:1f:96:d3:84:ba:f0:43:d9:5d:84:4e:
         6e:c9:e0:6c:60:ff:c3:5e:02:96:81:cd:f8:ef:60:0f:6c:8c:
         4a:e9:8e:e2:5c:60:d0:8b:bb:e6:a1:c2:57:ca:e5:a0:1d:39:
         04:0a:b4:a8:36:7a:93:e2:62:06:f4:cf:00:67:1c:ec:41:1c:
         24:1c:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:44:33 2024 by rpki-client on console-ams.rpki-client.org