Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/B8B2C3BC4E9511EDA5AF6A34C4F9AE02.roa
File:                     B8B2C3BC4E9511EDA5AF6A34C4F9AE02.roa (raw, json)
Hash identifier:          olvFbdFyBTW7DMqyMp5YfklWI99094pYvPZ7PU+nFfo=
Subject key identifier:   13:1D:9A:9B:36:B7:B9:8C:B2:FA:F5:14:2C:38:7B:84:AF:09:B6:62
Certificate issuer:       /CN=A91DC9C4/serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7
Certificate serial:       9C
Authority key identifier: 84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/B8B2C3BC4E9511EDA5AF6A34C4F9AE02.roa
Signing time:             Tue 15 Aug 2023 04:04:15 +0000
ROA not before:           Tue 15 Aug 2023 04:04:15 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     55636
IP address blocks:        27.116.60.0/22 maxlen: 24
                          103.73.164.0/22 maxlen: 24
                          202.172.22.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl
                          rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 05:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC9C4/serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7
        Validity
            Not Before: Aug 15 04:04:15 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64daf93f-eb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a7:84:98:ed:be:87:5e:0e:3b:78:20:4a:f5:
                    59:89:a8:24:b3:19:d9:6b:1e:52:ad:fb:76:53:1e:
                    e8:fb:89:c4:24:1d:f3:f7:e9:cb:c6:8e:de:21:25:
                    e9:21:4d:83:26:6d:64:c3:75:5a:a6:ef:e0:0a:f4:
                    d4:5f:cb:97:24:00:ef:55:41:40:5f:9a:bd:52:59:
                    a7:46:69:51:4d:35:8d:9b:2d:bd:67:ae:99:04:3d:
                    35:aa:54:b3:24:30:2d:8f:7f:03:76:8b:c8:99:13:
                    bc:51:11:ef:6f:4b:1f:38:da:49:e2:1b:2d:11:73:
                    1a:ab:80:ab:91:13:16:d3:e6:1d:e4:fa:58:d8:9d:
                    58:19:94:82:4a:6a:5b:23:bf:30:c6:4d:8d:fe:74:
                    f4:f5:a2:96:f2:65:c2:69:47:19:0c:d8:36:05:29:
                    2a:98:82:ee:75:c9:cc:71:11:70:96:92:82:52:c1:
                    ba:4e:03:15:ad:8c:fe:c9:1d:46:a9:ce:53:72:49:
                    0d:b7:d7:34:4f:b4:47:69:a0:7e:38:94:06:56:85:
                    36:01:80:62:58:02:86:02:d1:a6:ec:9b:db:f7:95:
                    aa:eb:ff:e7:cb:ba:2c:20:53:b6:c1:31:6d:89:17:
                    1e:34:00:bb:44:a1:c0:08:fb:d6:2e:2b:2f:c8:f6:
                    51:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1D:9A:9B:36:B7:B9:8C:B2:FA:F5:14:2C:38:7B:84:AF:09:B6:62
            X509v3 Authority Key Identifier:
                keyid:84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/B8B2C3BC4E9511EDA5AF6A34C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.116.60.0/22
                  103.73.164.0/22
                  202.172.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:13:32:e2:da:1b:00:ad:61:2c:98:f0:19:3a:e3:39:21:40:
         f9:36:18:91:72:fc:e8:fd:ce:83:6e:45:1f:73:8b:e6:b8:d0:
         6d:f8:f5:e2:e5:0c:8e:6d:14:4e:fa:f3:31:74:10:4a:7c:df:
         5e:d9:b3:8e:9d:c4:f5:83:76:ef:ab:f3:e4:f2:40:6d:7c:ac:
         a1:69:12:14:12:78:e4:b3:f4:af:cc:7a:ad:5e:dd:e3:70:07:
         35:e7:99:8b:89:7f:a6:c9:41:00:e0:32:2f:8e:7c:49:ec:00:
         60:4e:73:b2:f3:f7:dc:e4:c9:b4:51:9f:76:c3:a8:c2:1d:fb:
         3b:8c:d4:6a:d3:05:af:c6:2d:42:53:0e:54:84:48:66:2d:5f:
         2d:69:1a:c8:20:86:f2:0f:fb:10:6f:f0:45:60:a2:ce:d7:93:
         39:08:bb:09:93:a8:09:ab:2a:c7:77:0a:09:3e:f1:56:95:6c:
         f4:32:bc:ba:52:84:50:9a:97:94:81:09:f0:5b:87:c7:99:77:
         e8:3f:57:79:b2:f3:90:59:7b:6c:d1:d8:40:40:2b:e1:3b:6a:
         a5:01:7b:86:42:cb:fe:f9:9c:73:f4:bf:e9:17:52:dc:3c:20:
         9a:86:1b:8c:99:8e:08:39:da:62:21:7c:07:a4:e3:c4:e3:eb:
         a4:58:59:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:46:29 2024 by rpki-client on console-ams.rpki-client.org