Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/AECDA1B0448F11EDACC30815C4F9AE02.roa
File:                     AECDA1B0448F11EDACC30815C4F9AE02.roa (raw, json)
Hash identifier:          75VrOzcpDab1F7Wv+WNG5U/RAvlmTKHuKdZ/I9KgDv8=
Subject key identifier:   E2:17:11:98:BC:8F:A5:1D:5F:74:E7:00:6D:79:CB:1E:96:D5:F9:23
Certificate issuer:       /CN=A91E66E5/serialNumber=5C395BA2CA0ABF65888726874C7824B69B789995
Certificate serial:       0D69
Authority key identifier: 5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/AECDA1B0448F11EDACC30815C4F9AE02.roa
Signing time:             Tue 26 Mar 2024 18:37:18 +0000
ROA not before:           Tue 26 Mar 2024 18:37:18 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     35280
IP address blocks:        103.135.56.0/22 maxlen: 24
                          2404:75c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.crl
                          rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3433 (0xd69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E66E5/serialNumber=5C395BA2CA0ABF65888726874C7824B69B789995
        Validity
            Not Before: Mar 26 18:37:18 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=660315de-272f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e9:59:fc:76:74:a4:0a:b5:11:11:cb:2b:18:
                    20:47:71:7d:5e:a9:cf:bc:d7:9f:ab:d4:bd:94:b3:
                    20:8d:22:32:22:d9:9b:8f:eb:4c:1c:55:aa:cd:5a:
                    1f:f5:0a:f4:03:9f:86:ab:03:4a:35:de:84:03:11:
                    bb:c7:14:35:5e:83:69:a4:48:50:d4:1a:ac:c2:60:
                    c2:b1:ed:c8:0d:c2:93:1a:fc:54:44:99:57:a2:c2:
                    0f:94:7e:cd:75:13:5f:e7:e6:fa:49:69:62:c5:02:
                    a0:f3:ce:90:f8:ea:25:8c:61:ca:5d:15:b4:b2:45:
                    2c:26:42:ff:9e:e8:75:f7:9a:50:e8:b6:90:d4:ec:
                    12:11:40:64:fe:56:0d:1f:c5:d1:51:88:8f:bf:3d:
                    de:97:cf:20:2f:f8:27:7b:23:ab:08:2e:b5:e1:40:
                    8e:7e:53:94:e7:b3:94:be:3e:c7:ac:09:ff:f0:73:
                    ee:ec:8c:e5:2d:65:77:91:b1:51:f6:d0:cf:0e:f2:
                    18:fa:fa:69:aa:02:f5:9d:be:b6:28:b6:3d:10:b9:
                    62:e2:91:e1:ae:dc:2d:18:9d:ae:dc:b3:28:ee:0d:
                    13:d3:72:ab:12:7a:7e:fa:0b:af:33:72:fa:cf:95:
                    0c:5c:c0:52:fb:b5:fe:a4:fc:67:39:fd:43:7c:08:
                    ac:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:17:11:98:BC:8F:A5:1D:5F:74:E7:00:6D:79:CB:1E:96:D5:F9:23
            X509v3 Authority Key Identifier:
                keyid:5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/AECDA1B0448F11EDACC30815C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.56.0/22
                IPv6:
                  2404:75c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:e2:0e:16:16:f1:36:98:6b:19:f5:be:d8:25:e4:f7:11:97:
         bc:40:fd:a7:3c:fe:7e:6e:ea:a8:5c:99:25:98:5e:ea:d4:28:
         1d:11:ee:e4:fa:08:9d:cb:4b:c6:39:a1:8f:7a:31:95:8d:e6:
         c6:d8:a8:ea:6a:90:ad:2f:79:18:cc:b2:a2:a1:ab:4b:80:dd:
         fe:1e:87:f6:19:e5:cc:75:bb:b9:7a:c4:22:24:fc:c4:da:46:
         44:27:8b:c5:ce:02:fb:a2:4d:4b:4f:9e:b9:e5:25:7f:cd:2e:
         2f:97:57:8b:e3:4f:41:a5:72:e3:bf:98:5d:b5:50:da:8b:61:
         b3:0c:9f:db:c7:30:b8:dd:eb:ea:da:d6:f7:bf:08:ed:2d:5c:
         0c:b7:80:6a:cf:58:37:37:d3:5a:8c:cb:3f:ec:31:58:e3:1a:
         bf:eb:a6:1a:0e:72:9b:ea:98:ef:48:cc:14:7b:da:8c:07:33:
         10:85:d3:82:8e:fd:52:59:3c:ce:75:40:da:1a:4c:a5:50:08:
         b9:eb:29:4b:20:ed:3f:cc:62:d0:43:21:6f:7d:3e:82:ea:1e:
         04:61:2b:4d:b5:a3:92:5a:e9:58:eb:10:79:d2:7e:06:0c:f9:
         1f:ba:d9:66:7d:61:42:8f:bc:74:62:27:61:88:05:4d:f2:39:
         2e:7a:b8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:09:58 2024 by rpki-client on console-ams.rpki-client.org