Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa
File:                     5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (raw, json)
Hash identifier:          3WtNfIpLPBVnGFECfM4b/UME2G3LW5GJWdkPHLRf1l8=
Subject key identifier:   CD:85:34:E7:75:DC:FF:51:8C:FE:06:50:22:E9:5C:F1:09:FC:F8:F8
Certificate issuer:       /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8
Certificate serial:       04
Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa
Signing time:             Mon 25 Mar 2024 21:33:51 +0000
ROA not before:           Mon 25 Mar 2024 21:33:51 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     140607
IP address blocks:        103.189.194.0/24 maxlen: 24
                          103.189.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl
                          rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 05:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8
        Validity
            Not Before: Mar 25 21:33:51 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6601edbf-9ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:87:16:38:df:37:59:4c:07:3b:59:e3:8c:fc:
                    01:91:47:b4:cc:32:d0:5b:9f:e5:82:9c:13:9b:59:
                    e1:25:fc:66:e5:3f:5f:ef:3c:83:62:15:2e:bd:1a:
                    35:dc:ce:36:b3:9f:3a:84:a4:3f:61:4a:29:24:67:
                    80:82:63:04:31:07:9d:1f:ad:33:3a:b6:91:2e:aa:
                    33:3a:1d:99:f7:8f:6f:12:a2:d3:a9:08:11:0e:48:
                    de:e5:81:62:3c:bc:44:e4:99:4d:11:fa:16:a4:9f:
                    6c:6a:2b:83:c2:ce:72:fb:91:22:0b:ee:07:10:b3:
                    9e:6c:a7:ee:ac:06:b3:23:3f:02:54:61:8d:fa:bc:
                    cf:52:1d:0c:b0:f7:19:20:3f:79:3c:7b:b8:f4:79:
                    38:dd:4b:68:b8:87:68:ee:2e:5a:ee:3d:66:14:76:
                    f2:23:ae:66:14:77:f4:76:17:74:0c:3b:2c:ea:35:
                    d8:61:af:a8:aa:b0:16:31:8d:42:87:86:32:48:b6:
                    5f:9e:30:6f:bb:0b:4e:47:5b:d5:30:a6:0c:02:07:
                    5f:f7:a8:6e:a1:32:c6:8a:97:df:ef:e4:1a:66:d9:
                    7c:ee:4f:1b:97:93:20:e5:eb:f4:20:4e:f9:30:ad:
                    2b:5e:48:ab:f5:2e:0c:b4:6d:4a:12:c8:21:79:70:
                    8c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:85:34:E7:75:DC:FF:51:8C:FE:06:50:22:E9:5C:F1:09:FC:F8:F8
            X509v3 Authority Key Identifier:
                keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:e3:c1:54:a9:77:01:3c:c8:f5:45:55:de:33:80:78:7f:6f:
         21:e7:64:f5:9b:f1:19:57:be:e0:54:25:9e:c8:29:f7:82:65:
         39:07:f2:a8:c4:54:ca:23:a4:12:58:65:f8:b1:0a:4a:93:1e:
         2e:84:18:ae:e6:93:18:98:3c:36:a0:f0:05:9c:18:51:07:1b:
         07:5c:f0:d5:9c:ac:30:70:e6:d3:3f:12:61:52:42:a0:12:11:
         37:f9:82:43:6b:f5:e6:1a:87:fe:ec:9e:c3:65:88:ce:ac:04:
         3d:10:e8:e6:95:a8:fb:c3:5f:86:7d:db:69:6e:06:e5:e4:b1:
         77:a4:5a:f6:16:36:2d:da:02:29:d4:01:0b:20:45:ad:20:b0:
         e3:47:1c:cb:12:85:65:c8:aa:d2:24:43:d4:13:7e:53:10:e0:
         2b:53:21:16:68:36:1c:90:ac:cc:3d:94:8c:2b:fc:ce:2e:dd:
         36:88:d8:61:b5:9a:d8:53:38:a2:aa:b0:4e:ae:bf:0a:cc:34:
         88:e0:e8:68:c9:d6:7c:cc:b8:bc:39:d8:49:e0:e2:24:9c:9b:
         4f:b8:24:e0:84:2f:d6:d1:b4:4a:b6:90:36:28:d6:98:06:57:
         c6:5c:23:67:4f:dc:aa:ab:f8:66:fc:a4:0a:35:06:b3:d5:b6:
         62:5a:62:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 08:02:35 2024 by rpki-client on console-ams.rpki-client.org