Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/761C9E22171811EF81DCE817C4F9AE02.roa
File:                     761C9E22171811EF81DCE817C4F9AE02.roa (raw, json)
Hash identifier:          LyBX9XVg8UDWd7Dzv6yylDCXpPQEsS/LyGX93vcCW8I=
Subject key identifier:   08:5C:25:09:C2:A6:3E:C2:68:E5:78:C6:3F:2C:75:75:7F:5B:82:ED
Certificate issuer:       /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986
Certificate serial:       0614
Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/761C9E22171811EF81DCE817C4F9AE02.roa
Signing time:             Tue 21 May 2024 02:18:50 +0000
ROA not before:           Tue 21 May 2024 02:18:50 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     36131
IP address blocks:        103.208.252.0/22 maxlen: 23
                          103.208.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl
                          rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1556 (0x614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986
        Validity
            Not Before: May 21 02:18:50 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=664c048a-aa43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3e:13:71:83:f9:a6:cf:37:41:04:ee:86:17:
                    a2:6e:36:41:15:63:cc:43:61:5b:cb:e9:9b:58:7d:
                    16:ab:20:f1:12:b5:12:15:2c:93:42:dd:f5:bc:40:
                    09:a8:e4:4d:be:e7:76:c6:84:5d:e5:8f:ca:0c:90:
                    d0:35:c1:3c:b8:64:8c:23:c8:0b:75:b2:a6:6b:31:
                    59:f8:09:f3:f2:7b:b1:55:97:1c:85:34:21:9e:72:
                    6b:1c:19:41:08:f3:7f:b9:93:2b:fe:9c:b4:6b:71:
                    45:76:da:b7:d5:ce:b0:32:9a:7f:dc:86:bd:d1:d0:
                    b5:15:d1:9f:78:58:72:6c:ae:de:25:45:46:25:73:
                    9c:0c:38:49:1a:06:e7:a6:2f:79:8b:9a:19:d2:2a:
                    46:ad:2b:49:6f:d9:e7:3a:08:f9:74:c4:aa:54:06:
                    22:4b:22:41:ac:11:be:cf:11:fa:5b:38:88:46:c6:
                    d7:ba:0d:00:5b:04:ab:d9:f1:a1:a7:bb:72:42:1b:
                    1d:e4:b8:bc:78:b6:2e:19:8d:3d:37:81:1a:9f:cb:
                    aa:eb:53:47:ea:17:3d:d0:e1:1b:f4:3b:c1:8c:dc:
                    49:f9:a2:d3:f0:0e:46:00:fd:22:06:52:1c:4e:35:
                    28:b8:9b:51:a0:ef:b3:69:d7:70:1c:72:04:d4:df:
                    de:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5C:25:09:C2:A6:3E:C2:68:E5:78:C6:3F:2C:75:75:7F:5B:82:ED
            X509v3 Authority Key Identifier:
                keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/761C9E22171811EF81DCE817C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:b5:12:9b:64:1a:51:e7:f5:f7:0a:4e:e9:e0:97:36:6d:54:
         d9:95:6a:75:ad:e2:3f:31:03:75:fb:20:90:5c:47:7d:f7:12:
         87:16:86:fd:03:91:df:0e:bc:d6:ef:ff:2c:aa:f2:05:83:e1:
         b7:76:a9:c8:b2:05:aa:9d:17:48:3b:fe:e2:74:21:94:b5:c2:
         69:d9:34:84:e8:d7:08:77:c6:f5:49:46:ff:79:38:7a:79:ad:
         10:58:44:5c:f8:5d:ce:44:e9:59:d7:19:2c:51:f8:65:92:a5:
         80:f0:63:77:d6:29:36:c8:2e:59:7b:d0:ba:d0:58:ef:88:d7:
         78:87:90:4c:14:c2:02:58:4b:a5:9f:99:a5:16:bb:30:50:90:
         89:0f:03:f6:23:9e:72:c1:5e:23:e2:a7:d7:81:8a:18:86:28:
         7d:5f:53:72:76:71:c6:a3:c2:7e:c8:ca:7f:76:46:6c:e4:01:
         b3:3d:d2:ab:e7:f2:48:b2:63:d2:72:69:c5:fe:ff:66:86:16:
         cf:4b:10:9b:41:ee:de:0e:61:3f:46:3f:a3:cb:06:0a:78:29:
         41:8b:5d:f7:9d:07:ff:a7:0a:87:b3:41:6a:4c:3a:f4:2c:55:
         22:65:17:94:b8:2d:79:9d:d6:55:65:93:88:7d:86:15:60:45:
         e4:bb:74:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:00 2024 by rpki-client on console-ams.rpki-client.org