Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/A1491F7CEB7811EB9134133BC4F9AE02.roa
File:                     A1491F7CEB7811EB9134133BC4F9AE02.roa (raw, json)
Hash identifier:          n1gA4BJL+iiXO8XNsbrOTpRLjtSthYwxoeQOb7zYhrY=
Subject key identifier:   3A:AA:64:C1:86:CB:27:DA:A0:87:3D:43:7E:17:5D:60:B4:C4:50:DA
Certificate issuer:       /CN=A91F4553/serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
Certificate serial:       03DE
Authority key identifier: AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/A1491F7CEB7811EB9134133BC4F9AE02.roa
Signing time:             Sat 27 May 2023 03:10:19 +0000
ROA not before:           Sat 27 May 2023 03:10:19 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     135607
IP address blocks:        103.166.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl
                          rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 990 (0x3de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4553/serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
        Validity
            Not Before: May 27 03:10:19 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6471749a-4664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:db:57:30:78:ac:84:6e:44:72:29:c3:b9:9a:
                    2c:a9:a2:5e:74:11:b1:ef:75:2c:b9:38:9b:43:f5:
                    6c:3d:62:ec:02:79:fc:39:70:3d:5f:12:73:97:9e:
                    59:1a:e6:ad:f3:dd:ba:20:08:56:46:c7:dd:6f:ad:
                    4c:80:ff:06:41:b2:e1:da:db:4b:56:c0:cd:44:ff:
                    2a:2c:33:c4:8f:b6:f6:9c:a0:64:0f:39:31:0c:58:
                    40:2d:04:60:75:c4:a4:3f:14:8b:f2:1b:48:d7:63:
                    7e:a2:50:b7:23:47:6e:eb:19:48:fa:8a:9e:61:89:
                    ea:a0:9e:fe:97:82:35:12:1e:26:48:82:69:a2:2c:
                    bd:b3:0a:02:0a:dd:3e:d7:18:73:ce:8f:33:9b:49:
                    0d:41:53:5f:61:62:46:d4:25:2d:a4:ee:90:21:67:
                    70:50:b4:d2:73:93:26:17:88:49:b2:38:d5:81:91:
                    6d:a7:8b:dd:a6:8f:e4:60:3d:fd:ea:ba:57:b4:d1:
                    60:f8:f6:e1:ec:99:e8:6d:66:79:a4:f5:2d:ad:0d:
                    b6:89:45:7c:6e:ee:9c:b1:60:5c:18:9a:a9:88:21:
                    b1:32:93:b3:39:14:ff:28:31:b4:c7:2f:46:4d:0d:
                    9a:c5:42:05:f5:e6:37:3f:bb:12:e3:9b:45:45:ce:
                    db:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AA:64:C1:86:CB:27:DA:A0:87:3D:43:7E:17:5D:60:B4:C4:50:DA
            X509v3 Authority Key Identifier:
                keyid:AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/A1491F7CEB7811EB9134133BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:12:78:c9:d9:d8:ef:16:05:27:9f:a1:d0:33:ca:97:d6:93:
         98:5a:1c:23:ad:ed:22:ce:e6:ad:5c:e6:ef:ad:7a:39:da:ee:
         26:d9:bf:00:7d:ab:ee:d1:53:fd:62:45:2d:89:b8:c0:da:b6:
         07:4f:10:bb:3d:15:03:0d:1b:73:36:2e:e2:a7:28:30:5c:a3:
         7b:28:12:01:ab:5b:38:15:3b:f7:4e:8d:2a:dd:d6:7f:d0:56:
         19:39:82:ff:e3:1a:47:59:b3:77:83:1c:67:d2:82:bc:34:21:
         84:d6:99:6d:83:03:7d:53:c5:21:13:f5:b4:07:74:c8:d9:75:
         65:59:03:ac:c0:44:da:0c:c7:66:07:2d:0b:5c:c4:fc:85:12:
         74:cb:c9:d6:15:1a:e1:de:1a:f2:34:04:27:86:15:a4:28:6f:
         67:15:6c:d3:39:64:cc:16:ea:9b:1b:c4:a3:3d:cd:5d:24:63:
         ba:4c:73:e4:1a:a5:e3:d5:05:0e:b0:46:cc:4a:77:86:b7:97:
         37:7e:12:61:08:3b:70:21:d4:7d:fe:c3:13:af:0a:c0:a6:9d:
         21:20:f0:a6:bb:2a:05:14:00:4f:72:2f:1f:ab:f8:3b:d1:a3:
         e5:01:8b:5c:68:40:b8:ac:87:e5:48:e0:10:c7:9e:bc:6d:f2:
         67:02:dd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:59:16 2024 by rpki-client on console-ams.rpki-client.org