Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/48459AB0BACF11EBAA321370C4F9AE02.roa
File:                     48459AB0BACF11EBAA321370C4F9AE02.roa (raw, json)
Hash identifier:          x6jQohCoj+QUFQmVSGaEL1Y1YeIhw7aEECJy7REJd6g=
Subject key identifier:   5D:6F:D1:97:4C:06:9E:B7:48:5F:50:21:51:DC:37:77:65:D8:78:6A
Certificate issuer:       /CN=A91F52FD/serialNumber=5D45DAA558FF65F66635B9678809B8ACF04073D2
Certificate serial:       0478
Authority key identifier: 5D:45:DA:A5:58:FF:65:F6:66:35:B9:67:88:09:B8:AC:F0:40:73:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUXapVj_ZfZmNblniAm4rPBAc9I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/48459AB0BACF11EBAA321370C4F9AE02.roa
Signing time:             Mon 03 Jul 2023 00:10:51 +0000
ROA not before:           Mon 03 Jul 2023 00:10:51 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     136562
IP address blocks:        103.92.212.0/22 maxlen: 24
                          2401:2140::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.crl
                          rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUXapVj_ZfZmNblniAm4rPBAc9I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1144 (0x478)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F52FD/serialNumber=5D45DAA558FF65F66635B9678809B8ACF04073D2
        Validity
            Not Before: Jul  3 00:10:51 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64a2120b-3268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f9:b2:b5:d9:95:66:65:9a:30:1c:fe:0a:80:
                    6f:3d:55:8b:a3:df:cf:3f:f8:7b:cf:6f:ba:be:b9:
                    91:e4:db:44:47:7b:f8:ed:4a:5a:08:5d:49:13:25:
                    fd:e8:c5:3a:2d:7e:bf:b7:fc:eb:37:b7:4d:41:f6:
                    0f:db:eb:4e:6c:bd:7c:ab:83:9e:e4:a3:2f:88:b7:
                    e1:46:68:8a:78:e1:f9:ec:06:0d:ac:12:61:b2:df:
                    a3:75:b1:2f:61:da:4a:4d:28:d3:29:80:5c:2a:2b:
                    ed:c4:f3:84:73:2d:42:0f:37:2c:a7:d0:2a:41:48:
                    20:35:4a:53:d6:d2:fa:fe:e8:07:84:e3:10:78:5a:
                    32:5c:32:17:f1:35:1d:df:05:e3:98:aa:ff:af:bb:
                    0d:10:18:7c:69:17:ea:20:55:d5:c9:d4:49:c5:4f:
                    0d:fb:09:e4:76:4c:04:2c:61:5c:cc:fa:b6:68:10:
                    38:2a:0e:ff:e2:bf:3c:57:97:cf:65:f0:03:04:d9:
                    79:86:c3:e9:5c:3a:ad:bb:c4:1f:99:83:b8:82:8f:
                    86:c5:15:b0:4e:ff:ac:d0:08:83:94:19:d3:2e:4a:
                    4f:00:a0:d1:02:92:98:f8:01:bf:51:b8:f8:be:94:
                    e1:10:25:26:0d:19:f8:b6:b4:82:c6:2d:e7:e2:f6:
                    da:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6F:D1:97:4C:06:9E:B7:48:5F:50:21:51:DC:37:77:65:D8:78:6A
            X509v3 Authority Key Identifier:
                keyid:5D:45:DA:A5:58:FF:65:F6:66:35:B9:67:88:09:B8:AC:F0:40:73:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUXapVj_ZfZmNblniAm4rPBAc9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/48459AB0BACF11EBAA321370C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.212.0/22
                IPv6:
                  2401:2140::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:e3:8b:85:c1:32:86:ca:bc:a8:d9:4d:ea:3e:94:bf:50:2e:
         5c:4d:79:a4:83:db:0b:e7:cb:11:48:fb:43:7c:07:51:42:53:
         26:10:7e:96:27:9d:03:42:02:c5:fb:60:1a:46:a8:d7:34:48:
         f0:2a:77:5c:db:07:9f:d6:92:3a:55:20:1e:04:06:f9:28:d6:
         4b:07:cc:9e:22:16:3e:57:b6:4e:19:bb:29:5a:57:8a:47:bf:
         5e:83:14:2f:4f:a8:76:0b:05:98:19:83:aa:1c:44:91:25:52:
         f9:93:9a:e6:b1:eb:1e:b1:11:3f:45:6c:ce:4b:ca:00:72:79:
         13:b2:34:94:a0:f6:71:5e:95:81:f5:8e:e5:10:58:b9:4f:27:
         93:31:7d:ce:87:9a:35:a7:05:be:f4:49:0e:1e:78:88:85:73:
         cb:b5:91:39:09:dd:ce:33:a0:27:ae:c1:28:38:0e:37:0d:24:
         5e:23:e7:11:50:fe:c7:91:f9:dd:d6:97:3d:99:4b:53:10:b8:
         87:ab:47:7b:d6:13:35:a3:fc:5e:7a:cd:b4:ad:06:a7:ac:a3:
         76:f6:67:26:72:79:7d:4e:7b:89:af:00:94:4d:3c:91:aa:3a:
         8d:b5:04:9b:8b:b2:9b:21:25:99:81:b6:96:de:22:58:36:bc:
         ae:5d:c1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:15 2024 by rpki-client on console-fra.rpki-client.org