Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/16DA3F3E784E11EC96A28137C4F9AE02.roa
File:                     16DA3F3E784E11EC96A28137C4F9AE02.roa (raw, json)
Hash identifier:          WE5OMt+rDqoJCPg5JbhQjVU9pu+T1cVc8AMt1U8Dqa8=
Subject key identifier:   47:4D:82:34:D7:34:5E:D3:E5:07:28:09:62:DD:91:64:E6:09:82:FF
Certificate issuer:       /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1
Certificate serial:       03FD
Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/16DA3F3E784E11EC96A28137C4F9AE02.roa
Signing time:             Thu 31 Aug 2023 01:13:16 +0000
ROA not before:           Thu 31 Aug 2023 01:13:16 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     210488
IP address blocks:        103.170.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl
                          rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 02:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1021 (0x3fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1
        Validity
            Not Before: Aug 31 01:13:16 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64efe92c-b483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8d:af:6c:3d:0b:c0:5f:6e:0e:f3:4d:88:93:
                    af:94:00:f6:f1:db:3b:12:a4:c6:42:46:4b:2d:55:
                    f9:1a:5b:2f:43:4c:5a:1a:89:17:46:1e:a0:d8:e9:
                    20:4b:16:88:79:13:01:e4:8a:1d:f0:16:0c:9c:2e:
                    a0:9c:b3:19:8c:31:e0:c1:c5:d3:d5:a0:4a:77:7e:
                    d4:83:4b:ae:60:17:0f:df:5d:b0:1e:fa:fd:c7:7f:
                    f9:17:79:0b:33:b9:0d:76:28:ca:3d:cf:76:2b:9b:
                    bb:28:7c:65:c6:e2:ed:32:1a:4f:f1:7c:12:95:e8:
                    3c:e7:39:26:48:7e:05:70:db:27:61:f0:63:be:90:
                    8e:18:e3:97:a3:d5:49:30:26:39:10:af:2c:e7:d9:
                    72:e2:d7:85:fc:ad:06:cb:57:2c:e3:06:74:a1:1c:
                    c8:8a:11:1e:d0:0c:39:d9:28:d1:04:12:c3:1a:56:
                    62:97:44:ea:67:1b:47:f7:22:46:08:75:a2:84:ef:
                    c0:d0:7f:85:5a:00:91:32:2b:2c:f5:0d:5b:8e:1b:
                    ff:67:f0:e5:aa:35:60:af:ff:0c:c1:16:ec:3c:d5:
                    56:62:5f:bc:4f:42:33:b4:b3:0b:3d:4d:a7:6b:62:
                    b5:26:51:aa:5a:93:6f:a0:3f:f5:32:e3:46:09:af:
                    8a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4D:82:34:D7:34:5E:D3:E5:07:28:09:62:DD:91:64:E6:09:82:FF
            X509v3 Authority Key Identifier:
                keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/16DA3F3E784E11EC96A28137C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:c6:e1:64:53:99:12:da:1e:66:69:b6:f9:64:6e:43:97:d3:
         b0:58:02:16:9f:93:bc:b0:e4:1b:f8:3e:d4:64:a1:59:89:ad:
         b4:b5:2e:87:4f:e4:ab:bc:4e:7d:cd:53:79:9c:86:fd:39:17:
         1a:87:fb:f6:29:74:e1:ee:9a:11:48:87:cb:cc:34:29:81:be:
         5b:06:68:21:07:f0:bf:f4:1e:5f:09:c7:81:21:a6:e4:ee:2c:
         3c:06:e4:97:3f:d9:7a:dd:23:c0:4b:10:a7:ea:ed:bb:67:cc:
         73:73:00:ae:31:2f:61:59:07:de:97:72:3f:1c:61:90:a3:38:
         e8:7f:e9:99:04:97:e5:20:51:4c:2d:5f:0a:e4:96:a0:02:fa:
         8c:33:f5:5b:b8:82:9c:b6:7b:3d:e2:41:0c:de:fc:e4:6f:25:
         5b:2b:fd:32:2d:57:04:b5:ec:2a:db:9b:a5:b3:87:62:51:6f:
         01:42:5d:df:5e:ae:70:b2:83:26:a6:74:be:25:a5:7c:65:31:
         dd:0b:a6:30:95:d9:71:fa:62:b5:83:a1:32:c3:0a:3d:64:91:
         bb:cc:ec:a2:bc:4b:ea:72:b4:67:5f:53:a1:37:bd:da:66:6e:
         82:83:84:15:22:e2:47:9f:2d:6d:a5:77:37:e6:9e:cb:6a:ae:
         49:54:a8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:58:59 2024 by rpki-client on console-fra.rpki-client.org