Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/1BA16D001F8211EC8FC82E73C4F9AE02.roa
File:                     1BA16D001F8211EC8FC82E73C4F9AE02.roa (raw, json)
Hash identifier:          YmZSfwmOLTcvS+ZrTXziUHM/FD7XL+wHJjgl7HKUAsk=
Subject key identifier:   AE:FC:74:33:95:D4:41:03:58:C3:5A:4B:F1:EA:CE:64:71:AE:67:5B
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       33DD
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/1BA16D001F8211EC8FC82E73C4F9AE02.roa
Signing time:             Tue 20 Jun 2023 14:50:19 +0000
ROA not before:           Tue 20 Jun 2023 14:50:19 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     142599
IP address blocks:        203.107.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13277 (0x33dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jun 20 14:50:19 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6491bcaa-44d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:43:fd:e0:88:bd:76:7a:96:3a:50:a9:7b:ea:
                    ff:92:be:21:fb:08:f6:8e:4e:8f:ce:95:11:31:98:
                    4c:77:85:a7:07:b1:34:38:88:8e:d3:25:f4:c3:9b:
                    2b:00:c3:33:39:70:a7:23:b1:5b:6b:9d:21:b4:16:
                    49:12:27:a4:55:bf:02:86:1f:7e:ca:77:26:e3:c4:
                    64:e7:a2:b5:23:b1:65:cf:f2:e9:4a:a2:0a:35:e0:
                    c1:89:98:1f:98:0e:18:b2:fd:c6:bd:fa:3d:8e:8e:
                    77:4c:38:0d:8a:a2:4d:d5:56:53:57:6a:87:6c:40:
                    ce:c6:fe:74:18:54:24:1a:b7:1a:2e:c6:7f:46:06:
                    98:35:9f:15:4b:4f:4d:db:7a:09:71:91:3d:c6:a8:
                    14:93:c3:72:60:05:b5:2b:7c:84:b2:3e:28:0f:91:
                    87:bb:24:61:54:75:06:50:e1:ed:29:3b:50:45:02:
                    72:48:db:41:ac:01:e7:fc:b1:14:b9:72:e3:c7:f0:
                    d5:aa:c4:04:8b:0e:ee:c8:3b:19:72:3a:28:4c:91:
                    87:73:00:41:e6:4d:41:c1:ba:8e:41:40:0f:ff:1c:
                    2d:af:31:3c:b9:f0:75:c1:a3:98:48:e1:05:da:ba:
                    7c:c5:c5:1b:16:08:75:a2:42:f2:d8:2f:82:c7:61:
                    3b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FC:74:33:95:D4:41:03:58:C3:5A:4B:F1:EA:CE:64:71:AE:67:5B
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/1BA16D001F8211EC8FC82E73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.107.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:c2:5e:d4:d9:cf:f4:78:21:ab:8b:72:2e:45:8d:f3:7f:ed:
         b1:23:7d:ee:45:c1:40:80:7d:8a:6e:a1:9b:93:a0:be:4b:90:
         60:b8:9d:ff:92:89:75:e1:25:bf:5a:df:10:71:e3:58:7a:cc:
         15:f3:fb:54:c9:be:63:01:e5:36:52:f3:23:39:53:6b:1f:b3:
         f0:e5:ae:9d:3a:bb:2e:a7:c1:81:89:b8:a7:0b:3c:b7:2a:ec:
         e3:92:de:7b:68:64:3b:18:83:8b:d9:3b:0b:ef:82:71:4e:28:
         92:42:05:3a:91:9c:0d:79:d1:93:e1:f3:29:ef:c9:c5:ac:89:
         d7:7b:71:cb:27:f5:21:9c:3d:3f:4c:ba:f4:f3:c9:ce:d6:5f:
         81:a1:95:95:64:e4:18:3d:f8:17:16:76:60:77:bf:b4:01:43:
         ea:75:48:71:05:4a:31:34:47:4e:cf:70:dd:6b:d3:87:61:a9:
         c5:7f:53:3f:29:c7:44:15:54:90:df:db:f4:6b:79:dc:da:7a:
         e3:83:6b:fe:d8:be:98:b4:08:47:6d:3e:a4:ea:a8:ca:9d:1e:
         31:8f:26:5c:b7:ce:f9:13:90:1b:75:d1:c6:b8:ac:99:3e:b7:
         58:32:a4:87:3d:a7:e6:31:8a:4f:1b:03:95:21:94:f9:28:3f:
         12:94:f4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:59:01 2024 by rpki-client on console-fra.rpki-client.org