Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/7B16F590D3EA11EB99BAC229C4F9AE02.roa
File:                     7B16F590D3EA11EB99BAC229C4F9AE02.roa (raw, json)
Hash identifier:          wD4r+nWjX0BClO+YbivtajKKfSIYJ6ztt1f7SyMSgV8=
Subject key identifier:   FE:4E:D0:41:B4:D9:00:74:2C:20:B5:18:CD:F7:AE:7C:32:78:9F:42
Certificate issuer:       /CN=A919905B/serialNumber=ACA91EA4097D9E9F31F56EFAC6BD48F016BE98D3
Certificate serial:       042C
Authority key identifier: AC:A9:1E:A4:09:7D:9E:9F:31:F5:6E:FA:C6:BD:48:F0:16:BE:98:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/7B16F590D3EA11EB99BAC229C4F9AE02.roa
Signing time:             Thu 29 Jun 2023 00:17:21 +0000
ROA not before:           Thu 29 Jun 2023 00:17:21 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     38588
IP address blocks:        103.168.140.0/23 maxlen: 24
                          2407:9040::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.crl
                          rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 02:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1068 (0x42c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919905B/serialNumber=ACA91EA4097D9E9F31F56EFAC6BD48F016BE98D3
        Validity
            Not Before: Jun 29 00:17:21 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=649ccd91-2133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ca:bd:75:0b:6f:be:d3:d1:8e:33:f7:f9:88:
                    80:36:09:78:2a:5c:07:c2:78:d3:96:7f:72:2a:eb:
                    89:5e:af:94:bb:59:a4:03:65:32:13:59:67:19:1b:
                    26:51:36:1b:64:8e:a5:7a:f4:8a:1a:52:a6:96:57:
                    16:7e:4b:53:75:3d:29:e9:0e:94:5a:44:bc:21:3c:
                    25:b8:da:6e:fa:6b:6d:08:4a:77:7e:23:3e:62:ba:
                    55:a7:49:4f:10:0a:f8:70:ed:bf:47:b7:99:43:39:
                    ba:bf:23:f2:48:66:f4:79:29:79:ca:14:25:03:82:
                    46:11:a1:eb:44:39:3b:ee:37:ca:85:79:7e:33:b3:
                    33:e6:9b:7c:91:a8:bb:41:9f:f3:e1:71:62:31:a2:
                    b1:61:09:7a:2f:e3:36:1c:2e:3b:b3:b0:d6:33:52:
                    46:b6:aa:20:30:72:ae:dd:3e:77:92:d0:10:0e:4c:
                    b1:e9:09:6e:83:bc:8d:de:52:77:e8:07:0d:1e:5a:
                    43:3f:be:ea:e5:0c:38:c3:86:01:eb:6e:68:37:66:
                    c2:25:5e:7f:61:59:38:cc:20:29:80:39:cf:e0:cd:
                    58:04:ee:76:d7:e1:c3:bf:7b:dc:de:2d:29:9b:30:
                    fb:4b:ec:8e:7d:c7:44:71:2c:80:14:3b:11:08:0f:
                    f6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4E:D0:41:B4:D9:00:74:2C:20:B5:18:CD:F7:AE:7C:32:78:9F:42
            X509v3 Authority Key Identifier:
                keyid:AC:A9:1E:A4:09:7D:9E:9F:31:F5:6E:FA:C6:BD:48:F0:16:BE:98:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/7B16F590D3EA11EB99BAC229C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.140.0/23
                IPv6:
                  2407:9040::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:e5:b2:5a:54:e7:9c:61:1f:5b:a6:fb:20:a6:76:ac:07:bd:
         e1:69:90:93:b5:8a:b1:97:9e:fd:b3:37:3c:d9:ea:dd:7c:ca:
         5a:8a:de:e3:40:10:b6:81:96:25:e4:f7:17:04:1b:bf:0f:08:
         ed:1a:15:a6:0c:62:a4:47:de:5d:d9:28:89:98:5e:1e:fd:ea:
         bd:8e:63:75:91:7b:3d:61:a2:0e:e4:b4:7a:13:50:d9:72:c7:
         f2:c6:6c:8e:c1:1b:84:3d:8e:c1:15:ee:f0:b4:c2:8e:12:1f:
         cd:cd:a9:26:a7:f6:c9:9e:89:d2:47:9d:2c:06:a1:02:ed:70:
         3e:a4:1d:1d:b2:f6:35:5d:88:21:43:d2:6d:78:5d:da:81:4c:
         25:18:5f:af:fe:41:0c:41:c4:af:e6:f5:89:8e:b1:b9:c1:12:
         cd:89:0f:41:fc:35:6d:ea:12:83:3c:76:10:d7:f6:08:79:a6:
         ba:23:a1:f6:da:c2:b8:62:c4:e0:aa:12:6b:e1:5f:e8:cb:6f:
         2d:c3:57:a6:03:9d:c4:33:70:5f:4f:98:22:ce:25:48:54:70:
         0e:e3:25:29:ae:4f:06:8e:a3:bf:1b:b7:37:ac:44:5e:41:30:
         3c:49:6a:0d:90:f1:fb:67:82:e8:4d:fc:35:4b:5a:f6:52:46:
         6c:38:48:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:55:17 2024 by rpki-client on console-fra.rpki-client.org