Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/165D22AA7A9C11EDAB620123C4F9AE02.roa
File:                     165D22AA7A9C11EDAB620123C4F9AE02.roa (raw, json)
Hash identifier:          ON/W6+ypCb7k2l8fp+btoFNDowO5rzBOLo0jSDrLOyY=
Subject key identifier:   82:5F:AA:67:77:4E:14:25:10:73:D8:84:C2:E5:87:7F:41:88:B2:7A
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3E8A
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/165D22AA7A9C11EDAB620123C4F9AE02.roa
Signing time:             Tue 12 Sep 2023 02:41:51 +0000
ROA not before:           Tue 12 Sep 2023 02:41:51 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     140748
IP address blocks:        103.154.180.0/23 maxlen: 23
                          2001:df4:9480::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16010 (0x3e8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 12 02:41:51 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ffcfef-d3a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:94:1a:62:32:df:94:2f:43:96:f3:31:b4:09:
                    72:5e:23:81:17:c1:b7:f8:b9:6d:b2:4a:ea:f3:98:
                    98:62:ac:9c:b5:84:0a:02:0a:3c:02:25:d1:5b:14:
                    fa:0d:c7:e9:39:bd:7f:1d:7d:31:80:f6:56:c5:d6:
                    1a:13:ab:0d:5f:14:ec:84:28:00:9d:26:15:69:fa:
                    09:76:41:b4:e5:8f:b4:85:fa:9b:a2:7f:75:7e:22:
                    86:58:cb:05:06:20:32:85:e5:21:f7:18:f4:7c:16:
                    6a:2b:4e:df:14:bb:8f:a6:16:b2:a5:e1:e7:99:5f:
                    de:a7:85:35:bb:a0:90:99:85:77:85:70:d4:27:4e:
                    91:7d:e2:d4:dd:a4:95:9f:e3:5d:66:45:47:f1:1a:
                    6c:cb:ff:75:a6:43:43:b2:58:5a:7c:5b:a7:4d:71:
                    c1:c1:ab:23:62:a2:bf:a6:6c:e7:34:10:c4:65:1f:
                    ae:74:37:ce:73:cd:67:86:74:3f:b0:d7:c2:85:0f:
                    20:82:62:64:12:e2:ea:54:80:cb:06:7d:da:f1:e8:
                    c2:43:d6:ba:dd:a8:bb:fa:fc:67:2f:7a:96:fc:3e:
                    3d:ea:5a:ed:eb:cf:ff:d8:7f:ab:52:bb:cd:fb:6f:
                    83:98:f1:a5:cc:de:b8:f7:c7:38:48:5b:d1:61:d2:
                    0f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5F:AA:67:77:4E:14:25:10:73:D8:84:C2:E5:87:7F:41:88:B2:7A
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/165D22AA7A9C11EDAB620123C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.180.0/23
                IPv6:
                  2001:df4:9480::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:6b:38:e1:27:4e:3e:35:b1:f3:3d:84:78:0e:b0:0b:55:ab:
         d1:2e:5a:bc:e8:ea:f8:cf:d4:cb:15:aa:a9:fa:0a:f7:00:e6:
         72:77:a0:be:2d:75:f6:19:28:4b:99:1e:c8:ec:e2:7d:d0:36:
         07:54:67:21:46:4a:f0:cd:ed:c3:67:d8:2c:f2:94:3a:c6:d8:
         d1:d9:4c:85:eb:7e:55:c0:10:c0:b2:6a:29:10:f3:26:70:7e:
         5a:77:a4:16:c1:df:fd:cd:ff:81:68:6a:6e:ff:88:f0:df:d2:
         cd:ee:b3:ae:ee:c4:11:a4:65:73:57:9d:34:ef:a0:ba:80:47:
         30:0a:81:e9:6e:71:58:4b:08:13:a6:41:10:69:0c:f0:da:83:
         2d:17:02:e0:53:ab:95:d0:97:35:ea:87:9e:2b:00:26:a2:eb:
         76:29:a6:ab:0a:2c:32:ae:52:7d:f3:e7:0a:fd:f1:7f:5f:6c:
         d0:84:5b:b9:0a:2a:e7:b2:d6:64:c1:80:9d:1d:06:69:8f:b6:
         53:b5:69:c5:f8:43:f0:56:8d:a8:00:f1:21:21:2d:95:7a:65:
         0b:ac:63:93:b9:72:ff:73:b8:4e:31:15:6d:7a:51:24:39:8f:
         53:42:dd:1c:a4:72:02:e9:fb:db:61:e6:00:02:76:83:d6:88:
         45:fd:c9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:08:33 2024 by rpki-client on console-fra.rpki-client.org