Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/27B7C30637EA11EDBCE36F40C4F9AE02.roa
File:                     27B7C30637EA11EDBCE36F40C4F9AE02.roa (raw, json)
Hash identifier:          yYbK7g3SrmMP1Smnag33e5N74ISPHWagZpxr4tuAVVY=
Subject key identifier:   8E:73:65:14:39:99:C4:31:71:67:73:71:E0:7A:48:FC:BA:42:92:9C
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3EC1
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/27B7C30637EA11EDBCE36F40C4F9AE02.roa
Signing time:             Tue 12 Sep 2023 02:42:40 +0000
ROA not before:           Tue 12 Sep 2023 02:42:40 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     149128
IP address blocks:        103.197.90.0/23 maxlen: 24
                          2001:df1:2d40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16065 (0x3ec1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 12 02:42:40 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ffd01f-e390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:db:a6:3f:7f:fc:e8:90:f1:bc:92:0d:51:
                    21:1c:bc:b1:a0:82:3f:6c:b8:c2:ea:7a:c0:d3:70:
                    1e:41:61:25:d7:0d:1f:4b:80:51:01:61:e4:df:de:
                    39:cf:16:f8:e7:dd:70:7c:6c:22:b5:c9:d1:70:4c:
                    2c:52:fe:18:27:a0:c3:7f:3d:f9:fa:51:8e:4c:60:
                    37:39:97:9e:c4:69:4a:e7:bc:af:a3:ee:da:20:22:
                    88:6e:6a:c9:06:3a:75:6d:65:5c:58:e8:d5:44:27:
                    e5:67:4f:69:22:b5:af:38:ad:e4:c2:ad:8b:6c:2f:
                    c3:23:07:4e:78:60:0e:ac:c0:84:df:d8:af:ac:d5:
                    bd:b1:f2:00:ee:94:1a:57:07:f5:86:96:c2:19:35:
                    94:3c:9f:af:3c:95:7f:5c:c6:0a:2f:61:df:7a:b3:
                    c2:47:d8:4c:fb:f3:9e:1d:61:9e:26:20:72:31:da:
                    17:96:0c:fb:f0:9c:a5:71:42:bb:a1:86:cc:59:93:
                    6a:b2:18:9a:f1:9b:6c:ef:5e:8b:46:ee:a0:0f:2e:
                    98:9c:f6:be:7b:67:bc:9c:a7:a9:88:86:3a:c1:a8:
                    df:5d:ac:92:d2:3a:5b:97:2f:bb:78:fc:fd:98:e8:
                    f3:cd:90:ad:53:67:3a:8c:1a:74:7f:5e:da:a1:d3:
                    03:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:73:65:14:39:99:C4:31:71:67:73:71:E0:7A:48:FC:BA:42:92:9C
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/27B7C30637EA11EDBCE36F40C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.90.0/23
                IPv6:
                  2001:df1:2d40::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:13:d6:fd:0f:2a:f5:9c:95:42:b7:bb:6e:5c:aa:26:df:f5:
         12:4c:6b:fa:4d:02:25:46:5d:c0:4a:2a:71:49:16:d2:64:7e:
         49:76:9d:d8:bf:a1:0f:36:4c:b3:70:6b:20:1a:c3:86:a1:d4:
         be:4d:97:3d:a1:41:1d:36:b5:bf:90:a2:ac:b1:6f:e5:38:7e:
         eb:01:de:97:18:f2:02:3c:d8:44:75:51:7d:1a:f5:ea:c3:bc:
         ca:6a:4d:ed:ff:df:bc:d7:85:51:12:0a:5f:68:36:58:de:6d:
         fc:24:1c:fd:f4:0b:4e:31:9e:a6:47:7a:54:a6:5a:ca:cb:c6:
         ab:39:da:fa:0c:f3:b6:aa:2f:5c:9a:e0:d9:1d:84:2f:67:7b:
         ab:78:3e:e1:74:b7:fa:09:b5:96:7b:fa:7c:07:43:9c:b1:6a:
         9a:aa:11:dd:2b:ef:a7:41:93:3b:a6:a8:b8:45:6c:c7:69:df:
         39:bf:c8:48:05:2f:48:ff:41:68:5c:c9:fa:ec:e1:31:9c:a4:
         07:5f:32:87:d3:8c:80:39:71:5c:4e:c0:f3:58:f3:f5:58:65:
         12:f4:99:b2:2e:ef:d2:42:af:c9:5d:f0:b7:89:dc:ce:c1:0d:
         25:33:83:42:b9:b0:a9:07:57:c7:2c:bc:58:24:76:db:42:2f:
         b7:8d:60:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 16:41:39 2024 by rpki-client on console-ams.rpki-client.org