Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4154F0708CD311ED8825306EC4F9AE02.roa
File:                     4154F0708CD311ED8825306EC4F9AE02.roa (raw, json)
Hash identifier:          IWmdPZxW1A8LfIxIzXVN3Fmy2Oxpv8EL0Ec0Sn/0Wms=
Subject key identifier:   35:DA:D7:02:F4:34:82:2F:D5:A5:1B:68:BF:87:B4:60:14:CD:9E:A0
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3EBB
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4154F0708CD311ED8825306EC4F9AE02.roa
Signing time:             Tue 12 Sep 2023 02:42:34 +0000
ROA not before:           Tue 12 Sep 2023 02:42:34 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     149116
IP address blocks:        103.190.200.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16059 (0x3ebb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 12 02:42:34 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ffd01a-be6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b8:79:69:2f:dc:bf:c6:e1:d3:13:fa:bc:22:
                    90:db:e2:4e:1f:b3:8f:a3:99:0d:a7:ee:5a:cb:6b:
                    85:22:80:0d:6a:ae:4a:c0:b4:c4:10:fd:29:4a:c0:
                    99:af:26:55:fe:13:f6:a4:02:37:c6:87:4d:5e:f8:
                    77:58:cf:19:63:c5:19:ad:2f:4e:77:70:a7:4b:ad:
                    a6:92:09:ce:5b:79:b2:b5:21:ed:26:49:84:f9:11:
                    d5:90:61:3a:9f:2e:1b:04:a6:b8:cf:4b:a1:27:6c:
                    b5:bf:1f:56:59:d0:a4:c3:e2:62:c7:0b:15:97:ad:
                    c1:66:fa:5d:92:9a:80:8c:91:45:f7:88:73:35:4e:
                    46:1f:9e:c1:4a:29:ef:05:6c:6a:90:4b:c3:7c:aa:
                    44:e4:eb:5e:70:59:82:70:b2:f5:2a:13:16:3d:a6:
                    3d:23:9c:15:50:1f:42:1a:eb:51:12:d7:5d:11:c9:
                    a5:52:c1:a5:5b:64:15:b1:83:f8:db:94:f1:99:af:
                    54:13:13:db:c7:18:3f:c5:32:5a:80:a7:c2:22:0b:
                    60:0d:bf:c1:89:1b:9f:4c:9c:13:fa:b0:87:db:97:
                    56:34:01:16:b6:2a:cf:f7:7e:b5:f6:f3:38:d9:1a:
                    35:ab:a6:56:74:17:f1:5c:1d:4a:28:d2:3e:96:b8:
                    06:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DA:D7:02:F4:34:82:2F:D5:A5:1B:68:BF:87:B4:60:14:CD:9E:A0
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4154F0708CD311ED8825306EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:15:7c:76:c5:e5:0f:49:49:98:c2:bc:18:62:82:c8:45:6a:
         cd:6f:0f:24:a1:45:b8:a7:38:0d:e6:c6:14:66:4e:21:aa:37:
         ca:2a:0a:9b:05:7c:8f:ad:83:e6:63:29:fc:e1:a3:b8:c1:ce:
         03:cc:f0:a0:81:98:ef:b7:92:d3:a5:45:aa:66:ac:68:57:93:
         dc:24:c4:44:a1:7b:f3:8c:39:2a:b4:00:02:77:37:b9:a9:c0:
         d7:d0:ef:eb:e4:8e:61:80:b9:d5:e5:e3:5f:8a:dc:d6:78:43:
         ff:7e:00:bd:1b:d1:b2:26:78:8e:f0:22:dd:2c:10:c5:74:bb:
         23:99:04:6c:de:09:41:d9:f4:a1:75:b8:98:24:e3:93:b0:3e:
         d6:ac:ea:a5:d3:f1:de:74:dd:11:de:8b:78:b6:00:6b:ac:ab:
         9e:7e:71:01:e6:0e:71:0d:2b:a4:f0:fa:37:8d:0c:ae:ad:7f:
         14:20:9f:66:c8:f4:b2:37:33:8a:9b:7c:45:fa:be:ce:ba:10:
         d5:91:b1:ac:e8:b9:bf:0d:5e:cd:89:4e:36:96:25:4a:1a:fb:
         b2:1c:77:54:c6:8a:ae:fd:c8:d1:69:68:7c:c3:be:77:b8:bd:
         cd:d2:8d:26:bf:b4:aa:c7:e6:82:52:c1:d6:59:e3:d2:80:d5:
         e8:12:67:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:08:33 2024 by rpki-client on console-fra.rpki-client.org