Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa
File:                     42823846037411EEB6D5D751C4F9AE02.roa (raw, json)
Hash identifier:          CbUfkgYp/dW1uLKuqUIlv9LptLWaLWileC5gc7cNCL8=
Subject key identifier:   80:EB:A6:44:2C:CB:B9:E1:4B:7F:FD:9E:AF:F3:6B:88:38:15:C5:5D
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3EB8
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa
Signing time:             Tue 12 Sep 2023 02:42:32 +0000
ROA not before:           Tue 12 Sep 2023 02:42:32 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     149105
IP address blocks:        103.188.80.0/23 maxlen: 24
                          2400:8160::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16056 (0x3eb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 12 02:42:32 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ffd018-a770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:73:0e:f0:90:1c:bd:2f:63:8d:52:82:47:cc:
                    f1:96:16:12:39:8d:b5:99:06:42:9c:02:2d:98:81:
                    1d:4c:f6:67:ba:1d:b2:6c:89:fe:96:60:4c:f1:80:
                    05:cb:ef:ae:93:70:3e:04:05:14:62:18:0a:8b:28:
                    2a:e9:75:24:7f:bb:4d:a7:00:05:47:4d:b2:ba:73:
                    b2:b5:a9:f7:79:7c:a2:bf:84:d1:35:e6:10:26:f1:
                    55:ed:17:f3:cd:8d:9f:7d:23:70:2c:5d:d0:aa:5d:
                    d5:ef:9e:08:d9:ce:a1:d2:f4:85:22:5f:81:cc:19:
                    f5:79:cc:19:54:a9:fe:0e:62:99:b9:a2:9a:85:26:
                    c0:15:c9:f3:da:47:a2:6f:fc:f6:d0:74:3c:6d:7b:
                    4a:ac:ac:c5:b9:80:11:31:c5:89:fc:31:f6:98:d0:
                    f1:84:b7:3c:d7:bc:12:72:c3:d6:55:d7:f3:67:da:
                    e5:01:87:d9:91:2e:ce:a6:55:c2:3a:bd:0c:b1:08:
                    12:60:e8:24:4d:52:98:c3:a0:f9:68:42:58:3d:7b:
                    68:b3:ed:f0:8e:3f:a3:1f:fe:09:31:26:fb:67:47:
                    92:c7:de:26:1e:99:70:bb:b4:f4:17:7c:8e:7a:b0:
                    66:ac:d1:58:6d:15:b7:e0:d3:9e:82:06:6c:bc:a7:
                    1a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EB:A6:44:2C:CB:B9:E1:4B:7F:FD:9E:AF:F3:6B:88:38:15:C5:5D
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.80.0/23
                IPv6:
                  2400:8160::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:4d:04:1d:13:37:72:fc:f2:f4:4d:07:03:6f:ed:65:fe:b6:
         e7:95:48:7f:1a:c6:57:f3:e6:3c:75:d1:45:3c:8a:4d:03:26:
         23:19:68:6d:3e:40:9b:01:de:4d:27:45:f7:b5:97:e4:6b:90:
         75:bb:23:34:7c:5d:59:82:6c:94:0c:42:64:38:56:bf:78:21:
         63:72:90:84:8a:e3:78:8a:a5:ed:9e:62:20:ca:4f:f0:4f:dc:
         66:86:3b:74:02:0e:89:b7:65:8f:af:d9:7e:12:bc:26:55:1f:
         0c:5c:7d:46:27:0d:12:09:89:58:7e:63:85:56:a3:f7:b5:15:
         cd:fd:72:c4:31:20:d2:0f:c5:b5:98:89:86:4b:09:f7:80:7f:
         e6:3f:a7:f3:6e:48:71:11:0c:47:c2:2c:ef:cc:af:9a:a5:cf:
         20:1c:05:d8:c7:73:e3:40:94:77:33:04:7c:cf:53:8d:73:b1:
         b8:6d:1f:8e:de:24:e2:00:c7:31:a3:50:60:a3:04:16:17:ba:
         dd:9f:99:9b:3a:5d:42:9d:ea:05:93:c7:c4:02:69:53:44:8f:
         16:14:ed:5d:0d:b7:71:d6:75:c3:e1:79:a1:37:09:8d:b6:78:
         f7:28:e2:a9:df:35:24:dd:6b:bb:4e:2a:9f:5a:cf:fd:47:5f:
         25:4d:09:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 16:41:40 2024 by rpki-client on console-ams.rpki-client.org