Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/463BDADE21FA11EDB296E43BC4F9AE02.roa
File:                     463BDADE21FA11EDB296E43BC4F9AE02.roa (raw, json)
Hash identifier:          St4nEhvrNk3XEeavxPtxPFez9TLYizjSCr7vb4VN7Ek=
Subject key identifier:   1F:19:88:74:5C:59:F7:16:DD:B3:E7:93:E0:60:BF:7C:8E:04:84:97
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3E6D
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/463BDADE21FA11EDB296E43BC4F9AE02.roa
Signing time:             Tue 12 Sep 2023 02:41:26 +0000
ROA not before:           Tue 12 Sep 2023 02:41:26 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     135922
IP address blocks:        103.98.160.0/22 maxlen: 24
                          2401:9c40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15981 (0x3e6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 12 02:41:26 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ffcfd6-6214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9c:0c:c6:29:89:a8:90:d3:eb:40:30:4e:69:
                    99:c3:a9:cd:45:7c:c2:48:6d:42:2a:40:63:ef:f1:
                    05:96:3f:cd:84:7d:ec:63:69:9e:3b:6c:68:57:94:
                    03:3d:69:fe:b3:c3:2a:f7:c3:15:28:ea:5c:04:c2:
                    9c:37:dc:7a:9d:dd:a6:66:96:bf:88:19:6b:2c:57:
                    1c:70:c6:f7:73:86:4c:c1:b1:5e:47:ca:c6:4f:8b:
                    b6:fc:d5:03:b0:53:14:79:91:3f:6c:bf:03:e2:35:
                    f0:e0:66:7c:dc:1c:5e:bf:09:5c:df:ea:1b:e6:81:
                    13:f9:c7:0f:53:10:59:f4:b2:d5:11:f0:3c:e6:1c:
                    fc:9a:6a:41:38:0d:1f:f5:41:f8:b5:fd:77:30:7a:
                    37:5f:95:41:15:5e:e4:e4:08:34:bf:48:3b:5b:53:
                    52:35:ec:95:c3:8d:75:1a:45:9d:6d:0a:dd:9c:5f:
                    16:e6:0e:7b:c2:66:7a:90:12:f4:da:15:91:a4:91:
                    c9:66:9c:81:aa:84:5a:38:64:5e:ba:2d:fa:03:49:
                    a0:57:16:0b:ce:9f:13:25:6b:75:15:59:fb:78:fd:
                    c7:95:5c:2c:66:70:83:26:6e:83:46:c3:34:1d:3c:
                    1f:78:12:36:ff:c7:b9:d4:ec:f1:f3:02:0b:99:6c:
                    f7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:19:88:74:5C:59:F7:16:DD:B3:E7:93:E0:60:BF:7C:8E:04:84:97
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/463BDADE21FA11EDB296E43BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.160.0/22
                IPv6:
                  2401:9c40::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:dc:5d:35:08:bd:e7:fd:f2:fb:5a:3b:a4:1c:da:0d:07:69:
         0b:f9:16:0d:d0:44:77:a1:6c:4a:dc:b3:68:34:32:94:06:f8:
         b6:ed:55:3e:60:8f:44:cc:2b:a7:f1:34:d3:07:2e:8f:fc:dc:
         a3:28:eb:3e:9d:c8:7c:19:4f:c8:76:58:10:a4:63:f2:b0:16:
         2e:49:01:6c:12:24:3a:91:dd:89:9d:b5:d0:82:ba:cd:ce:bf:
         df:9d:4f:b4:4e:c5:26:c9:ee:3b:de:70:86:ae:7e:94:f7:b6:
         04:b3:96:7d:7d:bf:3e:30:bf:0a:57:be:58:15:37:63:95:81:
         d5:8e:dd:22:3b:69:cf:cd:c8:84:e8:f3:db:d8:c8:2e:da:44:
         4e:0d:56:2a:0e:1a:28:4d:28:c8:85:be:9d:b1:9d:c7:ba:dc:
         06:7f:dd:03:97:d7:38:67:3d:9b:0f:dd:ca:fd:e1:2f:f2:f5:
         f3:6f:f8:bd:19:f5:35:52:69:69:06:75:7b:6e:f1:e4:d8:1b:
         75:be:ba:b7:93:a7:58:23:9c:de:ed:45:65:88:42:31:53:27:
         e9:ed:31:f7:dc:4a:67:f6:6c:8d:2a:e3:d5:43:1c:9d:06:ba:
         32:a3:2d:84:82:b0:d2:aa:f6:25:b1:d8:9d:0b:46:44:27:67:
         41:5c:22:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 06:34:16 2024 by rpki-client on console-ams.rpki-client.org