Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/47142FEC267E11ECBD9B0963C4F9AE02.roa
File:                     47142FEC267E11ECBD9B0963C4F9AE02.roa (raw, json)
Hash identifier:          B+NvM5cXHRqli7dTcNtQV6eTo1w6wNYd9T4HVCkHCSY=
Subject key identifier:   7E:38:AC:46:D7:7E:D2:C4:77:29:48:72:00:26:6B:47:E9:26:F0:7D
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3F26
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/47142FEC267E11ECBD9B0963C4F9AE02.roa
Signing time:             Tue 12 Sep 2023 02:44:08 +0000
ROA not before:           Tue 12 Sep 2023 02:44:08 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     56150
IP address blocks:        103.232.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16166 (0x3f26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 12 02:44:08 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ffd077-3cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5b:0e:a3:b7:14:be:6d:1a:d9:72:2d:19:2d:
                    b8:68:aa:5e:db:fa:05:4b:41:e5:a1:22:8b:45:4d:
                    3a:22:0a:44:02:13:9c:46:d2:d7:12:0c:dc:aa:85:
                    e3:bb:ca:53:e1:ac:ef:7d:a2:81:ea:7c:8a:8d:67:
                    d0:59:0d:a4:a2:37:f1:2b:10:4c:3e:58:4b:01:67:
                    01:8e:d6:35:75:a9:20:56:97:ca:09:37:c8:0a:0f:
                    60:d5:83:ba:6e:c9:39:8d:72:45:55:5e:30:45:b4:
                    e4:d9:25:07:e2:01:16:c4:35:38:b8:f8:fc:40:f0:
                    05:11:b5:77:cb:e4:69:b2:f0:21:0d:ee:ab:03:91:
                    b9:1c:59:76:b2:0a:2e:45:04:c8:db:ca:53:d3:8b:
                    32:2d:82:06:7a:f0:6a:e3:cc:6d:9d:e0:f8:9c:12:
                    03:7b:ee:c7:04:19:0d:fc:0d:42:51:8f:91:c2:84:
                    e2:a0:7f:c9:55:75:9e:92:98:d5:c4:85:97:02:17:
                    f3:39:41:35:1b:56:bf:06:4e:60:31:00:95:51:aa:
                    23:60:c0:e2:47:46:9d:e2:cc:85:57:c9:1f:32:0f:
                    1d:7f:a4:9c:f3:fb:ea:89:02:03:31:aa:70:3f:02:
                    e2:6d:84:12:e9:13:4f:55:1c:78:ee:d1:a6:94:eb:
                    94:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:38:AC:46:D7:7E:D2:C4:77:29:48:72:00:26:6B:47:E9:26:F0:7D
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/47142FEC267E11ECBD9B0963C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:5d:ec:fe:60:13:2d:fa:4b:11:0d:39:93:13:f0:da:a6:2c:
         9f:07:16:3a:0b:89:86:55:51:58:e8:19:b5:e7:d9:2f:18:c4:
         8b:e4:71:0b:bf:72:34:47:87:d7:04:7b:9a:23:de:b3:02:13:
         89:12:f4:b8:1e:ab:e4:90:db:c0:18:7f:df:a8:3e:a9:3c:b4:
         3b:44:d0:0c:d6:57:00:3f:d4:3e:b2:d6:84:f2:9d:a9:b6:e5:
         d7:f8:a0:0f:6e:43:24:d6:f2:34:26:38:c3:33:d9:ed:cb:c1:
         6b:dc:90:0f:66:8b:45:a7:bf:27:b8:a8:6c:76:e7:a7:cf:8c:
         6c:b3:ef:89:a3:7f:c0:d6:6d:07:9d:4c:40:94:88:6d:67:7b:
         fc:47:7d:21:a4:76:e9:03:6f:d1:bd:53:22:4e:11:94:10:b3:
         7b:ca:5d:98:58:b2:42:26:7e:a1:82:4f:55:3b:aa:7c:d0:a7:
         9d:90:f5:c9:fc:ae:59:9e:46:65:40:75:fd:23:81:56:04:7c:
         3c:e7:d2:99:e4:17:6a:1f:ef:84:c3:84:ce:e6:bc:73:92:aa:
         bc:d7:15:4d:62:43:d9:d4:af:8c:a6:ab:52:ba:2e:cd:d2:c7:
         35:b5:c9:13:c9:51:49:6b:49:20:27:d5:45:1e:25:d3:06:03:
         db:96:5d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:08:33 2024 by rpki-client on console-fra.rpki-client.org