Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/47D8D4F4AB6B11EEBA07D386C4F9AE02.roa
File:                     47D8D4F4AB6B11EEBA07D386C4F9AE02.roa (raw, json)
Hash identifier:          FnSfpWC0f5hAjXPTzbYIP2268nMmgdu8gzaeqBmX/Mc=
Subject key identifier:   04:46:2D:D8:7E:3C:89:6E:09:1F:DA:88:4C:B6:87:E8:C2:52:27:75
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4196
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/47D8D4F4AB6B11EEBA07D386C4F9AE02.roa
Signing time:             Fri 05 Jan 2024 01:39:35 +0000
ROA not before:           Fri 05 Jan 2024 01:39:35 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     150882
IP address blocks:        103.23.90.0/23 maxlen: 23
                          2401:2d20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16790 (0x4196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Jan  5 01:39:35 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=65975dd7-f9a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f2:84:29:e0:b4:98:2a:cd:e1:67:40:ab:4a:
                    d1:28:63:bd:77:a1:ec:9c:64:61:a4:24:61:29:23:
                    e4:2f:2c:3c:6c:77:9f:bb:20:0d:67:e3:c5:99:03:
                    1a:fd:61:d9:7d:5e:67:66:4f:94:66:87:09:a9:b3:
                    9f:38:03:14:cf:20:b1:80:0e:91:0e:79:01:15:66:
                    cb:b5:2a:df:b7:95:3b:a2:3b:4a:82:5e:b4:09:95:
                    37:18:3d:43:9e:ce:ae:27:2b:0f:2f:61:90:ba:f2:
                    07:d5:f4:3f:b8:07:a1:60:7f:09:6d:18:cc:17:0e:
                    83:d6:d7:02:80:f5:2f:f7:aa:16:c6:21:cb:4e:35:
                    96:97:ab:3c:a6:7f:31:84:f7:c9:7a:b7:1b:ac:4e:
                    80:db:08:9b:13:c6:89:fa:00:d9:19:f0:7a:99:aa:
                    6b:43:88:74:93:93:44:76:2f:3c:43:af:c3:12:24:
                    59:95:87:71:4f:ec:e5:9a:f4:e3:44:a6:33:f2:8f:
                    a8:d8:0a:45:cc:6d:dd:9e:11:a6:97:fa:be:b2:93:
                    8b:44:8f:6f:0c:e6:61:80:26:61:c0:af:69:29:3a:
                    d0:50:6d:89:b8:1b:b8:c0:c3:b5:d7:fb:32:2f:f2:
                    91:74:dd:b7:0d:4e:f8:87:e3:9a:25:2f:98:e0:c0:
                    5e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:46:2D:D8:7E:3C:89:6E:09:1F:DA:88:4C:B6:87:E8:C2:52:27:75
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/47D8D4F4AB6B11EEBA07D386C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.90.0/23
                IPv6:
                  2401:2d20::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:cc:9a:ce:46:2b:b1:96:0f:32:a8:d6:51:ad:2f:4a:8d:4f:
         48:48:88:c9:85:9b:7c:ba:57:11:8a:de:bb:a8:e3:45:1b:05:
         2d:6b:07:76:29:6e:29:e5:a9:30:15:4d:d2:9c:7c:0c:b3:51:
         71:db:4d:b7:76:64:70:21:e0:89:64:53:c5:fd:0a:85:bf:96:
         f3:34:5a:bf:30:9c:c3:09:ac:80:a4:57:e0:dc:85:d9:0b:b1:
         67:da:84:80:e3:0d:80:7c:84:6a:0b:cd:68:90:4d:26:e7:45:
         30:57:60:32:b8:b8:6e:e1:a4:1b:37:12:93:66:30:e5:ef:71:
         3b:6f:f8:eb:e1:09:85:10:da:d6:d0:0d:6c:48:df:6f:15:e8:
         ab:49:a5:3e:c5:d2:44:f4:4f:af:3c:24:aa:8d:4e:bc:49:f7:
         e7:a0:0f:b0:83:59:8d:4c:4f:cb:ef:55:34:d8:13:45:63:30:
         42:b9:91:13:ae:e4:0d:93:31:e3:b4:de:71:d1:56:87:14:46:
         e8:80:b6:74:7f:3b:71:f5:f9:f3:fb:59:22:98:5e:27:f5:40:
         42:c3:5e:d8:b8:11:5d:48:52:6d:f7:22:d0:99:37:ad:33:18:
         85:ec:66:b9:bf:65:db:b0:f6:52:f4:6e:6c:b4:79:8e:ac:6d:
         92:0c:f3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 16:41:40 2024 by rpki-client on console-ams.rpki-client.org