Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/51644C34EFCC11EDA71A846BC4F9AE02.roa
File:                     51644C34EFCC11EDA71A846BC4F9AE02.roa (raw, json)
Hash identifier:          3Aek/VouShvwwCUu2b8yIw77ElON5VkO22xH6bWM6hg=
Subject key identifier:   DF:9D:8D:E1:9B:99:8A:EE:DC:CC:DB:5B:E1:73:0F:BC:54:58:2F:E9
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3EE2
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/51644C34EFCC11EDA71A846BC4F9AE02.roa
Signing time:             Tue 12 Sep 2023 02:43:09 +0000
ROA not before:           Tue 12 Sep 2023 02:43:08 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     150841
IP address blocks:        103.161.36.0/23 maxlen: 24
                          2001:df2:4d40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16098 (0x3ee2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 12 02:43:08 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ffd03c-81f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:f9:82:13:a8:92:86:64:f4:e3:c3:10:34:
                    83:1d:f5:93:a6:ff:91:32:f6:0d:b5:ec:db:a6:64:
                    7d:d3:c3:58:a0:60:16:78:a5:ce:52:7c:b2:e0:d6:
                    b7:8c:ac:f5:5d:df:cb:f3:37:87:42:c2:bd:fb:ec:
                    bb:ac:f6:f5:0a:7b:b4:1d:27:0d:3c:b1:32:a7:85:
                    6f:08:e7:75:bf:b5:d6:32:0a:47:ce:24:05:74:c2:
                    f0:d9:f1:79:ec:0e:36:e4:a5:47:03:f5:c3:4d:6e:
                    2d:a7:52:20:7b:38:42:6c:7a:c6:7e:6e:be:4e:21:
                    9d:fd:52:ae:8d:95:55:c5:15:b9:7e:87:09:e9:45:
                    a2:13:45:c7:1b:00:81:9f:19:07:e3:b4:9c:77:e5:
                    e5:49:e4:be:44:13:80:3e:bd:10:da:61:a4:ea:20:
                    5a:2f:d9:33:53:12:02:b2:3f:30:a3:2e:b8:96:d8:
                    22:6e:eb:62:9b:19:c7:35:74:18:6b:02:ce:6e:48:
                    84:79:7a:11:24:cc:1d:84:cb:46:d4:4e:8f:52:d8:
                    b8:57:15:f2:c7:f0:c6:49:19:90:b0:99:db:e7:01:
                    56:78:d7:82:d1:a9:d8:4b:a1:74:7d:80:e3:98:33:
                    5c:ae:97:e6:84:94:4b:0f:62:81:75:7b:1b:d9:50:
                    3c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9D:8D:E1:9B:99:8A:EE:DC:CC:DB:5B:E1:73:0F:BC:54:58:2F:E9
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/51644C34EFCC11EDA71A846BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.36.0/23
                IPv6:
                  2001:df2:4d40::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:d2:a1:51:7d:ed:db:b7:f4:a8:3d:fa:f3:69:5f:e6:10:a6:
         f3:60:6e:bf:32:96:22:29:30:09:84:e1:c8:cd:50:49:3c:f0:
         f4:3d:9d:ab:63:12:41:9b:3a:68:15:b4:85:e2:0c:b9:16:64:
         29:eb:37:f0:7f:db:04:73:c0:44:cc:4d:5a:52:4e:91:76:e6:
         ab:03:71:e0:27:a9:c0:b2:52:28:11:be:8f:5f:59:e0:21:3d:
         8c:37:dd:1d:0f:c1:7d:55:9e:3c:24:7d:0a:88:45:15:29:71:
         79:88:9f:44:c9:b0:43:d8:74:02:5f:c9:55:39:3e:9a:4c:16:
         05:c2:57:61:d5:36:b7:6e:19:28:a4:e3:31:9c:fa:4c:a3:d0:
         cb:f7:c1:75:9c:22:50:b2:6f:f4:bd:3c:9c:ee:54:99:6b:56:
         82:0f:3a:0d:8f:e0:9a:8a:43:1d:38:48:ad:20:e7:ad:ea:a8:
         bc:04:97:df:0a:a0:75:2e:8d:2e:10:fb:72:a9:b9:6f:d5:2f:
         4c:4c:a6:8b:a3:67:2c:4f:cb:f3:b6:10:f2:18:af:2b:d2:61:
         73:2a:b3:14:29:f7:4e:43:e2:b6:d6:b0:eb:f6:d5:2c:7a:94:
         96:68:f5:df:6e:a7:f1:cc:b7:b3:04:3c:be:08:52:92:83:a0:
         aa:16:14:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:08:33 2024 by rpki-client on console-fra.rpki-client.org