Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/748EB318941B11EE8175F764C4F9AE02.roa
File:                     748EB318941B11EE8175F764C4F9AE02.roa (raw, json)
Hash identifier:          tlrdbnRsQrMiVgnpFZLwN0HuQKMiq495gBArNDaVw3c=
Subject key identifier:   3E:96:A3:B0:71:42:7E:CD:E7:40:3C:24:28:3F:26:B2:45:28:02:71
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4118
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/748EB318941B11EE8175F764C4F9AE02.roa
Signing time:             Wed 06 Dec 2023 09:40:14 +0000
ROA not before:           Wed 06 Dec 2023 09:40:14 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     150889
IP address blocks:        103.70.116.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16664 (0x4118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Dec  6 09:40:14 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6570417d-67b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:da:28:08:14:65:18:07:f5:02:80:54:82:
                    dc:29:d7:cc:92:ff:62:da:0a:4d:db:50:ed:cb:e5:
                    ff:d8:73:1e:33:1a:f5:f9:05:e5:1b:0e:fc:49:d1:
                    68:43:76:15:91:d2:c9:3e:38:75:3c:07:50:43:8e:
                    b2:56:b0:ff:ca:6f:cc:f4:af:c1:ed:99:1b:44:63:
                    f6:b2:b7:bd:6a:b3:91:d9:fd:b4:f4:ee:c1:95:5c:
                    9f:d8:ec:48:64:6a:f7:1f:70:18:bc:27:54:eb:43:
                    61:9e:11:f0:77:de:ab:18:d5:c8:ec:bf:c5:14:89:
                    ce:d8:31:6c:d1:53:56:cc:85:36:28:5b:ab:6f:43:
                    da:56:f5:36:60:4b:03:27:1c:1d:8a:cc:80:99:a7:
                    26:25:1d:87:e1:15:1a:3e:16:24:66:a8:64:81:6e:
                    fa:20:cf:70:41:77:6c:23:d0:e7:3b:90:c9:91:07:
                    df:59:76:ad:d0:19:36:7d:7c:40:5f:72:73:58:b0:
                    bf:66:16:9e:2e:18:f2:32:ef:71:4f:cc:15:b1:3a:
                    e8:e6:5d:3f:cc:1e:8f:b5:06:5f:b0:9c:1d:a7:64:
                    74:c0:e5:89:00:a1:58:60:5d:0b:16:8c:e9:85:71:
                    f4:cd:81:0a:3b:26:46:b9:e0:58:94:4a:8b:84:5a:
                    10:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:96:A3:B0:71:42:7E:CD:E7:40:3C:24:28:3F:26:B2:45:28:02:71
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/748EB318941B11EE8175F764C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:1e:40:a0:92:a2:95:25:46:31:ec:6f:e6:38:aa:d3:1f:43:
         14:7c:39:90:10:7c:ec:5e:a3:ac:85:e0:6f:10:c0:30:2b:b0:
         cc:43:d1:11:45:84:89:f0:a1:06:ff:d0:6b:7b:dc:46:48:0f:
         18:1d:d6:fb:5c:fc:3e:3e:b8:1f:f2:dd:85:dc:99:d2:46:99:
         fa:cc:fd:ec:9b:82:44:43:d5:4c:a9:15:12:a8:b1:06:ed:54:
         4c:55:ed:0a:a7:25:d4:fa:78:dc:f2:ba:d3:2a:be:5d:d9:95:
         62:49:17:a8:c3:2a:bd:92:5a:83:11:94:bc:75:0e:e6:73:e0:
         c0:8b:30:49:ad:46:f2:16:ff:19:c2:27:37:8a:81:4f:92:d1:
         ea:91:fb:ee:bc:b9:1a:0b:ce:61:2f:22:9a:16:0f:b0:f7:8a:
         39:86:c1:c4:c3:51:32:0a:3f:1d:b3:d1:ac:c3:85:52:69:4a:
         ae:67:65:7b:1a:f4:72:9e:2c:b3:48:16:08:01:b4:a0:ed:c3:
         0e:9d:bf:96:f1:b5:29:a8:5b:47:10:24:84:4e:8e:f5:2f:1d:
         8a:7c:50:cf:ea:f1:9f:3e:ff:10:61:43:10:ac:02:5d:9a:e9:
         8a:3f:c7:e8:e8:f8:8a:29:6b:ae:a1:af:99:3f:90:6f:a8:69:
         6b:db:b8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 16:41:40 2024 by rpki-client on console-ams.rpki-client.org