Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8D106846FB0E11EEB5B4A70BC4F9AE02.roa
File:                     8D106846FB0E11EEB5B4A70BC4F9AE02.roa (raw, json)
Hash identifier:          GP/9R7Nco9gHg5pZnfMDNKrYf82zofD6h9m/MZgy/BY=
Subject key identifier:   D9:FE:C9:91:0F:5F:F5:73:20:8B:A6:A4:93:B2:BE:CE:84:24:28:7B
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4307
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8D106846FB0E11EEB5B4A70BC4F9AE02.roa
Signing time:             Mon 15 Apr 2024 09:57:21 +0000
ROA not before:           Mon 15 Apr 2024 09:57:21 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     135973
IP address blocks:        103.139.40.0/23 maxlen: 23
                          2001:df0:6980::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17159 (0x4307)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Apr 15 09:57:21 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=661cfa01-71b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:24:95:fc:bd:74:16:23:22:4a:c9:c4:43:
                    43:e5:34:68:fc:e0:12:ef:ee:3d:5d:33:bb:a4:16:
                    e7:9d:cf:eb:60:89:97:59:19:b9:f7:9f:bb:24:2a:
                    0d:7a:3d:96:d4:63:87:df:ee:cc:ed:8b:b2:fd:4a:
                    f7:88:ad:fb:cc:c4:61:db:b7:b2:73:33:ae:9e:14:
                    28:36:16:f3:a1:22:58:43:19:8d:6f:ed:8b:54:07:
                    44:94:ff:f0:57:bc:27:40:9a:8f:3a:cc:46:0d:64:
                    62:42:99:d3:cb:0a:d7:e8:57:28:13:66:26:1c:b6:
                    89:2d:b7:20:7b:b1:93:37:62:84:d7:bb:3f:fe:28:
                    2d:24:d8:83:d7:72:2f:cb:01:96:46:ed:6f:b3:64:
                    8d:86:8e:ce:27:2e:c3:a5:48:8c:51:86:1c:40:31:
                    99:28:5e:3f:15:93:90:df:89:d7:4d:af:c0:4c:48:
                    5a:32:dd:02:da:26:52:b3:8e:f4:db:26:75:5e:29:
                    f2:19:8b:55:1d:5a:57:07:2a:3a:80:a5:3c:34:48:
                    c4:d0:ba:76:cb:e3:b2:9e:7c:2f:e6:d2:64:f5:df:
                    61:eb:2f:14:32:9b:2e:c8:0f:99:52:03:15:1c:96:
                    24:c4:e1:e9:74:fd:e4:8a:86:46:a1:15:c5:a7:24:
                    21:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FE:C9:91:0F:5F:F5:73:20:8B:A6:A4:93:B2:BE:CE:84:24:28:7B
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8D106846FB0E11EEB5B4A70BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.40.0/23
                IPv6:
                  2001:df0:6980::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:93:ed:85:79:38:6b:89:88:3a:3e:51:7a:2d:37:e5:8e:e8:
         b3:4a:24:33:35:93:90:c0:26:08:ea:d4:61:48:5f:80:55:cc:
         d2:6c:f6:87:43:45:a0:dd:97:27:62:28:df:62:1a:f3:b0:ee:
         46:6d:0d:4e:c8:54:e7:88:58:6c:d6:4f:67:e6:3c:2f:11:38:
         ad:ed:9e:f9:a5:a3:f6:a7:c0:e6:c3:b0:35:6f:73:36:d7:52:
         5e:69:82:b1:0f:2a:cc:f8:31:83:15:71:a8:9e:0a:79:7d:45:
         ce:8c:c3:81:b4:92:4d:be:55:25:68:0d:bf:5d:9c:73:a2:e8:
         0e:04:89:fb:ff:76:6e:ef:1e:4f:9b:f5:82:ef:c9:a1:b2:04:
         bb:3a:f6:c5:88:5a:eb:a5:3f:c4:6b:3d:e9:7a:b3:0b:18:fe:
         6a:47:c1:61:9f:76:6f:f8:5a:05:97:10:9a:6f:49:ff:e3:5c:
         6b:54:dd:fe:0d:da:70:a5:58:3f:b9:a8:15:19:9f:f8:64:c4:
         54:0b:56:5a:a4:bf:f0:4c:a0:27:f2:b0:b6:4f:06:49:2f:3f:
         3a:d2:e8:1a:1a:42:55:68:58:f1:b2:3e:47:e7:5d:68:7c:28:
         c8:19:17:1d:a0:44:35:52:63:e3:87:ad:ec:33:63:b1:b7:a1:
         64:3e:16:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 16:41:40 2024 by rpki-client on console-ams.rpki-client.org