Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/96FFC390A63411EDBAC85C27C4F9AE02.roa
File:                     96FFC390A63411EDBAC85C27C4F9AE02.roa (raw, json)
Hash identifier:          b8MMJKp03bBDV+rgx7sFsHnCsYchPja6jlM5dFeKQ54=
Subject key identifier:   DF:1F:4A:D1:EC:8B:74:22:64:40:57:35:56:0F:3A:2B:09:D0:C9:F6
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3ED6
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/96FFC390A63411EDBAC85C27C4F9AE02.roa
Signing time:             Tue 12 Sep 2023 02:42:57 +0000
ROA not before:           Tue 12 Sep 2023 02:42:57 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     150813
IP address blocks:        103.67.162.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16086 (0x3ed6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 12 02:42:57 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ffd031-e2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7f:17:42:6b:46:71:13:19:ef:28:21:4a:a2:
                    63:eb:07:30:95:97:39:5b:3c:0b:32:f3:e5:09:1d:
                    0a:b7:a6:15:c7:50:bc:05:53:74:db:f9:18:96:1f:
                    d0:b8:89:3a:ba:df:0a:8f:e4:69:e5:24:9d:07:85:
                    2a:bb:98:bb:b4:d2:b1:95:27:2f:27:73:99:23:68:
                    90:a1:5e:27:43:4e:06:3b:61:a1:7f:56:41:b7:8b:
                    ac:9c:02:09:53:16:d8:d5:b5:7a:49:6b:92:1f:da:
                    cf:8d:71:6c:d1:6b:d9:17:be:85:82:4a:d1:12:e5:
                    0a:c2:7a:16:2c:d7:26:d9:10:38:4e:cb:18:40:04:
                    3f:70:dd:62:74:7b:8f:33:14:32:f3:38:40:16:2d:
                    a1:91:bb:8d:6c:2e:c2:eb:91:6c:40:3a:95:55:a2:
                    2a:52:a5:92:ba:55:78:0e:46:d7:fb:f1:cd:7a:62:
                    49:61:32:ff:a9:00:df:df:41:0a:6a:c1:d5:d3:2f:
                    6c:09:5e:21:31:06:65:07:bb:50:29:98:e6:f1:51:
                    40:e5:8f:a1:57:92:42:ce:c3:da:5b:ca:2d:2e:c3:
                    61:5e:6d:e7:cd:32:ec:ac:a5:16:20:fc:3e:9f:16:
                    31:5a:e2:2c:f1:a7:a0:22:68:4e:4e:2b:9d:31:cd:
                    eb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1F:4A:D1:EC:8B:74:22:64:40:57:35:56:0F:3A:2B:09:D0:C9:F6
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/96FFC390A63411EDBAC85C27C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:3e:e8:a8:81:81:07:b9:cc:dc:84:ed:86:d1:4e:ca:14:0d:
         df:88:f5:a9:de:d6:1b:c6:9f:64:31:96:68:7f:3b:7c:09:82:
         f7:e4:ea:3c:d4:9b:bb:94:bf:5f:b1:9c:a4:79:0c:e8:7f:a8:
         aa:de:7e:b3:b2:a6:ce:51:b9:4e:1e:ee:c8:e5:83:11:0a:4d:
         8d:b0:12:17:1e:fb:a4:7b:cb:94:1b:8e:be:2b:ee:dd:e0:53:
         f9:a7:d2:52:2a:57:92:93:a5:57:4e:ee:b5:1d:9e:50:79:23:
         fd:db:46:ee:0b:5f:7c:09:ce:1f:2f:df:c1:f1:6d:64:6a:2f:
         a1:84:0f:28:08:65:0f:44:ee:02:fb:34:6b:c6:ba:2f:b9:79:
         8f:48:2a:92:4a:80:50:f5:18:18:0a:39:b4:d0:cf:22:bf:11:
         cc:cd:1a:83:ce:1d:8c:c4:ad:f1:08:5a:89:57:5c:d3:e1:79:
         c3:c3:75:86:32:5b:51:0f:52:b3:9a:57:db:59:99:61:6c:d2:
         27:3f:ef:52:1b:30:48:38:a6:60:de:3e:ab:25:ce:54:74:ad:
         70:50:5f:56:bd:a4:17:8c:a2:36:2b:be:bd:f7:b7:8d:36:44:
         5a:3b:5d:a6:f1:4e:5b:67:3c:62:00:e3:58:d2:c6:45:89:c9:
         9e:0f:07:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:08:33 2024 by rpki-client on console-fra.rpki-client.org