Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B1B5FE6C718B11EDA2029512C4F9AE02.roa
File:                     B1B5FE6C718B11EDA2029512C4F9AE02.roa (raw, json)
Hash identifier:          MhV+hXYWxkCWWgOHTU+xoiP32zG4Sgc7m2uoRuik7Dw=
Subject key identifier:   26:E9:50:B1:E7:94:44:81:93:D1:72:C8:BB:E5:D3:BD:22:33:38:2D
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3F28
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B1B5FE6C718B11EDA2029512C4F9AE02.roa
Signing time:             Tue 12 Sep 2023 02:44:09 +0000
ROA not before:           Tue 12 Sep 2023 02:44:09 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     56160
IP address blocks:        103.24.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16168 (0x3f28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 12 02:44:09 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ffd079-4646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:28:2d:88:c3:8f:98:77:f2:31:de:25:b4:cb:
                    29:70:7b:c6:0a:78:25:d2:6f:28:02:38:74:d4:e4:
                    74:7f:f0:58:ae:14:bf:01:2a:97:f3:c0:2a:50:fe:
                    fd:a3:dc:27:cc:d6:19:a9:30:b6:9c:8d:cc:a9:5a:
                    5c:17:e6:cb:5d:e4:fc:12:da:89:04:02:d2:7a:47:
                    e4:d3:0b:71:46:45:a5:58:c9:2f:85:c2:35:ac:8d:
                    a2:ec:1d:fc:08:b6:c4:47:14:07:32:14:97:15:3c:
                    b5:47:77:fe:cc:72:37:53:42:14:c2:f9:a7:d1:03:
                    f0:2e:ce:4e:d9:52:a1:3c:66:fb:d9:a9:bf:a1:97:
                    50:2e:3d:45:e5:cb:74:c0:49:1a:dd:24:80:b8:73:
                    de:ad:a7:76:52:4c:e0:0e:16:51:93:47:e1:f0:11:
                    79:8c:0a:d8:77:a4:ee:e1:8c:de:6a:7b:8b:8e:2b:
                    70:03:e9:41:c5:6a:54:fd:d5:0c:17:50:6c:7b:53:
                    14:5c:bc:fd:72:cf:d3:7c:61:da:2a:18:dc:b5:f7:
                    d3:df:84:a9:02:52:a2:43:25:7e:b1:e2:54:2a:89:
                    fb:7e:21:d4:7e:ec:3b:06:1d:b3:aa:c2:a7:52:ea:
                    31:7a:e8:6e:1a:cc:00:8a:94:a0:8c:f0:b5:de:6e:
                    b0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E9:50:B1:E7:94:44:81:93:D1:72:C8:BB:E5:D3:BD:22:33:38:2D
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B1B5FE6C718B11EDA2029512C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:c7:cb:7d:6c:58:83:6d:f1:ed:b1:80:4b:9b:3a:d8:a2:c0:
         d6:dd:0b:a0:29:ac:30:eb:6d:a6:86:99:04:63:7d:61:62:99:
         a2:bf:d1:69:13:2c:1e:df:41:b7:83:90:cf:e4:a2:57:f5:05:
         04:fd:a6:89:8e:78:09:d8:4a:58:ae:9b:16:a0:04:d6:7f:34:
         7e:09:cc:d9:47:43:74:81:41:c2:d7:a9:92:44:13:31:68:2c:
         2b:82:30:41:a3:7d:4b:5d:11:01:32:91:1f:d2:84:d3:b3:d5:
         db:e3:65:1a:43:77:c9:3c:40:3f:68:9f:1a:f2:05:15:78:83:
         2c:15:55:3e:7c:0a:37:8a:3c:ad:24:95:9e:80:c0:7f:a0:56:
         d1:6e:3d:29:e0:43:60:df:d9:89:a3:bd:14:15:99:5f:0f:52:
         b5:0c:13:35:bd:16:07:bf:73:b5:fa:cb:ad:a6:e7:4f:d4:4c:
         bf:21:de:3e:05:41:3f:c0:9d:12:af:43:07:50:cd:c1:90:a8:
         80:0d:f6:e1:ec:04:e7:a7:df:72:70:69:a2:65:cb:8d:bf:75:
         57:6b:7e:12:69:b4:75:7c:e6:c8:e3:25:30:66:f4:d8:47:19:
         c7:a0:c7:cc:4d:6b:1f:6e:10:13:56:0b:f5:61:ee:0e:9f:fb:
         ce:75:1e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:08:33 2024 by rpki-client on console-fra.rpki-client.org