Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C10E370479EC11EC9C926660C4F9AE02.roa
File:                     C10E370479EC11EC9C926660C4F9AE02.roa (raw, json)
Hash identifier:          CP293GJF98MOS+08/K944ssDLU52UZ44iuR9tFgkxCA=
Subject key identifier:   3A:F2:C1:FD:14:E2:7D:F1:C8:88:79:84:58:96:D3:25:77:D1:8E:7A
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3E6F
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C10E370479EC11EC9C926660C4F9AE02.roa
Signing time:             Tue 12 Sep 2023 02:41:28 +0000
ROA not before:           Tue 12 Sep 2023 02:41:28 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     135925
IP address blocks:        103.100.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15983 (0x3e6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 12 02:41:28 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ffcfd8-4609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:01:de:a6:58:22:0f:7d:d4:7b:c5:c6:55:c4:
                    11:dc:cb:64:42:27:11:8e:6b:0f:cb:e3:e4:5c:25:
                    68:c8:da:92:8b:99:25:93:62:7a:40:88:04:a2:8d:
                    7c:08:e7:e7:dd:e7:f3:e7:b1:98:8d:78:a2:fe:fe:
                    79:ef:dc:e2:e3:04:03:2d:dc:c2:aa:17:a9:d5:89:
                    69:bf:cb:d8:0c:5c:f9:c1:fc:1f:44:eb:b3:f2:e8:
                    95:06:23:93:72:7e:27:5f:95:f0:d0:3a:41:a4:df:
                    10:b2:a5:ab:2f:55:8d:0c:fb:be:52:ed:4d:d2:2c:
                    f4:c5:0e:93:21:b5:19:01:35:fa:d8:06:38:7e:95:
                    9f:79:a8:2b:d8:e6:42:e9:43:e9:f9:41:9b:5b:94:
                    0a:ce:bf:e8:88:9b:3c:cd:ab:35:86:72:b9:3b:3d:
                    b0:93:88:29:30:e8:95:23:7d:60:cf:eb:a3:5f:8e:
                    b4:9f:41:08:82:94:14:25:94:fd:3b:2b:91:55:44:
                    9d:91:7b:c8:89:1b:19:b1:3d:82:2a:f1:45:8e:db:
                    c9:b7:de:4f:97:1b:de:66:34:0d:f4:40:60:c9:ca:
                    51:08:2c:75:4d:9c:bc:06:2e:e1:44:19:26:5a:4c:
                    a1:af:d7:41:47:ba:a1:be:a8:dc:1f:dd:4b:dc:89:
                    e7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F2:C1:FD:14:E2:7D:F1:C8:88:79:84:58:96:D3:25:77:D1:8E:7A
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C10E370479EC11EC9C926660C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:d8:fc:cf:28:38:a0:17:81:89:a0:89:28:a9:37:93:35:5f:
         17:0d:48:a0:6c:52:fc:f2:51:c9:63:f8:2c:22:98:7f:0c:29:
         86:5d:f6:ae:22:9c:80:9c:b0:54:c3:07:09:a1:28:81:a7:ba:
         0c:ac:59:07:e0:ab:6a:45:2b:83:79:47:2d:1f:2f:f4:c0:57:
         92:ab:05:d9:6e:c7:c7:fe:94:e6:d8:8f:a4:9a:39:e5:a7:08:
         ed:ad:4c:ca:14:4d:e0:67:1f:6d:a7:f5:d1:96:cf:2d:fa:d8:
         78:1f:d1:d2:02:45:59:cc:d4:2c:ab:9f:a0:1e:00:2b:13:dd:
         00:65:1b:50:10:ca:ab:8a:d6:a5:50:1a:e2:cc:d2:cf:e0:b8:
         6e:c3:3f:36:19:fa:af:12:a8:95:c7:f7:42:4c:08:7a:9a:f2:
         02:ad:a0:01:76:a9:e4:fe:2a:e9:3c:a4:49:b7:fe:a9:c3:35:
         08:e4:28:c8:8f:d5:92:52:4a:90:d1:97:64:02:c6:9b:e3:87:
         8b:e2:a7:b2:4b:ac:48:65:0b:d9:77:11:0a:59:67:9c:83:12:
         7c:86:98:20:95:ea:09:e6:74:b0:ad:ca:1e:80:2d:ba:44:0c:
         09:70:68:dc:f2:2a:ee:2e:79:ea:be:5f:4c:3c:12:7f:e9:b2:
         9c:72:e0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:08:33 2024 by rpki-client on console-fra.rpki-client.org