Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C4D92628BF0611EC889EE54DC4F9AE02.roa
File:                     C4D92628BF0611EC889EE54DC4F9AE02.roa (raw, json)
Hash identifier:          u/b4m0UoNGY0Wgbh2mirP9XJlf5Wc5jrNe/Vlq/lw/M=
Subject key identifier:   FE:C0:0B:28:91:D9:21:2B:6A:28:F6:29:4A:13:C9:CB:56:DC:BA:53
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3F2D
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C4D92628BF0611EC889EE54DC4F9AE02.roa
Signing time:             Tue 12 Sep 2023 02:44:14 +0000
ROA not before:           Tue 12 Sep 2023 02:44:14 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     63736
IP address blocks:        103.207.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 02:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16173 (0x3f2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 12 02:44:14 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ffd07e-e70e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:12:8b:bf:d5:fc:07:58:3b:1c:fc:76:b9:42:
                    9f:87:4a:1f:ec:c5:e2:fe:bb:aa:0d:96:d9:7f:83:
                    18:d8:16:f4:ad:5a:c0:ff:8a:35:d0:20:10:2b:2d:
                    50:13:91:4b:64:6a:e6:16:fb:49:e9:86:e7:a3:da:
                    41:ad:ad:3e:3f:7e:70:ab:c8:e9:dc:6e:54:79:46:
                    71:ea:9c:42:bf:79:94:d8:ff:67:92:29:e3:2d:d7:
                    97:59:46:1f:73:88:8e:26:21:29:4c:5f:7a:e5:f3:
                    ea:d5:4b:8c:6d:2d:dc:56:e3:e4:73:ac:97:1a:90:
                    3c:66:27:b8:ee:df:4a:95:bd:46:39:53:63:dd:f4:
                    ce:58:41:a5:55:64:9b:23:ab:7e:fa:b4:30:d8:11:
                    1f:45:ea:39:ef:27:18:03:6a:60:51:8b:dc:e5:16:
                    ec:95:ca:4c:f9:a8:37:78:79:80:6f:2f:04:2c:66:
                    c4:61:68:6b:ff:40:ff:56:4b:c0:70:58:ed:c1:a7:
                    c9:b0:1f:a3:69:1e:5b:94:e7:b0:3d:b0:a7:d4:94:
                    ab:04:bd:97:39:44:95:11:0b:17:0f:a7:33:96:24:
                    04:82:65:da:18:2c:3c:a9:bc:af:e1:cb:ce:f6:cd:
                    4b:f9:d3:3a:ac:64:9f:ae:97:a2:0d:6d:62:d6:2b:
                    f1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C0:0B:28:91:D9:21:2B:6A:28:F6:29:4A:13:C9:CB:56:DC:BA:53
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C4D92628BF0611EC889EE54DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:df:57:44:4f:84:69:6f:c1:f0:ce:5e:62:e6:ce:76:04:49:
         aa:39:b2:98:29:cb:4e:97:41:21:c1:1a:88:c6:27:fc:05:b3:
         95:6c:64:55:ec:5f:c7:84:f4:15:60:53:c8:30:25:f6:eb:af:
         ba:16:70:b2:01:97:24:30:d0:32:11:f2:77:cb:a4:48:33:3f:
         87:fc:99:e9:60:a2:80:c4:50:f3:cd:72:5d:b7:ae:65:48:42:
         c0:52:d8:28:cf:e3:c5:eb:da:07:59:a3:45:80:4e:19:72:df:
         d1:fe:2d:e5:c5:84:1a:41:b1:66:f9:8b:21:10:dd:49:31:4c:
         a1:8e:dc:6d:3b:02:c0:07:59:3a:20:b1:57:83:f9:ee:16:5c:
         53:1d:7e:f9:f9:85:79:86:9d:95:79:ca:5c:0e:8a:cb:56:54:
         a1:8e:40:0d:f7:3b:af:0e:32:b9:58:a9:d6:f8:f6:99:60:6b:
         9f:19:44:0e:5a:31:0c:6d:69:0f:f9:bc:82:3a:5b:d8:31:76:
         48:e0:4f:44:1d:41:06:1a:76:f0:5d:b6:21:8a:e3:25:eb:d7:
         f0:69:fb:9c:ec:f9:c9:ef:97:0b:d6:51:df:a3:a1:12:b8:08:
         0f:7d:9f:6c:9d:18:1d:14:30:cc:e8:27:c8:51:72:63:91:25:
         3b:71:76:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 04:11:25 2024 by rpki-client on console-fra.rpki-client.org