Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/C17E1DDCBC7111EBB1423E5FC4F9AE02.roa
File:                     C17E1DDCBC7111EBB1423E5FC4F9AE02.roa (raw, json)
Hash identifier:          oTgX8pRPquWduIxTiQW61jnbKJfVVMDUd2Oo9gsHJFw=
Subject key identifier:   FE:F2:E8:07:44:B6:AB:14:46:8B:52:A6:C9:7A:E4:E6:64:D3:4D:25
Certificate issuer:       /CN=A91A6F2D/serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8
Certificate serial:       0466
Authority key identifier: AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/C17E1DDCBC7111EBB1423E5FC4F9AE02.roa
Signing time:             Fri 23 Jun 2023 01:28:00 +0000
ROA not before:           Fri 23 Jun 2023 01:28:00 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     142285
IP address blocks:        103.167.116.0/24 maxlen: 24
                          2001:df6:b080::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl
                          rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 02:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1126 (0x466)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6F2D/serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8
        Validity
            Not Before: Jun 23 01:28:00 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6494f520-7ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f4:d7:9d:66:3c:4f:18:15:4c:95:b0:9c:f3:
                    fb:27:24:02:15:d2:95:bc:a4:16:db:8e:d0:5e:b7:
                    a4:06:da:62:1b:d7:90:c8:1b:fb:6e:38:31:b3:a7:
                    56:fe:ab:9d:6b:a0:a1:f8:f2:55:d4:93:2f:36:15:
                    89:93:bd:39:16:47:ff:26:8c:72:34:c9:88:7f:4d:
                    d8:89:ed:ca:ef:f6:18:b8:f6:a8:d5:95:e9:12:81:
                    bb:e0:69:fa:c7:ec:24:25:65:ec:32:ab:e3:73:c3:
                    45:17:39:17:66:17:cd:84:83:66:38:35:d2:a2:c4:
                    83:03:41:b5:ba:de:6c:d3:52:38:8c:ac:9c:13:0f:
                    33:19:99:35:f3:53:91:7f:8f:47:8e:0a:ed:cc:e0:
                    3c:77:10:15:a7:c8:61:9b:b5:00:e9:e4:10:e2:8c:
                    4b:ce:d6:85:64:d4:82:ef:5a:bd:a7:a9:70:a9:1c:
                    a7:46:4a:dc:44:10:11:00:fa:b4:b2:c5:c6:c7:f8:
                    28:45:6d:a5:dc:06:71:1e:24:a6:20:9d:28:51:94:
                    6e:d4:f2:aa:54:37:6e:78:4c:89:45:54:1f:26:cb:
                    07:5d:ad:c7:2e:6d:12:92:94:7c:c6:d4:c9:90:2b:
                    e9:92:cc:f1:3e:56:3b:4b:26:5d:ad:44:6b:05:96:
                    53:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F2:E8:07:44:B6:AB:14:46:8B:52:A6:C9:7A:E4:E6:64:D3:4D:25
            X509v3 Authority Key Identifier:
                keyid:AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/C17E1DDCBC7111EBB1423E5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.116.0/24
                IPv6:
                  2001:df6:b080::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:f3:0e:b4:3f:de:7d:c9:ef:ad:ec:a2:f2:59:65:c6:19:a0:
         fc:80:7b:40:5d:d7:a7:af:5c:ce:23:04:83:c8:2e:90:b1:3d:
         bc:31:c9:9d:40:09:17:e5:58:4a:a3:91:ff:4e:2b:b4:d6:62:
         79:b2:07:c4:0d:2d:8c:a8:71:b7:d9:09:c8:bf:f6:21:4a:ca:
         ea:91:19:aa:b4:b9:50:f4:e1:d1:61:85:90:04:a6:f7:81:4c:
         e3:46:aa:66:c3:e7:82:27:28:e1:3d:24:fe:0d:b0:4e:c4:eb:
         ce:f8:ce:d3:43:1b:bb:25:fd:2e:bd:86:b8:68:97:0b:7d:01:
         25:a3:8c:12:e3:0e:88:09:7d:e9:b8:10:71:40:e1:db:dc:c5:
         0f:77:a4:19:27:07:b2:34:03:85:d6:af:45:b4:0b:6d:98:ac:
         f3:77:7f:8a:33:23:bd:ec:f5:91:2a:f5:72:21:df:66:37:9f:
         eb:e0:24:f4:62:0a:51:c2:25:76:14:28:83:88:01:4d:23:37:
         11:06:04:dc:b7:ab:f3:b9:37:71:cc:1c:06:83:6f:dd:5e:98:
         3e:23:f5:4d:18:64:09:50:82:7a:e4:39:47:e4:96:17:16:37:
         93:7d:43:8f:76:7a:f0:66:be:6f:c6:2f:4b:39:dc:c9:ca:7c:
         64:26:46:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:55:17 2024 by rpki-client on console-fra.rpki-client.org