Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/16DA3F3E784E11EC96A28137C4F9AE02.roa
File:                     16DA3F3E784E11EC96A28137C4F9AE02.roa (raw, json)
Hash identifier:          y2qv06TmgMwKADn1oDVapCF1E/WcY7FuZLGnohpiPWU=
Subject key identifier:   D7:90:5D:8E:58:4B:3E:D5:F6:13:A9:B8:1C:D6:F0:1D:4D:40:62:15
Certificate issuer:       /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1
Certificate serial:       04B4
Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/16DA3F3E784E11EC96A28137C4F9AE02.roa
Signing time:             Tue 13 Aug 2024 00:42:54 +0000
ROA not before:           Tue 13 Aug 2024 00:42:54 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     210488
IP address blocks:        103.170.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl
                          rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1204 (0x4b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1
        Validity
            Not Before: Aug 13 00:42:54 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66baac0e-e6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9b:dd:67:a4:b6:a2:3e:84:0e:d7:3e:b8:f4:
                    61:6a:c1:ee:ef:01:78:92:1d:1c:2b:61:9a:ac:59:
                    93:5a:11:26:07:43:ce:2a:58:c6:f1:dc:5c:23:59:
                    58:43:a7:e7:93:7b:56:eb:7a:70:43:e4:fe:f0:fc:
                    59:8c:7d:f3:18:88:0f:b0:88:10:3a:b5:ad:f0:95:
                    96:dd:3f:92:0e:9e:c4:8e:50:97:d2:cb:ee:31:71:
                    49:cb:47:06:ec:c9:5e:49:dc:b0:7c:83:80:65:25:
                    f7:24:06:d2:96:d8:ee:4e:f6:b0:53:e6:59:1c:3e:
                    96:8f:09:3e:df:77:17:8f:7b:dd:6f:6b:d1:47:4d:
                    fb:be:11:c2:52:be:87:e2:87:1b:4e:e7:cc:0e:13:
                    69:85:2f:dc:c2:27:e3:4e:e1:32:a6:aa:a4:31:b1:
                    1b:26:2f:49:51:9d:be:06:e9:f2:08:2b:d1:e6:72:
                    88:48:0d:60:23:f9:85:47:c9:93:18:4f:a6:d7:ab:
                    6d:c8:90:c5:04:ae:ca:34:ec:7e:aa:cc:7a:65:a2:
                    69:fa:d4:82:ad:5f:dc:29:d5:87:73:fd:bf:b5:7f:
                    97:b3:ff:08:fd:29:2b:93:73:8b:c4:71:c6:7d:4a:
                    ed:1d:29:35:68:33:82:01:51:0c:02:fe:1e:10:a5:
                    c6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:90:5D:8E:58:4B:3E:D5:F6:13:A9:B8:1C:D6:F0:1D:4D:40:62:15
            X509v3 Authority Key Identifier:
                keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/16DA3F3E784E11EC96A28137C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:d9:75:12:16:c1:fb:91:ba:23:5e:90:d9:88:b2:21:f0:ee:
         32:e9:d2:8a:13:13:41:c2:e1:84:43:71:2a:d0:ec:71:9e:2d:
         ad:e7:93:af:07:bb:b0:8e:b0:9e:79:e8:fb:a9:7a:af:51:85:
         0f:10:1f:31:d0:cd:3c:4a:a2:2b:df:2d:27:17:37:9e:38:28:
         9c:57:6a:83:cc:dd:42:b0:a1:ea:56:99:62:58:b2:60:1c:34:
         02:1c:05:d5:29:26:0c:4d:90:d1:fc:65:93:af:ab:f6:69:6e:
         4a:ff:fc:7f:14:fb:b4:82:9f:cf:4e:33:b5:6a:d3:61:3c:ff:
         27:c3:9b:e6:5b:60:95:16:9c:8d:68:13:9f:12:4f:0c:63:43:
         4f:be:45:f0:e1:66:4e:96:5a:d0:12:ca:1f:e3:55:24:66:8c:
         dd:d5:9b:70:7d:00:2b:59:d2:df:30:f4:fe:61:b1:54:83:b3:
         76:b3:ee:1b:c0:8b:53:89:a5:e1:ce:4a:9c:dc:f8:2b:c9:45:
         e9:b8:f5:ae:11:dc:28:68:d9:a4:6c:aa:ea:ce:57:bd:35:d4:
         79:aa:97:aa:17:53:ef:1e:78:79:83:c5:b3:fb:28:8c:55:22:
         cd:b0:69:61:c2:0b:45:ef:a6:7e:37:50:91:7b:2f:f3:6f:73:
         2f:9e:b3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:18 2024 by rpki-client on console-ams.rpki-client.org