Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0E41EB28FB1811EB8822D10DC4F9AE02.roa
File:                     0E41EB28FB1811EB8822D10DC4F9AE02.roa (raw, json)
Hash identifier:          DafDsJvDr4lua9jFAFWiRWdnb0JGFSPNi6FXeKm2cWk=
Subject key identifier:   2A:18:C8:4D:A3:DC:72:6B:FE:D3:41:CB:A4:2B:AD:74:9E:35:87:4B
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4597
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0E41EB28FB1811EB8822D10DC4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:33:15 +0000
ROA not before:           Thu 05 Sep 2024 03:33:15 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     140769
IP address blocks:        103.161.18.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17815 (0x4597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:33:15 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d9267a-6e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:24:0c:96:55:0b:60:09:9a:e8:51:17:14:d3:
                    bc:90:3d:bc:03:01:0c:1d:e8:a7:a8:c1:e6:a4:98:
                    ff:18:5c:e2:ec:9f:2a:21:9b:3a:d7:a2:93:65:6d:
                    a3:0a:90:e2:a5:4a:95:55:b4:c6:31:8e:e9:b9:32:
                    46:d3:85:93:41:8a:9b:89:7f:d7:95:8f:b9:ed:ad:
                    20:8b:23:b8:2e:34:ea:cb:66:6f:87:0d:66:9f:7e:
                    5d:7f:4d:d5:29:a2:0c:14:48:c3:7e:3b:7d:3f:3e:
                    c1:1d:89:fd:73:d6:7d:fd:d5:83:1e:4a:04:f1:d5:
                    6b:85:10:f8:cc:a6:0c:fe:6b:c3:3e:8d:73:0f:56:
                    c9:13:9f:cd:db:0d:da:c3:69:f6:69:12:ee:10:97:
                    13:29:f7:18:26:bc:5a:45:6b:20:8a:9b:5e:ec:f4:
                    62:4e:4b:f3:05:0f:08:98:21:bd:3e:63:fe:0b:9b:
                    00:e7:5d:fd:b6:91:f6:85:8f:1c:32:d9:31:70:83:
                    66:66:46:e2:43:7a:47:ad:b8:03:1a:b7:dc:a3:70:
                    33:a4:0f:c6:42:38:28:58:16:4a:49:5c:ee:b7:09:
                    d7:8a:aa:20:2b:17:7d:ed:13:84:ee:8e:a7:6f:35:
                    cb:e0:39:d7:1c:40:29:a9:4b:bb:de:71:9e:f4:6c:
                    5b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:18:C8:4D:A3:DC:72:6B:FE:D3:41:CB:A4:2B:AD:74:9E:35:87:4B
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0E41EB28FB1811EB8822D10DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:22:e5:c0:9b:a8:b4:78:48:55:15:00:b1:42:7d:93:5f:8a:
         cb:7d:6d:d7:6e:1e:2f:b4:70:20:04:1b:00:87:b7:ca:ed:67:
         e9:3e:26:5b:af:17:32:43:26:ab:1e:66:88:3a:96:16:c3:67:
         0b:86:3a:71:8d:50:e0:82:93:be:e2:e6:7c:f5:9c:ad:20:31:
         14:90:d4:d7:42:30:a7:fc:f8:7e:a7:7e:5c:9c:a9:d2:24:6a:
         d2:c6:e6:dc:ce:e9:09:e5:67:0e:28:e6:cd:4a:d8:d2:b1:e6:
         75:b2:13:5f:48:12:f9:cb:7c:ed:ee:2b:41:c4:b6:90:43:c9:
         4f:59:6b:fa:da:7e:4b:00:2d:f4:4c:9d:e4:d5:78:a6:88:5b:
         cb:9a:8d:4c:92:03:a3:25:b1:4e:3e:d0:c7:9f:5f:03:4b:2e:
         74:42:25:05:9e:58:25:0e:47:59:b0:d6:a1:8a:8f:ae:ad:90:
         f9:f9:14:c2:da:63:ab:12:2a:7d:1b:41:76:06:ed:c0:44:51:
         c7:fa:53:83:eb:8a:0b:a4:01:16:8d:63:b1:b0:67:52:b7:26:
         3a:f3:0f:b2:9b:1e:4c:88:04:0b:ea:28:9c:c1:66:70:e2:53:
         ad:17:b6:c9:44:6e:18:4a:54:28:d1:74:15:51:11:1f:42:b8:
         90:ca:f5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:31 2024 by rpki-client on console-ams.rpki-client.org