Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/463BDADE21FA11EDB296E43BC4F9AE02.roa
File:                     463BDADE21FA11EDB296E43BC4F9AE02.roa (raw, json)
Hash identifier:          98HlGbRN6nqFBrLt1961Tc9Tr+/5dsXoQBxQKO+lqZ4=
Subject key identifier:   C6:45:1F:83:80:F7:C2:38:9F:22:35:80:D6:AB:E0:84:60:4E:D7:8C
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4569
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/463BDADE21FA11EDB296E43BC4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:32:33 +0000
ROA not before:           Thu 05 Sep 2024 03:32:33 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     135922
IP address blocks:        103.98.160.0/22 maxlen: 24
                          2401:9c40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17769 (0x4569)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:32:33 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d92651-a700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:63:ce:4d:ef:c8:97:b3:80:48:96:8d:96:00:
                    c4:2b:4b:25:21:c8:13:cb:c4:43:a1:ec:2b:cf:15:
                    f7:b5:fd:19:7c:a0:6a:0d:5b:b5:70:d2:ef:ba:75:
                    8a:80:75:66:4b:3b:7a:59:f5:0f:ee:1f:06:bf:06:
                    f4:9e:ab:4c:bc:6a:07:e5:63:4b:1c:0d:cd:01:21:
                    9a:fc:7a:b6:6b:12:18:08:87:5e:e8:c5:7e:87:28:
                    74:f7:7a:80:2d:11:14:30:23:fd:5a:6e:23:8e:31:
                    08:05:8e:28:90:59:fe:b3:3f:cc:3c:7f:55:8e:e5:
                    aa:6b:40:95:83:93:0a:e9:fd:b6:f6:b1:c4:76:60:
                    0e:3b:d1:67:40:eb:da:35:2b:33:19:ec:d2:48:56:
                    1a:57:1f:81:96:bf:95:d5:6c:55:04:9d:28:39:6a:
                    de:e3:d1:52:1d:e6:c3:9a:fe:54:6c:e9:f4:e5:78:
                    db:e0:63:0b:6a:0c:08:a9:92:68:9e:1d:b5:3c:43:
                    c5:84:81:ca:9f:8a:ce:1e:1b:06:b0:b7:42:dd:af:
                    ad:2c:51:37:16:4f:eb:7a:01:e7:18:e5:07:b4:a7:
                    53:b7:80:bc:42:ec:a3:00:92:db:09:51:b0:63:cd:
                    0b:55:95:fe:84:2c:c3:99:fd:59:4e:68:1e:d6:67:
                    d7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:45:1F:83:80:F7:C2:38:9F:22:35:80:D6:AB:E0:84:60:4E:D7:8C
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/463BDADE21FA11EDB296E43BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.160.0/22
                IPv6:
                  2401:9c40::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:5f:31:f1:83:e1:44:09:59:f8:d2:62:ab:1d:55:c8:9d:d7:
         53:ac:86:02:0b:2e:da:6a:bc:6c:fe:b7:62:77:85:bf:b9:82:
         42:7a:de:5f:5c:e1:e6:c9:3b:89:31:cf:9a:7d:18:8e:15:46:
         23:83:61:0f:04:39:bb:b4:4e:d0:37:41:51:9d:ee:5b:cc:46:
         4e:2d:e9:90:b4:45:69:56:7a:19:8b:f9:6f:8f:a9:13:ec:40:
         0b:39:b3:54:db:09:a1:ff:e0:26:b4:95:b9:39:6a:7b:15:00:
         c2:d3:97:7b:a0:c9:ba:29:b5:a8:19:96:aa:af:2b:86:44:e2:
         b8:bb:e5:97:a7:49:97:a7:25:9a:1a:4a:98:47:91:14:43:e6:
         b2:33:5b:2a:67:ef:ea:97:38:fa:b7:7b:c7:6f:22:a4:a4:af:
         f3:aa:13:7f:d9:4e:fc:b7:5e:6e:c1:7b:67:b0:10:82:88:9f:
         0b:04:3a:2a:ce:fe:af:fb:10:16:b1:01:4f:b8:43:b8:8f:f9:
         10:d9:23:85:6b:37:88:cf:aa:64:88:30:64:90:a3:05:01:fc:
         6f:9d:72:4d:e9:0c:35:e7:fe:c1:0d:34:24:cd:de:6d:bc:25:
         e1:f5:e0:91:00:86:85:d1:6d:04:18:b8:90:08:02:c7:7c:e1:
         20:27:af:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org