Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7982D8DAA12A11ECBB6E0681C4F9AE02.roa
File:                     7982D8DAA12A11ECBB6E0681C4F9AE02.roa (raw, json)
Hash identifier:          HVFwg/htoLtSDFcs/BeSZqbY2gIUoYGJOh00hUEDcZg=
Subject key identifier:   C6:9C:E9:13:99:94:3E:8F:73:4C:FB:4C:4E:B0:68:D6:49:4D:53:0B
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4681
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7982D8DAA12A11ECBB6E0681C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:36:37 +0000
ROA not before:           Thu 05 Sep 2024 03:36:37 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     63744
IP address blocks:        103.216.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18049 (0x4681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:36:37 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d92744-6d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0f:73:34:46:b8:3e:d2:89:27:88:36:71:d4:
                    33:96:41:bd:67:2f:14:1d:96:9b:4f:8f:c9:29:84:
                    f5:2b:5a:f5:59:b0:82:b1:54:3c:a9:64:6b:2f:c5:
                    49:86:f8:aa:a4:30:ab:a8:c3:fb:4b:4d:71:13:ef:
                    15:05:87:e2:8b:73:74:86:28:8b:54:b5:5e:c7:2f:
                    3a:c1:75:2f:ea:f5:6e:bd:09:82:e9:23:e5:74:5d:
                    35:75:21:5f:0e:10:5f:18:fd:d1:22:6c:98:19:ef:
                    e9:e2:97:4f:51:6b:e7:81:a0:fa:b4:09:10:5d:26:
                    3e:71:ab:c7:19:29:bd:b6:86:8d:07:f4:1c:58:c1:
                    33:85:08:08:a3:e2:87:f9:3f:8b:49:10:3c:cc:60:
                    26:a2:8f:c7:33:dd:f4:c3:25:66:87:82:76:5d:a1:
                    b9:eb:04:8e:5a:24:79:a0:04:e9:b4:21:5d:3d:10:
                    af:d7:82:d5:fd:94:6e:ca:53:0b:d2:94:33:11:a1:
                    ee:52:91:08:57:00:49:e7:50:4b:24:2a:f1:dc:49:
                    44:b2:03:9b:86:f9:5b:d9:d2:3c:ec:87:52:c0:85:
                    b1:0a:30:b5:15:1d:5f:77:f1:12:47:63:4d:a4:c0:
                    e8:0d:ff:b6:0a:4f:17:01:ea:81:62:25:fb:f7:3c:
                    70:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9C:E9:13:99:94:3E:8F:73:4C:FB:4C:4E:B0:68:D6:49:4D:53:0B
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7982D8DAA12A11ECBB6E0681C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:6a:40:40:02:ab:41:b7:57:97:c5:88:71:bb:d8:66:be:c6:
         23:8c:75:0c:b7:21:f2:c8:a4:41:23:8e:13:f8:b5:8d:97:73:
         32:14:e8:4d:0f:fe:83:1a:3c:9b:0d:a7:cd:1f:74:c7:b8:dc:
         f1:4b:3d:93:64:98:52:24:5a:8c:51:d8:43:24:58:d9:60:69:
         a7:5e:49:9f:3d:79:3c:8b:07:22:ba:5e:64:8a:55:9b:6c:c5:
         64:47:e2:54:b1:71:be:d4:d3:a2:b5:27:83:4c:9d:5b:84:3e:
         24:91:44:0f:21:ec:dd:6e:3a:df:1a:30:69:09:dd:12:8d:3b:
         88:a9:30:3f:a0:91:36:b3:1a:49:43:0b:8c:61:01:c5:47:15:
         92:7a:1a:70:2c:ff:5e:64:57:07:08:22:ee:76:f2:6a:e0:b1:
         7f:5b:8e:d4:28:78:5c:b0:ce:0f:d1:c9:7a:f4:44:43:45:41:
         23:4f:cd:bf:82:51:92:94:79:20:e6:c5:27:7c:3f:62:0a:be:
         19:c9:e3:16:1a:41:df:d6:b7:3b:24:6e:45:f2:9c:f1:d3:8d:
         fe:4d:66:2e:de:d5:8d:80:91:93:b2:44:ce:7e:5c:ed:97:3a:
         57:c3:f2:41:51:72:32:02:ed:8b:f1:fb:08:1e:14:1e:3f:83:
         71:e5:e7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:32 2024 by rpki-client on console-ams.rpki-client.org