Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8F19AE6C9DE311EBBFF9E749C4F9AE02.roa
File:                     8F19AE6C9DE311EBBFF9E749C4F9AE02.roa (raw, json)
Hash identifier:          aPunvENZxyOgaz7F7sTPQL7UjksC8zsXISrL60Tl2wM=
Subject key identifier:   9A:EA:F5:8F:92:DC:79:CF:69:F9:2D:AB:12:F4:55:A8:E3:E9:44:69
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       459D
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8F19AE6C9DE311EBBFF9E749C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:33:19 +0000
ROA not before:           Thu 05 Sep 2024 03:33:19 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     140796
IP address blocks:        103.164.34.0/24 maxlen: 24
                          103.164.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17821 (0x459d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:33:19 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d9267f-185f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2d:fb:e4:e1:a1:ac:40:88:5f:d9:91:92:0e:
                    d4:11:2f:f6:58:ec:5a:2c:e5:e8:35:9d:7a:cf:a5:
                    50:fe:b1:55:c9:31:67:e9:fc:63:c6:b4:59:27:53:
                    77:39:c7:7d:46:80:de:ae:d5:a1:37:15:16:4a:61:
                    f3:8b:c6:55:f4:5f:a2:f9:e6:0e:61:8b:34:b9:8c:
                    26:89:29:05:b5:6b:b5:43:86:b0:3c:42:c7:b1:38:
                    c3:69:34:50:63:ea:f3:50:f3:e1:16:7d:81:d7:80:
                    a3:be:55:b0:97:35:49:50:90:31:57:0e:9c:fe:cf:
                    e2:ef:21:40:bd:09:f1:c0:bf:42:db:17:3e:3e:cd:
                    5b:5c:d2:74:fe:e5:72:27:22:e0:af:d9:eb:d8:56:
                    8b:d6:f1:80:26:53:ff:9f:2f:b6:8a:c5:aa:98:82:
                    88:b6:b1:08:1a:d8:3c:38:d6:0e:48:8a:60:95:d8:
                    80:5d:1f:26:44:e4:f5:d1:24:5e:62:d1:2e:83:3e:
                    34:db:9e:d3:3d:9f:0e:53:0d:4d:c3:6d:cd:6a:0d:
                    69:7f:b6:8e:21:2c:ff:ab:c0:47:47:6b:79:2f:11:
                    92:32:b4:61:fd:82:e1:b7:b8:57:d2:01:95:f2:0a:
                    d8:01:7a:ca:ae:59:ea:1a:82:f0:fb:3d:5b:d8:b0:
                    6f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EA:F5:8F:92:DC:79:CF:69:F9:2D:AB:12:F4:55:A8:E3:E9:44:69
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8F19AE6C9DE311EBBFF9E749C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:b3:b9:3d:bc:30:4f:b0:8c:7d:14:33:d0:a2:83:fd:d6:a7:
         d9:4a:f6:e9:b5:2a:52:73:b1:69:a0:7f:34:e9:ee:37:01:93:
         65:06:19:30:68:2a:9a:21:79:d1:a9:e8:7f:12:ba:73:b8:f7:
         ee:da:17:09:70:b5:97:d8:ba:ca:7a:86:f3:1d:70:45:50:1b:
         b1:b9:fd:7e:a8:ee:b0:0f:2e:4c:79:95:8a:ef:bc:b7:b0:37:
         b9:34:d7:4a:b6:42:93:74:8c:2b:7c:50:11:0c:b4:0a:d6:49:
         17:65:3e:1d:87:5f:20:fd:4f:e0:5c:0d:d1:35:a7:29:fe:fe:
         66:e2:2b:87:8a:41:45:32:d9:4b:a0:ac:37:b2:7f:a6:5f:b5:
         f8:99:ef:2e:90:41:d6:c0:80:cd:94:62:46:f6:a1:8f:13:d2:
         d5:71:19:df:3e:e1:f9:33:09:d2:21:8c:0a:d6:75:8c:aa:d3:
         13:02:67:32:bd:a2:c2:6c:13:a0:bf:4f:10:e7:f8:8c:1a:73:
         fe:57:0e:b9:d2:d3:81:07:f2:4a:d5:75:8a:a2:cd:40:22:8f:
         26:61:b0:2b:9e:aa:bd:c6:fd:c5:86:49:02:01:a6:97:48:51:
         00:94:1d:37:37:7f:6b:2e:4e:c9:81:54:a6:86:f3:cc:6a:9e:
         97:a7:f2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org