Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B1B5FE6C718B11EDA2029512C4F9AE02.roa
File:                     B1B5FE6C718B11EDA2029512C4F9AE02.roa (raw, json)
Hash identifier:          2zBA8mAfQ2iohzC8Ttij/vbILo1YiO0lngKSH7PU/Og=
Subject key identifier:   72:35:CB:73:A9:0E:4D:10:E8:71:09:63:CC:9F:17:7A:BC:F9:22:AE
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4677
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B1B5FE6C718B11EDA2029512C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:36:28 +0000
ROA not before:           Thu 05 Sep 2024 03:36:28 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     56160
IP address blocks:        103.24.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18039 (0x4677)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:36:28 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d9273c-2074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e1:10:4a:4c:d0:72:65:97:bb:d6:68:38:0d:
                    97:bc:7e:2d:1d:3b:53:dd:03:02:8e:cf:a5:d0:4d:
                    9f:a0:1c:f2:f3:25:09:05:17:01:fc:86:9c:a1:e2:
                    8c:77:63:38:7b:38:d4:e5:41:42:7a:fc:a2:ca:17:
                    70:83:4e:81:3b:0c:0f:10:fa:39:09:79:ac:23:d5:
                    2e:a8:4e:76:43:3c:0e:8a:17:85:dc:df:ca:10:68:
                    7e:a7:21:a9:dc:7f:ba:ef:b3:03:3e:1b:63:fc:11:
                    67:48:2b:57:df:c0:5e:63:d6:d4:40:b6:4e:ab:10:
                    67:78:21:ea:25:3f:45:8f:53:52:00:81:83:b3:38:
                    d2:b8:43:01:46:6f:f8:80:2f:79:a3:e6:13:49:4b:
                    a9:fa:34:b0:b4:34:c4:ad:39:cd:db:31:b4:8f:7a:
                    19:23:a6:05:df:cf:97:aa:10:cd:67:a9:1d:63:ca:
                    42:7a:a6:f0:4d:f6:ac:ee:ca:e1:a7:72:03:29:85:
                    af:de:fc:58:bc:fa:bd:b1:a6:65:4a:c1:dc:00:a3:
                    74:9c:55:39:8f:ea:27:98:3a:15:1e:c7:f3:aa:e4:
                    55:7c:bf:58:30:b6:e2:76:9a:4d:0e:ae:34:b0:a6:
                    5c:8e:85:30:5e:1f:a3:e0:6f:e9:fb:e6:a2:99:e8:
                    76:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:35:CB:73:A9:0E:4D:10:E8:71:09:63:CC:9F:17:7A:BC:F9:22:AE
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B1B5FE6C718B11EDA2029512C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:38:71:40:2b:01:54:a4:eb:2d:10:2a:d4:be:65:5a:4c:0f:
         0d:32:01:78:e0:89:1f:0c:09:c3:9e:0f:49:77:a5:c7:52:a9:
         5c:fe:18:76:25:af:41:51:ef:2e:cc:70:7e:be:b8:5e:e4:65:
         f1:f2:16:e6:cd:91:96:ea:c4:e6:b4:a3:1e:ac:e8:3d:69:8f:
         21:8c:d4:d6:ac:59:7e:68:20:64:fd:8a:04:db:5f:a6:1d:fa:
         ff:2d:cb:fe:47:8a:e4:b1:33:c8:83:5f:dd:b0:59:c2:e2:dd:
         78:0f:ed:c4:c8:fb:36:7f:5b:6d:9c:7e:1c:ec:f2:f2:7a:62:
         61:5e:b0:30:e8:d2:f6:b1:a4:eb:7c:7b:d4:6b:9c:4f:4a:81:
         c3:40:97:4a:63:85:6b:94:39:7f:3f:2c:bc:49:1d:7a:1d:ff:
         a8:4b:92:37:61:49:b1:9c:d8:fb:89:32:ed:22:b2:6b:52:40:
         6c:ef:a8:9c:7c:fb:cb:43:45:30:27:6f:e7:0a:43:e7:0c:38:
         89:48:de:c0:0a:7b:49:82:ee:01:d7:4d:9b:7f:d8:e8:1f:8b:
         2d:62:87:40:cf:bb:51:02:94:59:fb:45:ac:d8:e6:b9:af:ac:
         3c:aa:42:57:4e:08:e9:49:22:c0:a5:c7:b2:25:51:fc:a2:89:
         80:03:fc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:33 2024 by rpki-client on console-ams.rpki-client.org