Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E47AE50893BD11EC8B2D9A58C4F9AE02.roa
File:                     E47AE50893BD11EC8B2D9A58C4F9AE02.roa (raw, json)
Hash identifier:          TiIy/Zd37GISFkasQ0xNBtpJSjFFE9AGbLeSyvJmTU0=
Subject key identifier:   6F:E2:09:87:0D:5A:16:8A:1F:0B:17:9D:81:14:0B:9E:21:D0:E7:25
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       484D
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E47AE50893BD11EC8B2D9A58C4F9AE02.roa
Signing time:             Fri 22 Nov 2024 02:25:51 +0000
ROA not before:           Fri 22 Nov 2024 02:25:51 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     131127
IP address blocks:        183.91.160.0/19 maxlen: 24
                          2401:d460::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18509 (0x484d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Nov 22 02:25:51 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=673febaf-fb0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e0:76:8a:30:27:e6:d2:c3:f4:1d:60:40:f1:
                    f2:53:aa:54:4a:f3:9e:e2:17:dd:c2:11:fa:a4:a7:
                    72:15:be:e9:30:a6:28:8c:ce:9c:1e:a4:80:cb:a1:
                    ee:a8:8a:a7:7f:37:ae:3f:be:da:6b:b8:d1:b0:39:
                    72:fa:d7:71:da:a7:0f:c5:e5:92:f0:e6:ce:6e:ec:
                    db:04:e1:c1:60:95:50:29:98:50:fd:52:ff:18:1f:
                    b7:ac:8c:3a:99:de:aa:54:93:84:ef:ac:f0:0e:57:
                    ed:b5:77:d2:7e:a8:c4:ca:9c:c9:fa:75:f8:a2:2a:
                    5d:33:65:37:64:48:51:34:eb:cc:6b:79:e9:79:bb:
                    7e:cd:e2:6a:3f:7a:9f:36:fb:d1:0f:ce:1e:36:80:
                    04:d9:17:b6:68:3a:c2:97:c4:b2:c6:63:b9:b5:b7:
                    32:da:e1:a2:bd:36:35:79:2b:ec:bc:d4:9f:00:51:
                    ea:6d:bd:83:1a:d4:99:0d:60:67:34:3d:7f:29:0e:
                    d6:b4:c5:c8:79:fc:cf:3c:9e:c1:f9:e9:a6:d4:66:
                    1c:94:97:e6:68:e7:5c:1a:5a:0d:14:89:c5:cf:d0:
                    2d:09:c0:67:22:cb:f0:91:4c:db:75:1f:7f:47:a7:
                    7f:a1:2c:6a:46:50:e0:b2:5e:36:dd:89:77:db:69:
                    6a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E2:09:87:0D:5A:16:8A:1F:0B:17:9D:81:14:0B:9E:21:D0:E7:25
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E47AE50893BD11EC8B2D9A58C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.91.160.0/19
                IPv6:
                  2401:d460::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:3b:51:4d:5a:ad:67:0b:65:00:04:37:21:50:ca:61:56:ff:
         c4:13:7a:05:94:b1:a1:b2:2a:aa:a1:4b:fc:1b:04:2a:bd:59:
         0a:59:d1:3c:4d:23:6f:f0:63:96:d5:b6:28:01:c9:05:de:c9:
         03:51:b2:43:a9:dd:d5:38:63:97:1c:d4:b5:91:22:fc:6a:60:
         ba:e1:da:a4:cd:ca:44:46:75:bb:b5:ca:7a:ab:53:7d:98:2a:
         de:15:fc:c9:b2:7d:88:6d:80:28:3d:f7:8a:a7:98:7d:50:5e:
         92:f2:94:d3:b6:9f:5f:e1:7c:53:57:e0:7f:b0:4c:f6:19:a8:
         7d:57:5f:49:e8:59:b7:56:4b:e9:25:31:32:1b:a5:cc:19:9e:
         e3:d6:48:8c:40:0d:c4:0f:7d:ab:9f:c8:0d:af:60:5d:a9:ec:
         f7:18:2e:d0:14:d5:7d:a9:42:ec:c7:a8:ce:e3:2b:57:6f:38:
         d5:42:b0:a1:b2:71:2e:e0:73:82:ca:ef:a7:cd:ed:57:c1:13:
         41:67:47:6e:ed:cd:a0:fc:81:2d:27:82:bf:84:7c:1c:72:8d:
         67:04:c5:54:f3:e5:48:dc:74:71:95:94:46:11:d4:98:52:5b:
         db:f8:6a:0e:02:0f:99:db:5e:b9:e1:5a:b1:4e:4b:e2:b8:30:
         c3:dd:6c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:33 2024 by rpki-client on console-ams.rpki-client.org