Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ECFB1CA00AE911ECA769D611C4F9AE02.roa
File:                     ECFB1CA00AE911ECA769D611C4F9AE02.roa (raw, json)
Hash identifier:          +KR0e0Q75l32hdSToybulbIO8+2VkX6xb4s06LdxEyk=
Subject key identifier:   E5:8D:23:EF:32:AC:AC:92:A4:88:C9:1E:BE:0C:C9:E0:44:16:28:9D
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       45AD
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ECFB1CA00AE911ECA769D611C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:33:34 +0000
ROA not before:           Thu 05 Sep 2024 03:33:34 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     140824
IP address blocks:        103.172.60.0/23 maxlen: 24
                          2407:cbc0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17837 (0x45ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:33:34 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d9268e-cfa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ab:ee:d6:7c:63:ac:d9:1c:52:26:bc:65:95:
                    ef:3d:69:4d:a1:26:16:57:e0:ff:00:ad:40:ed:9e:
                    02:d5:4e:30:99:6d:e7:dd:30:63:71:3e:9a:09:99:
                    36:66:ca:28:ad:b8:c4:17:67:3a:65:ac:e7:3b:cc:
                    c2:48:de:56:d3:a6:ec:15:7e:f8:3e:44:48:8a:6c:
                    b5:2c:2f:4a:33:ac:f2:6d:4f:17:34:33:b4:dd:e6:
                    0e:6c:24:d3:da:07:66:22:54:06:ab:04:80:7a:a5:
                    2f:ae:b0:79:5f:4f:46:df:3a:76:71:0a:2b:25:70:
                    44:67:a8:f2:07:0e:3c:f9:0d:62:3b:6c:8e:ae:57:
                    86:0b:64:c1:36:fb:1e:10:68:39:6d:97:b7:db:26:
                    a7:6d:1a:7e:8c:29:fd:6d:18:a8:c5:03:82:25:01:
                    fe:e8:68:c2:0c:29:a9:da:9a:65:23:b1:97:be:9f:
                    d5:85:14:5e:04:de:9d:02:4d:f9:92:83:a2:3e:47:
                    d3:c9:f2:5b:e9:ff:dc:fd:eb:51:75:b4:cd:0b:87:
                    24:a7:29:f5:9b:f2:43:ad:61:a2:61:ab:ed:e0:08:
                    b7:d8:a4:09:7a:8a:95:eb:36:64:0d:79:f2:14:9d:
                    b6:4c:5a:28:64:35:3c:a6:3c:dd:d4:f4:6d:9a:31:
                    7f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8D:23:EF:32:AC:AC:92:A4:88:C9:1E:BE:0C:C9:E0:44:16:28:9D
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ECFB1CA00AE911ECA769D611C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.60.0/23
                IPv6:
                  2407:cbc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:4b:cc:2f:ba:f3:30:74:d6:50:45:72:e1:e4:65:62:1e:07:
         4b:05:71:7d:62:72:0f:6b:66:78:8e:bd:46:4c:33:03:67:7f:
         b0:50:b7:c4:ee:e7:c8:a3:6d:77:b6:3e:29:9e:e7:8a:f4:63:
         9a:95:62:6e:b8:39:f2:4a:4b:d1:b5:9a:4e:2b:ad:c2:60:08:
         e8:79:a7:8e:7a:a2:55:a1:57:1e:de:94:c5:8e:9d:6c:e0:49:
         6c:6e:57:52:10:98:10:44:d1:32:a1:38:99:77:e0:48:eb:42:
         34:59:f8:b4:13:e2:48:a1:9e:14:1c:ce:ac:cb:50:46:ee:cd:
         cb:9b:0d:20:25:e6:8c:59:51:66:c2:a3:aa:37:f0:eb:57:0c:
         c0:8c:69:d2:0a:23:9e:1a:29:4f:0b:5d:c2:e0:7f:cf:ee:16:
         cd:e6:78:23:d6:ba:ce:99:2d:4b:0a:d2:a4:c3:56:2f:e2:c1:
         9b:07:31:82:79:5d:3b:70:f6:dc:f0:14:29:9f:fc:92:31:aa:
         8c:fe:46:5b:a6:59:57:9a:19:02:8d:22:61:eb:15:ba:0e:db:
         40:41:0d:1b:36:3a:23:90:d9:a2:7d:5d:f0:9a:df:bd:19:79:
         44:bb:e3:9f:8e:86:bf:15:8e:e6:fc:7d:b9:d7:9d:80:79:61:
         1f:d8:b2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:33 2024 by rpki-client on console-ams.rpki-client.org