Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FE2BBD84654C11EFBB242E58C4F9AE02.roa
File:                     FE2BBD84654C11EFBB242E58C4F9AE02.roa (raw, json)
Hash identifier:          nimW3zBRaJ15Q1zgK1fi0fvC4A49TY3Jm2aY3C15MYQ=
Subject key identifier:   C0:31:E5:C4:A9:79:A3:6E:05:3E:D4:74:D4:A7:69:07:F7:4A:74:E0
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       459C
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FE2BBD84654C11EFBB242E58C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:33:19 +0000
ROA not before:           Thu 05 Sep 2024 03:33:19 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     140787
IP address blocks:        103.163.218.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17820 (0x459c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:33:19 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d9267f-3a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:09:b1:b0:cb:98:a4:71:60:fb:04:b0:32:5c:
                    55:2e:9c:5b:ba:2c:eb:ce:8d:ac:fb:4b:8b:01:01:
                    66:78:49:67:a5:f5:e9:30:09:98:8f:a5:12:89:1c:
                    ba:4d:f9:30:4f:3c:15:cf:49:db:26:56:e2:83:fc:
                    3a:b0:b1:ca:be:d3:fe:e8:11:92:e9:71:c0:f4:1f:
                    fb:c4:83:d2:09:e2:c0:d5:43:a2:9a:d2:08:a1:ec:
                    bc:d8:28:22:2f:31:92:f8:8c:a4:cc:af:09:60:26:
                    cd:c2:4c:bf:da:60:f5:6e:ce:9d:44:52:d9:6e:28:
                    a1:39:80:23:c7:90:f0:a2:a4:63:d3:87:a2:f9:87:
                    73:6e:59:4d:2e:7a:ad:65:21:a1:55:6f:e0:ed:e6:
                    fb:7e:49:2a:ce:f4:6c:5d:14:8d:60:26:f3:1a:5a:
                    eb:a9:a3:f5:86:76:4c:57:d4:9f:81:fb:02:75:5e:
                    43:f7:7e:a8:a4:20:93:db:ef:0e:36:3e:bc:9f:eb:
                    e9:ab:de:01:c8:80:00:a4:c4:ba:aa:29:e3:98:e6:
                    52:cf:a1:53:68:f9:49:00:07:c5:4f:32:c9:80:65:
                    54:76:ab:69:9d:04:98:6c:07:f7:5b:9f:6b:c7:34:
                    a4:a5:0a:19:30:ab:ca:40:40:9d:01:3c:60:95:3d:
                    ca:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:31:E5:C4:A9:79:A3:6E:05:3E:D4:74:D4:A7:69:07:F7:4A:74:E0
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FE2BBD84654C11EFBB242E58C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:b9:23:2e:43:c2:60:60:92:48:c8:18:7b:36:1b:86:39:be:
         8f:7b:66:2a:42:d7:67:00:91:d7:b7:e1:1c:23:9f:73:69:fa:
         9a:22:d1:1a:47:d8:ed:c2:53:40:68:81:3f:aa:09:22:df:4f:
         91:ff:1a:fb:07:7f:ae:53:ff:a4:59:97:d9:7e:9b:a4:48:f4:
         fb:2a:d1:60:e1:58:5c:12:5d:ba:ee:19:11:9a:d1:98:e0:cb:
         02:0e:5c:08:30:65:8d:b7:75:16:80:0b:5f:5c:fc:54:bd:34:
         8b:14:fa:06:2a:c1:4e:80:66:66:53:1c:df:29:e3:30:dd:7c:
         05:e6:dd:51:3c:10:8a:13:30:01:3e:e4:04:f4:1f:1c:f6:e0:
         8a:91:75:27:49:34:bc:38:89:6e:97:d7:3c:5e:55:1f:e6:f8:
         0f:f7:ed:a8:da:c3:9c:43:3b:2e:25:6b:6e:1f:f3:57:63:3d:
         6a:36:b8:02:5a:90:ed:a8:a1:74:ff:cc:db:2a:76:56:83:e3:
         65:9b:f8:bd:48:6b:f5:c2:08:64:da:9b:71:1c:13:82:18:0d:
         1c:be:22:d4:08:3a:51:32:bd:fc:33:31:1e:81:2e:26:18:e5:
         d4:56:da:32:b3:8f:76:c4:90:db:0e:c4:6f:75:5f:bd:11:18:
         53:00:31:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:33 2024 by rpki-client on console-ams.rpki-client.org