Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/594ECE96804011EA9B73BC62C4F9AE02.roa
File:                     594ECE96804011EA9B73BC62C4F9AE02.roa (raw, json)
Hash identifier:          bowd2B0tA4ibjD34KXZjrzNTGjmQ2OPcAbE7DjOnSAk=
Subject key identifier:   FA:45:90:F4:AC:D8:24:AF:6E:52:0B:4B:32:E1:97:15:CF:90:2C:85
Certificate issuer:       /CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5
Certificate serial:       08D8
Authority key identifier: 69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/594ECE96804011EA9B73BC62C4F9AE02.roa
Signing time:             Tue 06 Feb 2024 21:18:48 +0000
ROA not before:           Tue 06 Feb 2024 21:18:48 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     63950
IP address blocks:        103.49.16.0/23 maxlen: 24
                          2001:df2:3c00::/45 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl
                          rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 20:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2264 (0x8d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5
        Validity
            Not Before: Feb  6 21:18:48 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65c2a237-9c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a5:75:f9:70:d4:a6:74:31:50:aa:c4:ef:00:
                    84:65:d6:ae:a6:78:19:59:d4:0a:53:e8:4f:66:c1:
                    27:7d:28:c9:47:9f:01:2c:8b:6b:7b:a2:4a:be:c2:
                    4d:44:93:9d:31:71:41:6a:de:0a:8d:9a:86:45:e6:
                    aa:c8:a8:ab:f8:41:dc:81:7d:d0:83:07:51:e7:d4:
                    bc:12:cb:d9:37:6b:b0:57:23:a0:c8:6c:7c:62:12:
                    0b:1d:d7:58:cf:1f:2e:b2:5a:67:2b:c2:36:6e:f2:
                    85:d9:52:8b:de:13:e1:9d:16:03:95:1d:b3:fd:a8:
                    cf:b6:2a:2f:46:08:9a:47:41:a1:a6:ac:82:fe:ec:
                    2f:49:b9:5d:e3:cc:ee:a5:6e:1a:ad:a3:f6:47:bb:
                    78:74:ad:43:cb:1f:da:59:c5:c6:ad:8f:41:41:21:
                    ef:04:62:52:62:d9:01:06:b6:a0:68:a5:3c:15:11:
                    f5:da:96:08:33:46:72:a6:80:e1:8f:bb:23:de:b7:
                    f2:47:54:86:16:15:19:c8:1b:f2:9b:c4:0b:28:89:
                    19:e2:fd:f6:d9:b1:62:03:bb:4b:ca:31:ed:43:f8:
                    f2:4e:8c:68:ae:87:d8:92:48:dd:fd:30:fb:0e:f8:
                    f4:0b:cf:c7:71:34:ae:90:7d:55:24:fa:81:3a:4c:
                    29:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:45:90:F4:AC:D8:24:AF:6E:52:0B:4B:32:E1:97:15:CF:90:2C:85
            X509v3 Authority Key Identifier:
                keyid:69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/594ECE96804011EA9B73BC62C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.16.0/23
                IPv6:
                  2001:df2:3c00::/45

    Signature Algorithm: sha256WithRSAEncryption
         b9:b1:48:93:b7:5c:0a:99:2e:f9:3b:b7:b7:a6:7c:7d:c1:4c:
         ec:f1:26:10:f4:46:e4:34:27:41:7f:cd:bf:90:d0:3c:94:39:
         be:62:dc:04:ad:66:9f:52:5a:f7:a4:59:81:80:64:b1:fe:ed:
         79:17:b4:58:03:15:f7:0c:b8:11:94:e4:aa:51:69:98:ed:9d:
         2c:a2:ec:eb:b8:64:24:c6:d0:51:bc:cd:fb:2c:e4:04:46:88:
         10:26:b1:d2:83:0f:56:3c:c1:ad:f9:e8:49:f5:84:a2:74:f8:
         9e:3c:a1:a3:06:51:41:3d:a3:d5:19:65:1f:a1:10:3a:0a:73:
         3b:0b:fb:e1:e0:d1:5b:ad:f4:4d:0f:0b:98:2d:ae:a7:b6:fd:
         7b:72:24:50:83:c6:a2:57:bd:4e:07:c3:c8:ea:d0:cd:f6:bd:
         de:6b:e0:5c:76:03:e3:27:04:6e:dc:60:e8:f4:05:bc:72:3f:
         6e:e0:18:7c:98:fd:6c:27:90:da:8c:e5:e6:36:41:c7:aa:a5:
         07:dd:03:71:6b:ea:b5:b6:f9:5a:5f:8b:95:64:25:5e:3c:12:
         2f:ad:c3:41:37:f6:8e:c4:a9:93:1f:0d:60:a5:8d:70:a0:3a:
         64:ad:a7:2e:c3:a9:13:6a:2d:77:8c:a2:94:6f:89:fe:ea:c7:
         81:20:d3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:41:00 2024 by rpki-client on console-ams.rpki-client.org