Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/980E2450325111EC93E97C35C4F9AE02.roa
File:                     980E2450325111EC93E97C35C4F9AE02.roa (raw, json)
Hash identifier:          HYG5e8jfKhRbtteoZY2zvEiilxliMZJVXIBP6kOt6Xo=
Subject key identifier:   C1:83:56:88:4E:03:31:26:E0:23:03:5E:25:71:0F:99:9A:34:B1:DF
Certificate issuer:       /CN=A91B7740/serialNumber=C42A18C2B7B7251F2506F5FA278A162E84444DA6
Certificate serial:       03F9
Authority key identifier: C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/980E2450325111EC93E97C35C4F9AE02.roa
Signing time:             Wed 05 Jun 2024 02:48:36 +0000
ROA not before:           Wed 05 Jun 2024 02:48:36 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     138929
IP address blocks:        103.167.160.0/23 maxlen: 23
                          103.167.160.0/24 maxlen: 24
                          103.167.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl
                          rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1017 (0x3f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7740/serialNumber=C42A18C2B7B7251F2506F5FA278A162E84444DA6
        Validity
            Not Before: Jun  5 02:48:36 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665fd204-8e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:97:61:17:b4:c1:1e:9c:20:50:41:90:45:e1:
                    6e:94:64:a3:72:a1:ec:a7:35:29:16:60:b6:71:38:
                    f7:f7:43:44:48:02:73:7f:27:a9:62:d3:2c:cf:02:
                    ac:6b:10:01:8d:17:9c:15:35:08:51:a1:90:c2:14:
                    f2:53:bd:78:aa:c9:13:2b:37:39:5b:f4:b7:ab:9f:
                    b8:9e:aa:47:fa:31:9d:8d:06:70:14:4e:07:7b:18:
                    47:05:f5:81:32:25:f4:1a:8e:6f:dc:01:ac:f8:3a:
                    fd:81:9b:fd:86:a7:74:51:30:30:57:a5:cf:1a:9a:
                    68:f4:91:de:7d:6a:f0:4a:0f:6e:bf:b2:bc:68:79:
                    4a:a0:0b:d9:8f:a7:df:2e:a4:95:f5:36:1e:8f:17:
                    37:a0:d1:e8:b9:d9:27:2b:52:61:10:8b:b6:2a:0c:
                    f6:37:af:71:f9:6a:c0:e7:52:78:ae:a2:cb:24:18:
                    90:c8:3a:c0:9b:9e:21:c2:e5:2e:9a:c2:43:13:32:
                    91:59:ed:85:6d:b3:e7:84:c3:bb:16:3d:df:2b:cf:
                    d9:7c:93:7c:ad:c5:90:4e:cf:e6:28:b3:97:21:f0:
                    35:5d:f4:4c:ed:a8:63:3d:51:0b:02:42:74:c2:e8:
                    b2:ad:67:f4:ab:8f:53:94:f2:74:0f:78:0e:06:0a:
                    da:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:83:56:88:4E:03:31:26:E0:23:03:5E:25:71:0F:99:9A:34:B1:DF
            X509v3 Authority Key Identifier:
                keyid:C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/980E2450325111EC93E97C35C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:38:d8:5c:47:98:40:7e:6e:00:9a:58:c1:0d:0f:24:0e:2f:
         7e:db:e9:70:91:25:17:bc:2c:75:62:cc:b8:df:a0:2f:09:d9:
         a5:f9:5c:1f:b5:9b:1d:bf:81:73:9c:cb:3c:76:f8:46:c6:88:
         99:d5:47:b1:50:e2:56:5f:2f:ad:dc:ac:e3:e7:eb:cb:24:8c:
         a9:52:74:87:19:d2:80:2d:09:40:98:68:23:84:d3:5e:3b:cf:
         41:54:28:32:1c:e8:56:20:32:e0:dd:0f:e5:c8:93:ae:3d:1c:
         5e:2c:4d:5f:30:f3:bc:9d:dc:50:f5:d7:de:ce:8b:87:62:9e:
         91:9f:7b:d9:21:40:b0:48:00:80:6b:e8:e4:04:60:6b:a2:f9:
         40:14:c3:91:bf:d8:39:cd:b5:2c:47:4f:00:c9:2d:80:3a:c8:
         52:f0:08:fc:66:ad:58:ed:2d:65:cf:03:e3:8d:3f:1f:ea:ab:
         e9:2b:0c:70:d8:22:d0:4a:a3:8a:26:2b:d4:e4:01:9e:a0:b7:
         e7:12:f9:8a:03:38:27:2a:15:ea:7c:d2:7a:3d:ef:8d:d3:da:
         6d:a9:07:0f:70:59:90:10:4a:78:16:be:64:32:e3:74:84:ba:
         e1:07:d9:75:90:15:c1:8e:74:61:d3:fc:5a:87:d9:3b:5f:cc:
         3e:91:83:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org