Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/1F90160E87F211ECBEBC5339C4F9AE02.roa
File:                     1F90160E87F211ECBEBC5339C4F9AE02.roa (raw, json)
Hash identifier:          Sh9ZEftSDUCNsonrPL5hdIuQ6kK6oBuLl7Au9KuBgaU=
Subject key identifier:   0B:31:98:AC:B7:33:A5:E2:28:19:6A:4D:E6:96:C1:06:EF:F9:73:36
Certificate issuer:       /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial:       1297
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/1F90160E87F211ECBEBC5339C4F9AE02.roa
Signing time:             Mon 28 Aug 2023 17:34:46 +0000
ROA not before:           Mon 28 Aug 2023 17:34:46 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     56032
IP address blocks:        103.110.214.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
                          rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 17:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4759 (0x1297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
        Validity
            Not Before: Aug 28 17:34:46 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ecdab6-e6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c1:2d:48:c0:07:db:42:ef:84:15:6d:4e:dd:
                    fd:b5:3a:a1:22:c6:80:82:9b:60:9b:ec:64:a7:30:
                    db:71:0f:00:5e:44:72:64:8d:74:4c:79:11:c2:50:
                    3f:64:50:a8:30:2e:cc:a7:fb:30:80:9f:10:ce:c0:
                    27:4c:7e:46:3f:92:1f:6d:a2:53:55:a8:e2:eb:d8:
                    37:6d:4a:92:e3:b5:b5:60:5a:1f:23:70:b3:e0:48:
                    5d:f6:68:1b:a3:38:bf:44:29:52:34:80:7e:28:c7:
                    8b:9f:f0:d9:ca:d0:08:bb:a4:6f:cb:cd:a4:53:13:
                    8a:b9:84:73:be:0e:57:a0:a5:15:5a:65:d0:7e:d9:
                    51:42:a6:91:08:5e:0a:c0:8b:77:2d:32:3a:74:36:
                    07:67:cb:33:36:e5:23:a7:5b:5d:e5:95:74:30:06:
                    d8:50:05:0b:99:81:f4:d2:89:cc:64:d9:a1:09:9d:
                    8f:e6:dc:51:f8:67:1a:9c:df:5a:42:18:c4:a4:c5:
                    a9:c0:3a:30:85:5d:bb:e1:ba:02:dc:75:f7:f4:c0:
                    e1:6b:2f:87:d2:c7:7f:9e:10:6b:40:cc:f1:6f:07:
                    1f:05:83:da:95:b9:78:01:ed:9b:60:87:f7:72:dc:
                    0d:e0:e8:a4:88:37:bf:b1:02:7f:97:0f:db:86:20:
                    64:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:31:98:AC:B7:33:A5:E2:28:19:6A:4D:E6:96:C1:06:EF:F9:73:36
            X509v3 Authority Key Identifier:
                keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/1F90160E87F211ECBEBC5339C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:8c:bb:df:66:ba:8c:e1:20:c6:80:f8:5e:19:20:47:b8:45:
         4c:5b:ca:ff:a0:b1:4d:76:0e:1f:2f:fe:f5:e8:43:00:d9:de:
         81:e9:01:9a:02:7a:b5:aa:34:49:0b:8a:55:3c:80:42:15:52:
         e4:ac:d3:76:79:bf:dd:bf:d9:70:7c:b9:2c:73:9c:c6:5c:89:
         38:b2:7f:59:cc:31:10:b8:b8:66:37:32:b6:7d:81:5a:50:c8:
         e9:28:c8:29:5c:95:b2:c8:38:66:d0:8f:bc:09:3c:b5:cd:28:
         ca:ee:d9:e4:ac:fd:db:56:b8:25:32:8b:47:85:31:02:33:97:
         b4:8d:59:ca:da:7a:88:f2:99:b9:1a:ce:56:f3:9b:48:9c:d8:
         27:9c:ca:3e:34:89:8c:50:75:87:28:e6:13:ec:7e:d8:9b:47:
         08:0c:f1:61:80:a4:5d:de:aa:f1:3f:e6:15:2e:f3:c0:d9:e3:
         05:ef:31:1d:88:aa:3b:ec:66:fb:5e:a4:c9:86:70:f5:80:31:
         66:76:b2:31:ff:fd:09:15:fd:14:69:3f:cb:be:4a:20:4c:ba:
         1a:ff:75:02:72:fa:ab:09:ea:54:e6:0e:0f:40:d6:e3:d6:e8:
         a0:74:62:38:59:1a:f8:ec:5f:38:70:56:95:d4:1b:27:cd:4d:
         fc:11:00:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:26:09 2024 by rpki-client on console-fra.rpki-client.org