Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/F4740B2CB92711EBA6B43A86C4F9AE02.roa
File:                     F4740B2CB92711EBA6B43A86C4F9AE02.roa (raw, json)
Hash identifier:          NK+l5m2ta776fmuAwfuzwnZ0hG3yotAbqESNUgO6JqU=
Subject key identifier:   C7:B8:D4:3B:0B:0D:3D:38:99:55:0C:BA:5A:33:93:85:4E:6A:D6:CC
Certificate issuer:       /CN=A91D5ECA/serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27
Certificate serial:       0479
Authority key identifier: FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/F4740B2CB92711EBA6B43A86C4F9AE02.roa
Signing time:             Sun 09 Jul 2023 00:00:12 +0000
ROA not before:           Sun 09 Jul 2023 00:00:12 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     142271
IP address blocks:        103.167.66.0/24 maxlen: 24
                          2400:c3e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl
                          rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1145 (0x479)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5ECA/serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27
        Validity
            Not Before: Jul  9 00:00:12 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64a9f88b-66b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a0:70:a5:da:a6:c6:01:74:34:87:41:bb:13:
                    86:1b:68:22:cb:84:93:99:da:4b:ce:56:af:5e:d7:
                    fb:fb:b9:a9:33:92:c6:84:a1:87:9a:d3:e3:5d:29:
                    87:1d:36:0f:5b:c4:5a:ec:51:25:89:fd:4a:45:10:
                    93:da:b2:cb:b8:96:2f:00:92:eb:5f:19:9b:b9:70:
                    d9:f2:fa:31:2c:1c:be:6e:b7:10:36:58:4c:a7:d8:
                    62:f8:e3:a6:71:6a:06:8d:d9:8d:a9:67:ea:e3:22:
                    c6:ba:7c:b3:2f:8e:ff:4a:69:64:c8:f7:58:3a:37:
                    c7:6c:ab:44:58:50:59:10:ea:69:39:0f:fc:91:8f:
                    95:5b:29:a1:e0:06:57:37:10:70:8d:75:7c:c3:db:
                    b2:d5:82:2d:e8:96:58:09:ad:0e:9e:89:26:67:66:
                    9b:53:7e:da:f2:71:f1:a2:c8:37:71:01:62:b1:f8:
                    7e:5c:d4:e7:8b:63:e1:03:66:7d:df:ae:dc:f1:91:
                    d5:74:0d:2d:c1:0f:52:72:18:01:3b:5d:db:95:43:
                    95:8c:bd:d9:de:2f:43:38:e8:e3:b6:53:7b:ec:65:
                    b9:49:4d:64:dc:c2:0f:87:30:eb:16:83:d3:28:1b:
                    96:8d:cc:4d:f3:ea:23:5e:1e:39:f1:3f:16:53:4e:
                    9e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B8:D4:3B:0B:0D:3D:38:99:55:0C:BA:5A:33:93:85:4E:6A:D6:CC
            X509v3 Authority Key Identifier:
                keyid:FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/F4740B2CB92711EBA6B43A86C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.66.0/24
                IPv6:
                  2400:c3e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:17:c1:6f:48:c7:f4:ef:9e:ab:d4:33:a7:8f:33:29:9a:74:
         d8:15:b6:19:7d:e2:ea:85:ec:15:a1:f5:79:2f:ed:20:30:d8:
         78:2d:1c:14:7a:f3:3f:ee:39:ae:e6:12:8f:fc:d2:9d:fc:ce:
         e1:15:06:65:56:c4:0f:e2:92:16:df:60:0b:a1:7e:04:18:4e:
         4f:b7:67:b6:b8:8d:6d:4e:f4:21:10:9f:78:07:cd:80:33:7d:
         7e:48:a9:d4:a8:7e:6d:69:6e:88:52:dc:b7:b1:ad:a7:37:e4:
         f7:11:90:a1:e1:01:6f:84:ca:7d:ae:f5:eb:cf:01:36:53:b2:
         df:fa:0f:8d:86:b2:79:5e:ad:26:f7:71:8e:37:e3:e4:96:35:
         04:4a:a3:d8:45:8e:b8:40:d7:5b:73:6e:1d:73:4e:44:5c:71:
         bc:3a:b5:50:ea:c0:a3:27:14:91:ed:d0:fd:99:55:46:c1:b2:
         51:ac:23:cb:55:de:51:d8:4f:e9:fa:19:a1:aa:93:72:7f:10:
         15:d6:8f:15:04:29:06:78:d6:1a:b4:17:10:b4:5e:7e:b5:b1:
         bb:7c:a6:0a:0a:18:fa:75:85:32:cc:b3:b8:3f:34:9e:51:dd:
         4c:4d:a5:8c:a1:d8:4e:ec:63:70:4e:df:c8:08:46:69:14:cb:
         7f:92:2a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:47:19 2024 by rpki-client on console-fra.rpki-client.org