Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/5741EB0A159311EFA0CC790BC4F9AE02.roa
File:                     5741EB0A159311EFA0CC790BC4F9AE02.roa (raw, json)
Hash identifier:          jE4GzHd14AerZws/zq+eZy5XQS34aDVO012G4f0K8Tw=
Subject key identifier:   EF:5E:42:46:8B:E3:04:6A:63:06:73:01:02:62:F6:80:E6:ED:F3:56
Certificate issuer:       /CN=A91E1511/serialNumber=DBDBB77FB8145E9D4486074FB73EF84D548EA622
Certificate serial:       03
Authority key identifier: DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/5741EB0A159311EFA0CC790BC4F9AE02.roa
Signing time:             Sun 19 May 2024 03:53:24 +0000
ROA not before:           Sun 19 May 2024 03:53:24 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     136399
IP address blocks:        103.160.10.0/23 maxlen: 23
                          2401:a020::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.crl
                          rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Oct 2024 05:38:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1511/serialNumber=DBDBB77FB8145E9D4486074FB73EF84D548EA622
        Validity
            Not Before: May 19 03:53:24 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=664977b4-1687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2d:cd:f0:6b:51:ce:2c:95:51:27:3b:fa:12:
                    80:8d:cf:ed:09:4a:c0:52:64:9f:fe:76:6c:b6:5a:
                    96:a7:97:79:0c:9e:ce:27:46:b9:0c:c8:9e:71:93:
                    f9:04:1e:90:f4:00:d5:82:59:93:0d:11:9d:e5:3f:
                    4f:aa:23:a5:9a:0f:94:50:bb:e0:82:72:55:c5:85:
                    23:2a:4a:57:d5:7d:6c:b9:ef:01:f6:2e:d8:05:45:
                    7f:51:92:55:45:5a:0e:76:c7:f1:5c:61:db:35:7e:
                    bf:8e:b3:68:0d:66:77:09:28:57:b7:12:8b:70:cf:
                    6a:f2:d6:25:50:3e:14:7b:35:4e:ed:38:3a:c1:71:
                    fa:fc:6f:34:8a:44:ad:90:e9:ee:85:29:3a:8a:26:
                    07:25:56:9d:4c:d2:4b:5c:07:31:d3:3e:75:2e:51:
                    5e:b5:8d:bf:3d:ee:94:3a:04:6d:e0:41:d9:c7:3d:
                    c0:5f:10:1b:85:db:ff:c9:55:c0:d0:52:85:f9:c4:
                    35:be:06:3c:a9:28:a0:ec:47:e4:39:aa:74:b7:67:
                    c4:b8:03:04:b0:8f:af:9a:a8:4d:91:01:66:fc:3d:
                    8c:83:d9:30:28:f5:fc:12:d6:45:01:06:a6:4d:06:
                    3b:12:c3:f6:dc:8d:54:7e:41:11:0c:55:ee:17:9b:
                    d1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5E:42:46:8B:E3:04:6A:63:06:73:01:02:62:F6:80:E6:ED:F3:56
            X509v3 Authority Key Identifier:
                keyid:DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/5741EB0A159311EFA0CC790BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.10.0/23
                IPv6:
                  2401:a020::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:2f:c9:30:9f:e3:2e:fb:5b:0a:9c:e8:b8:57:59:93:8b:7b:
         f1:9e:9b:35:91:4b:7e:a1:36:f8:03:03:1d:49:16:f7:0e:e4:
         d1:cd:4b:95:a4:45:b2:0d:7d:eb:84:79:cc:65:39:69:9d:7a:
         36:75:3b:54:04:94:41:c7:56:61:80:27:89:b1:45:fe:86:98:
         7b:ef:2b:45:80:a3:c2:d1:a6:03:d0:57:6c:74:33:a3:dc:e8:
         05:f4:a3:71:4f:1d:f8:4b:70:d9:06:c0:17:cd:9f:93:1e:59:
         3d:5b:48:bd:ff:43:02:3c:d4:7a:6b:70:d1:0f:93:8f:ef:64:
         a6:b5:39:ab:64:7c:cf:58:a0:05:8d:e8:fe:4d:b7:36:26:53:
         55:97:bb:5e:f3:b5:da:fb:44:10:30:ca:79:a6:75:ae:4d:6d:
         95:69:b5:40:97:08:ca:aa:0e:f3:2b:c5:c5:23:52:1a:1b:32:
         5f:88:a5:87:dd:87:24:ce:ea:ec:67:aa:66:e2:0f:7e:7b:a3:
         30:70:65:17:ff:f0:6f:08:bf:e3:9e:29:3c:c0:5d:3e:fd:2a:
         e0:f5:f4:31:23:e5:95:06:9b:5e:e3:0a:52:ad:f0:c9:7a:a6:
         76:2c:69:fa:1a:9b:38:21:51:5b:ff:47:ca:4c:8f:3f:68:79:
         f2:45:0d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 08:06:29 2024 by rpki-client on console-ams.rpki-client.org