Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/4FF82F28045E11EDB581B43EC4F9AE02.roa
File:                     4FF82F28045E11EDB581B43EC4F9AE02.roa (raw, json)
Hash identifier:          X/iupfoaml8hcebc5qQYJhHfQRJpbcfR9nZK+THvna4=
Subject key identifier:   E8:65:6E:66:B1:0F:F3:E4:12:67:75:F5:FF:81:34:CF:61:B6:65:12
Certificate issuer:       /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Certificate serial:       047D
Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/4FF82F28045E11EDB581B43EC4F9AE02.roa
Signing time:             Mon 05 Jun 2023 02:40:02 +0000
ROA not before:           Mon 05 Jun 2023 02:40:02 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     59436
IP address blocks:        103.167.134.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
                          rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 May 2024 00:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1149 (0x47d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
        Validity
            Not Before: Jun  5 02:40:02 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=647d4b01-6d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:a8:dd:68:07:2c:4a:95:83:17:f8:ea:24:
                    94:2d:f1:61:29:7f:3a:c2:f9:d1:44:a0:e0:3d:77:
                    ed:5c:1a:75:e6:b4:04:f9:c7:fb:41:4e:50:6a:e9:
                    61:8a:50:3e:94:49:c1:a2:7f:cc:97:8c:58:6f:a6:
                    9f:c2:56:97:79:3e:13:ce:96:a5:cc:4f:f3:77:92:
                    f3:db:9f:f1:31:22:19:07:38:ea:8d:b4:2e:68:1f:
                    7d:24:63:57:ae:d6:fc:cc:22:de:b8:d0:48:ae:8f:
                    61:56:1f:b0:8d:c1:f4:9b:f2:69:95:14:dc:11:54:
                    79:a4:2c:70:20:cf:74:47:97:ab:61:ee:2f:2d:5b:
                    09:82:44:d7:c8:df:d2:9c:e1:29:72:bc:a7:68:fe:
                    02:49:4b:d4:18:8d:8f:d2:27:1c:a1:91:f2:42:cb:
                    03:47:0f:a5:95:61:9b:c0:c5:45:cd:c3:f1:fe:a7:
                    17:55:66:14:69:58:b7:cf:2f:7d:5f:3e:96:e8:3e:
                    4d:c6:28:c5:b9:4b:f8:a2:bc:b0:63:cc:c1:56:fd:
                    a9:f6:90:db:5f:ad:84:9b:54:95:6d:a9:97:0d:93:
                    e0:a5:30:9c:3c:06:58:f8:93:7f:a4:7b:4d:17:cc:
                    47:7a:ca:1e:59:93:b4:cb:98:77:1a:65:3a:d4:5e:
                    ab:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:65:6E:66:B1:0F:F3:E4:12:67:75:F5:FF:81:34:CF:61:B6:65:12
            X509v3 Authority Key Identifier:
                keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/4FF82F28045E11EDB581B43EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:53:d3:5f:08:33:6b:5f:f3:f5:8b:c9:3b:17:70:08:68:3d:
         43:19:49:28:d5:cb:ff:20:95:ee:f6:51:2a:30:7a:c1:69:16:
         8d:d7:6c:8e:4c:0c:6d:5f:89:01:bb:12:8c:cf:7b:1b:19:f3:
         fd:3d:41:f2:40:01:f5:5a:7c:66:7d:f4:dc:42:6a:a2:cd:ce:
         88:32:23:bd:f2:b9:8f:7e:7b:d7:c9:16:f2:02:9f:1f:e0:c3:
         d0:ec:71:cb:13:e2:03:d2:93:43:2e:17:e6:f8:1d:71:52:2e:
         60:fb:de:60:40:2e:98:73:08:79:0d:66:e8:f7:31:3c:5e:05:
         e0:57:e8:e7:4e:ef:c6:1c:c5:55:97:a7:2e:90:50:89:4e:52:
         5b:5c:4a:e7:57:db:55:81:2b:00:f8:b5:f8:7c:81:47:06:83:
         d7:32:2f:48:75:87:d3:7b:cd:20:0b:d0:d4:e3:a4:87:eb:27:
         9e:f5:77:a9:55:b6:d6:a6:ef:10:59:1a:b6:4a:39:ec:b5:c9:
         ab:e3:10:9e:10:cf:e6:f0:2e:d3:da:4b:45:3a:e0:8e:ef:95:
         31:d5:38:5f:e7:c2:4d:41:90:fd:08:96:a6:95:46:12:03:62:
         6a:fb:7a:c3:35:98:83:64:12:62:9c:ef:24:9b:5f:cb:03:4a:
         25:ba:90:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 01:50:55 2024 by rpki-client on console-ams.rpki-client.org