Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/BC69DF32B33E11EDAA6D117BC4F9AE02.roa
File:                     BC69DF32B33E11EDAA6D117BC4F9AE02.roa (raw, json)
Hash identifier:          tWiV1Cxri+u6b46hgm3niMgNT1c5YYbGYRo4BMmv1zQ=
Subject key identifier:   49:E5:72:60:62:42:49:8F:E5:2A:84:09:07:05:53:87:10:F3:0B:96
Certificate issuer:       /CN=A91EA6C6/serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B
Certificate serial:       62
Authority key identifier: 71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/BC69DF32B33E11EDAA6D117BC4F9AE02.roa
Signing time:             Wed 23 Aug 2023 04:44:30 +0000
ROA not before:           Wed 23 Aug 2023 04:44:30 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     150131
IP address blocks:        103.191.160.0/23 maxlen: 24
                          2001:df1:5c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl
                          rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 May 2024 05:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA6C6/serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B
        Validity
            Not Before: Aug 23 04:44:30 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64e58eae-fff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:19:e0:52:a8:68:1a:0d:d3:2a:b4:e1:4d:ce:
                    8a:45:2d:de:aa:a7:bb:d5:b0:ea:95:2d:2b:4f:a5:
                    73:b7:d0:df:5c:6d:e7:7e:c5:b6:d3:18:a4:28:a2:
                    c0:5f:c6:7c:c0:61:60:ad:b5:03:5f:8e:db:94:52:
                    37:d5:f4:13:42:eb:f0:69:74:ed:d9:e2:07:9d:68:
                    1e:69:6b:d0:c6:51:7e:3b:74:72:26:d7:85:c4:af:
                    c0:3a:83:95:f7:b4:d2:7f:a9:17:4a:bd:0d:d9:f9:
                    d9:30:63:49:3e:be:2b:75:a6:20:26:18:24:ee:66:
                    34:10:f2:cc:94:e2:15:bf:bf:ce:bd:4a:7a:d9:04:
                    27:40:95:1f:fc:ee:48:26:48:6f:56:6c:65:b2:1d:
                    78:cf:e6:d8:a8:ee:66:59:3c:54:4a:3e:07:74:63:
                    22:45:2c:88:5d:49:dd:b3:e3:07:76:98:5a:e4:18:
                    d4:a2:b2:42:ef:1d:59:a5:67:e7:44:0d:93:ec:a7:
                    68:be:f0:0c:5a:da:22:d6:09:ca:1c:91:5c:fb:c3:
                    30:0d:53:61:b5:86:2d:4d:5c:6a:24:48:23:44:07:
                    aa:bf:34:90:11:03:fc:ba:5b:27:e8:a1:7e:7f:40:
                    e2:27:0c:62:34:bb:29:3d:6d:55:a6:c4:fd:fd:2e:
                    bf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E5:72:60:62:42:49:8F:E5:2A:84:09:07:05:53:87:10:F3:0B:96
            X509v3 Authority Key Identifier:
                keyid:71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/BC69DF32B33E11EDAA6D117BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.160.0/23
                IPv6:
                  2001:df1:5c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:65:68:b5:31:08:c2:64:4e:b9:86:07:24:b8:ec:3a:8d:aa:
         3a:ce:8e:a0:a4:1b:d8:64:c6:cf:11:b1:0f:32:97:40:34:cc:
         60:7c:c3:d8:c5:66:b3:ea:ea:04:ab:80:d0:ad:53:f8:97:b7:
         9b:12:0f:a8:f8:d6:0e:eb:63:27:61:5e:1f:19:74:a1:7d:ed:
         af:f9:dc:5c:33:2b:af:31:ae:e9:48:8a:00:1c:94:b2:5e:8a:
         c7:9d:c5:d4:fe:5c:ba:2a:29:8e:ab:a0:be:02:1f:29:90:9f:
         0b:61:76:8f:fc:21:1a:03:88:17:01:ac:57:fe:c0:b1:d8:33:
         80:36:33:09:e4:8b:ea:a1:ee:80:1d:56:8b:18:15:96:c3:af:
         78:68:17:ed:fe:e6:27:7d:de:04:86:42:33:f2:f6:22:11:93:
         a7:80:a2:f0:9b:0b:91:4c:36:31:07:59:5a:99:16:e8:88:ca:
         d3:dc:64:e1:b0:71:67:fb:a7:91:a9:17:1d:b4:42:7a:03:d2:
         9c:4f:16:b8:ca:7f:b3:26:92:d3:53:92:12:26:07:0b:a1:65:
         1e:c0:d9:b7:ac:72:78:f9:e5:c2:e8:40:d5:c5:1a:0b:79:87:
         da:09:49:7b:f2:cc:a7:6b:4c:f5:38:96:16:34:da:77:f4:59:
         7b:a9:3f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 06:39:48 2024 by rpki-client on console-fra.rpki-client.org