Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/E989DE0C1E2E11EFB8D12A2BC4F9AE02.roa
File:                     E989DE0C1E2E11EFB8D12A2BC4F9AE02.roa (raw, json)
Hash identifier:          YYQgusC6hV6lCIy0+UZyBQsfZksmuMBdbmE+AEbFmxc=
Subject key identifier:   B5:E0:13:29:0B:37:ED:F7:D6:A6:14:6C:53:EA:AE:FF:96:4D:56:2C
Certificate issuer:       /CN=A91EEAD3/serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0
Certificate serial:       04
Authority key identifier: 37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/E989DE0C1E2E11EFB8D12A2BC4F9AE02.roa
Signing time:             Thu 30 May 2024 05:41:12 +0000
ROA not before:           Thu 30 May 2024 05:41:12 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     134456
IP address blocks:        103.160.60.0/23 maxlen: 23
                          103.160.60.0/24 maxlen: 24
                          103.160.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl
                          rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEAD3/serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0
        Validity
            Not Before: May 30 05:41:12 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=66581177-90fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d0:75:37:77:76:db:e3:cc:30:1c:2d:07:76:
                    7e:43:8b:2f:d2:35:91:63:44:9b:b6:09:12:d9:1e:
                    3a:eb:d7:34:f6:ab:ae:e6:36:e7:d8:fe:f1:27:b1:
                    cc:a5:80:5a:b1:95:b6:a4:40:07:32:ba:84:b9:d2:
                    da:77:66:5e:61:e4:48:9f:93:4f:bd:fe:a0:ba:9e:
                    50:97:9d:c5:ed:cd:e6:d6:e1:80:82:02:7b:c7:bc:
                    b2:b9:5c:0a:a3:4e:6a:76:0d:2f:f9:5b:6b:f2:2a:
                    7b:a6:29:88:d6:d8:9b:c8:6f:12:3c:48:40:f7:16:
                    94:6a:39:26:16:7e:d5:e8:66:c5:fd:3e:05:0f:ca:
                    9b:75:f3:61:fd:a2:67:80:f4:40:ee:ab:6c:6d:42:
                    ef:bd:c9:79:f3:ed:1d:6c:11:df:b6:5d:9e:e6:8a:
                    93:c1:d4:97:a0:4a:4f:31:40:1a:c9:22:a6:ab:51:
                    1b:d2:3c:db:31:f7:04:3c:f8:a1:eb:80:80:29:16:
                    0e:29:01:83:49:b9:7c:20:86:23:23:c2:e6:23:70:
                    0a:35:4e:00:28:21:30:5e:7f:3f:6b:df:be:5e:c5:
                    95:ba:aa:e4:97:72:8a:05:0d:9b:28:ec:56:2a:32:
                    6e:05:e5:e9:dd:27:20:45:ae:d5:99:31:1b:a2:6b:
                    b2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E0:13:29:0B:37:ED:F7:D6:A6:14:6C:53:EA:AE:FF:96:4D:56:2C
            X509v3 Authority Key Identifier:
                keyid:37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/E989DE0C1E2E11EFB8D12A2BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:28:b2:eb:f6:f2:81:f9:bb:90:ff:0c:54:07:88:07:51:0e:
         41:9e:4b:c3:10:d4:d8:61:a0:bc:7a:8c:b2:bb:c3:87:99:03:
         dd:a3:7e:03:de:bd:27:f1:5d:1e:db:ca:92:7e:d2:ce:66:71:
         1f:b6:d6:32:b1:d5:20:e2:a7:ff:cf:a9:c0:f5:37:d4:f3:2c:
         9e:fb:8c:00:b2:a4:de:b5:cf:73:ef:a0:99:80:66:39:47:2d:
         99:d1:b0:b1:63:c3:a6:40:c3:13:26:05:e6:61:3d:fa:2c:61:
         2d:cf:0e:4a:20:04:49:4b:52:75:b7:d1:03:97:5a:7e:29:48:
         5f:77:ce:fc:4c:b0:af:ab:5b:e5:ae:9b:70:b4:bc:19:67:94:
         86:36:7d:37:70:57:f8:7a:0d:16:81:6e:7d:f4:ae:32:aa:3c:
         e0:cf:36:a2:52:a6:84:51:39:20:eb:80:28:74:8f:a2:ba:f2:
         0f:71:30:50:41:1f:24:f1:11:ca:d0:09:f6:b7:3f:65:49:96:
         39:72:50:03:71:e6:95:ec:34:4f:93:5f:6a:97:92:02:96:84:
         5f:b5:8b:7a:cb:a8:0d:1d:90:08:02:48:e4:1e:f4:63:87:04:
         21:85:a6:72:b3:a6:0a:55:07:90:39:85:93:13:0d:c4:de:de:
         fa:74:ec:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:31 2024 by rpki-client on console-fra.rpki-client.org