Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/FA07C7FAC3E711ED97AAC038C4F9AE02.roa
File:                     FA07C7FAC3E711ED97AAC038C4F9AE02.roa (raw, json)
Hash identifier:          kdcQORxOazOv3d/psZbVYLp347mdF2gbZSdta1IYMGM=
Subject key identifier:   1F:53:A0:4D:DC:50:85:75:FA:10:D6:C1:74:EB:AE:08:DF:EB:EF:B6
Certificate issuer:       /CN=A91F81D3/serialNumber=5E99D7087DD54EA2E7E75F5C8087071383E8B29E
Certificate serial:       0A08
Authority key identifier: 5E:99:D7:08:7D:D5:4E:A2:E7:E7:5F:5C:80:87:07:13:83:E8:B2:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/FA07C7FAC3E711ED97AAC038C4F9AE02.roa
Signing time:             Tue 16 Apr 2024 20:59:38 +0000
ROA not before:           Tue 16 Apr 2024 20:59:38 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     30823
IP address blocks:        103.148.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.crl
                          rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2568 (0xa08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F81D3/serialNumber=5E99D7087DD54EA2E7E75F5C8087071383E8B29E
        Validity
            Not Before: Apr 16 20:59:38 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=661ee6ba-63cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c0:cc:cc:ad:13:1f:65:79:d6:7d:9c:88:ef:
                    1a:c7:91:da:c4:51:78:17:b1:55:e6:d2:b2:f5:68:
                    2e:2e:f8:05:c7:df:7c:76:8b:b9:be:e4:d7:a0:75:
                    9d:24:cd:5a:5b:55:35:f4:a4:82:a6:94:99:84:e5:
                    dd:4f:d9:6a:9c:62:50:d4:d9:02:1d:fd:1f:1d:1b:
                    1e:8f:20:80:d3:f6:9f:13:78:2d:a8:e3:be:29:71:
                    9d:cb:1d:eb:7a:48:81:43:f8:1a:cc:28:f5:d7:96:
                    fa:48:d2:ec:8c:09:01:c7:47:9f:cd:a4:2e:67:e8:
                    1a:b8:65:54:a3:83:5b:5a:49:1c:64:5d:1c:50:ee:
                    da:77:4a:b5:a2:d9:56:79:7b:81:a9:7a:0a:fc:b3:
                    55:92:25:dd:82:4b:18:0e:19:ef:44:a6:b3:43:b4:
                    94:63:fe:0b:72:0e:4f:af:92:5d:d8:99:42:a4:ca:
                    b3:37:ef:d3:7a:56:7c:f4:cc:8f:cd:23:d6:4f:b0:
                    ec:6c:64:6a:7b:0f:86:8d:27:6b:9b:ca:ee:4b:72:
                    e7:1b:96:d7:5f:49:27:76:6e:65:24:58:4b:f6:a8:
                    d2:6e:1a:8a:c6:50:f7:fa:64:5d:c7:53:85:72:61:
                    41:32:0c:a3:89:16:c0:cc:59:fc:45:e9:7e:d4:fd:
                    25:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:53:A0:4D:DC:50:85:75:FA:10:D6:C1:74:EB:AE:08:DF:EB:EF:B6
            X509v3 Authority Key Identifier:
                keyid:5E:99:D7:08:7D:D5:4E:A2:E7:E7:5F:5C:80:87:07:13:83:E8:B2:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/FA07C7FAC3E711ED97AAC038C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:91:16:e6:c0:4d:3c:e6:b0:cb:17:f2:55:3e:45:e3:81:e7:
         20:b9:3f:7c:38:88:f8:5e:8f:e3:06:88:99:58:46:8f:9f:36:
         fb:a9:c2:73:c3:e4:17:eb:6c:7f:d2:3e:38:8e:0a:d5:53:d3:
         0a:c1:b5:7e:53:9a:27:c9:8b:0d:9c:d0:2a:da:c5:45:8f:71:
         bd:ef:76:04:b6:2f:a9:f4:0c:b8:7f:89:51:da:75:07:e7:80:
         1b:37:5c:65:72:d8:98:27:9a:76:a9:50:51:7f:a3:d2:b6:8c:
         79:07:80:fc:fe:98:21:2b:4b:c0:8c:64:5e:f8:d4:a4:cb:47:
         f3:99:c9:14:97:fa:75:80:58:00:7d:95:b6:63:a3:12:48:36:
         1d:89:78:64:a8:35:4b:94:df:ea:22:4b:dd:76:5e:0c:a6:7e:
         69:3c:a3:b6:53:bb:62:d3:d6:9a:af:19:83:fe:f3:71:b3:ba:
         b7:56:e8:41:33:3a:ce:b1:98:df:ec:31:ff:3a:a8:8c:a4:6f:
         9c:9a:f2:cb:18:52:39:d6:cf:b3:c4:2e:84:11:b4:1e:8e:4e:
         c8:f4:ae:33:f1:5f:d2:94:52:83:c0:c0:0b:90:5a:9b:4d:d7:
         77:6c:8f:29:64:c5:1c:f3:1c:34:65:41:dd:df:99:a0:7c:d7:
         ab:2d:fb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:35:05 2024 by rpki-client on console-ams.rpki-client.org