Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/4153181E1D4211ED99608059C4F9AE02.roa
File:                     4153181E1D4211ED99608059C4F9AE02.roa (raw, json)
Hash identifier:          bo3M0SHEmY6fxlknnF6CrnoZr8k2yntFb0qjHa/esME=
Subject key identifier:   2B:7E:2B:10:8E:9E:95:10:38:8C:F8:73:13:6B:90:19:03:AA:62:E4
Certificate issuer:       /CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04
Certificate serial:       017F
Authority key identifier: 11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/4153181E1D4211ED99608059C4F9AE02.roa
Signing time:             Fri 16 Sep 2022 16:23:50 +0000
ROA not before:           Fri 16 Sep 2022 16:23:50 +0000
ROA not after:            Mon 01 May 2028 00:00:00 +0000
asID:                     132599
IP address blocks:        103.16.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04
        Validity
            Not Before: Sep 16 16:23:50 2022 GMT
            Not After : May  1 00:00:00 2028 GMT
        Subject: CN=6324a316-9175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6a:99:aa:c8:2a:fe:66:a5:26:9b:e0:7b:59:
                    13:c2:6c:b6:3f:87:33:f8:16:2b:b5:61:9b:5f:92:
                    dc:09:51:27:0b:a1:10:29:e1:ab:6e:22:a8:4c:fe:
                    23:c3:95:da:cc:c7:03:72:d7:79:1c:a9:e6:54:55:
                    ee:fc:18:61:b8:2c:6a:a0:c1:33:40:7b:84:3a:57:
                    3a:5e:54:28:21:1f:84:18:ff:0b:ad:2f:ca:a8:ff:
                    7b:b6:4b:68:5b:23:c6:f5:da:db:29:d3:47:f4:23:
                    92:32:b1:1e:ff:2f:c0:cc:e4:4a:3b:0a:9f:a4:ff:
                    ea:27:d5:87:d6:26:de:c2:0b:00:f6:25:20:b4:73:
                    14:c4:96:75:94:1b:f1:6c:b0:22:0f:fc:14:36:f6:
                    6d:23:27:fe:41:31:71:40:08:3b:a5:8a:92:03:db:
                    17:7b:ee:6b:9a:01:76:bf:45:fb:ee:ed:f7:6a:50:
                    6a:2d:e7:35:52:58:bd:e4:ca:2b:f0:9a:d2:e9:bc:
                    ac:d7:a5:a2:e8:bb:6d:fe:c2:b9:64:9c:85:7d:85:
                    37:4c:78:25:6d:11:2e:ed:20:fb:7a:a7:f2:64:4d:
                    f9:5e:f1:5d:4f:9a:db:f8:e8:32:64:c3:38:ee:7b:
                    86:33:cb:bd:c7:92:69:a3:a5:46:42:be:f6:28:08:
                    18:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7E:2B:10:8E:9E:95:10:38:8C:F8:73:13:6B:90:19:03:AA:62:E4
            X509v3 Authority Key Identifier:
                keyid:11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/4153181E1D4211ED99608059C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:78:27:1d:d6:79:27:37:f7:aa:1e:fe:ef:0b:5d:1d:ed:a7:
         45:93:3d:91:75:99:e6:26:20:1c:cc:ac:28:35:82:eb:fe:b0:
         75:a1:ee:0a:ce:8c:c5:2d:ad:c1:69:95:b9:d1:a3:04:5d:37:
         96:f4:a7:e2:f6:25:10:7d:71:82:f5:08:cb:0b:b5:1c:d7:d1:
         45:74:8a:51:fb:39:17:62:ff:e1:1d:da:b9:25:15:4b:1f:8c:
         25:31:13:d6:84:b9:44:65:79:b9:57:22:bd:6d:11:ea:41:80:
         7d:dd:61:1b:f5:78:5f:e7:84:75:a7:1e:db:9d:20:34:cb:fb:
         12:0d:39:a1:b1:9a:2e:8b:39:45:e7:ab:b1:77:13:5f:3e:5c:
         c7:fb:87:2c:5f:36:44:08:e6:c5:d0:d4:c0:67:de:85:a8:a8:
         85:a6:d6:d9:cf:29:fb:ba:95:43:67:80:fd:6c:73:49:2b:24:
         f2:a9:e2:d4:46:0c:f2:30:e3:1e:3d:e8:1e:dc:6d:e4:69:ae:
         bb:2d:18:55:81:15:24:e5:de:1e:f6:34:89:fe:15:3b:14:98:
         4e:1d:e6:8d:e1:6a:2a:a5:1e:c5:15:11:cf:4f:1d:ac:77:19:
         d9:68:73:c0:5e:c0:19:1d:fc:ca:c8:66:72:4a:17:22:c3:86:
         56:bd:bd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:52 2024 by rpki-client on console-fra.rpki-client.org