Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/7236C4D8513211EEA8D81765C4F9AE02.roa
File:                     7236C4D8513211EEA8D81765C4F9AE02.roa (raw, json)
Hash identifier:          ZZYkG0rN+pICOhz09TrHJ/M/KfssTlJ7hgwatztFUEg=
Subject key identifier:   92:A9:4B:8E:16:97:5E:27:83:68:90:BB:43:0B:A3:1C:CE:9F:A6:6C
Certificate issuer:       /CN=A913C04E/serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B
Certificate serial:       CC
Authority key identifier: AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/7236C4D8513211EEA8D81765C4F9AE02.roa
Signing time:             Tue 01 Oct 2024 04:48:19 +0000
ROA not before:           Tue 01 Oct 2024 04:48:19 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     141343
IP address blocks:        103.157.66.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl
                          rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C04E/serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B
        Validity
            Not Before: Oct  1 04:48:19 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=66fb7f12-ee65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e4:db:cc:6f:92:7c:f5:45:e9:69:db:66:b9:
                    63:cb:ab:2a:7d:37:96:14:22:1a:b8:00:0c:e2:04:
                    c6:6a:fa:a2:c4:bc:af:11:7d:36:fd:38:e1:7b:33:
                    0b:0b:c6:62:9e:ba:d0:4e:fe:5c:af:21:3d:d7:af:
                    bd:74:b8:cf:ce:37:a2:32:36:77:27:ee:5c:7a:af:
                    e4:02:27:ce:d3:8f:42:6e:69:b3:e3:00:de:fd:8e:
                    45:89:a7:b2:b1:6b:38:a6:5d:08:9d:a7:96:ec:e9:
                    c5:28:1d:ef:b1:93:0a:35:8b:88:c2:88:87:f1:fc:
                    d5:b2:58:60:7b:b7:7f:a8:1f:9c:ef:71:4d:48:c2:
                    f8:07:31:66:38:df:b4:df:af:8c:56:fd:dd:2b:02:
                    2c:6f:30:db:10:42:ca:71:ed:29:4d:c3:01:3b:5d:
                    c0:29:df:66:6f:76:17:3f:84:1d:16:5f:02:be:9e:
                    2b:27:76:90:6a:80:94:0b:88:2b:92:a2:1e:98:e5:
                    a0:8c:64:fc:87:ad:46:ce:69:09:ef:6a:c7:74:48:
                    f2:b2:5e:1c:4a:47:81:c6:5c:f5:a2:f0:84:4d:ff:
                    42:de:ca:21:d3:b9:e6:dc:46:a1:95:d1:34:f2:c6:
                    27:fc:21:fc:8f:da:f5:39:06:90:aa:ef:46:11:99:
                    92:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A9:4B:8E:16:97:5E:27:83:68:90:BB:43:0B:A3:1C:CE:9F:A6:6C
            X509v3 Authority Key Identifier:
                keyid:AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/7236C4D8513211EEA8D81765C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:53:ba:65:56:51:f9:d0:8b:89:14:eb:93:0b:33:2d:4b:ec:
         33:79:a9:8b:47:15:95:2c:6a:79:c8:dd:c8:03:02:fc:1a:4b:
         b7:7b:0c:45:e5:2b:3c:fe:bf:d1:36:2f:b0:d8:71:2a:05:22:
         47:8a:39:03:09:2e:8b:ad:a4:2d:0b:8c:4a:dc:0f:eb:9f:92:
         39:c7:67:43:a7:42:1c:cd:bd:77:18:4a:b8:36:88:20:9c:66:
         f3:d0:84:b7:7f:43:0b:09:69:d5:61:11:43:7f:c4:8b:f6:86:
         19:56:3a:db:31:de:70:5d:17:90:ec:58:88:b7:4e:1c:de:d8:
         83:3a:60:70:6e:3e:3b:8f:ce:c7:2d:79:35:54:b7:21:ec:f7:
         22:97:cc:c3:8e:d7:94:a7:35:32:e6:ca:bb:e7:c0:85:12:ed:
         a1:d4:f7:47:5c:c8:1c:9e:1c:f2:33:de:6c:c9:2f:c6:60:05:
         ad:9f:a8:19:fa:08:94:4e:21:22:7b:de:86:50:6d:59:dc:fd:
         12:d1:f4:90:2f:24:6f:91:d9:50:f0:27:30:ca:4f:2b:bf:af:
         b1:21:20:be:8f:01:e3:91:7d:3d:aa:50:73:c4:2a:69:11:5d:
         1b:ba:0d:cc:5b:5f:3c:56:e0:14:e9:67:0f:6f:d6:bf:20:ce:
         5c:14:d3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:05 2024 by rpki-client on console-ams.rpki-client.org