Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/90D6EB20DF5811EE9A25765FC4F9AE02.roa
File:                     90D6EB20DF5811EE9A25765FC4F9AE02.roa (raw, json)
Hash identifier:          IbdaHFfeEoQaUZaW7ARqIDcFtCSyxpUy30pPQAG7s/E=
Subject key identifier:   2D:A7:F4:38:A8:57:AB:CC:CF:97:3B:B7:51:A4:41:E4:70:C4:87:2E
Certificate issuer:       /CN=A9158322/serialNumber=5AF345C222B09A555C7E6AA5A57361030B9317A6
Certificate serial:       08
Authority key identifier: 5A:F3:45:C2:22:B0:9A:55:5C:7E:6A:A5:A5:73:61:03:0B:93:17:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/90D6EB20DF5811EE9A25765FC4F9AE02.roa
Signing time:             Sun 17 Mar 2024 08:09:16 +0000
ROA not before:           Sun 17 Mar 2024 08:09:16 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     134066
IP address blocks:        103.50.164.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl
                          rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158322/serialNumber=5AF345C222B09A555C7E6AA5A57361030B9317A6
        Validity
            Not Before: Mar 17 08:09:16 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65f6a52c-9485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cb:cd:44:c8:e8:f8:e0:85:e1:da:ff:62:65:
                    e2:51:88:50:70:ff:81:9f:ff:11:ac:3b:c1:eb:05:
                    a4:0b:64:8a:0d:d6:01:59:02:aa:6e:43:a6:97:9e:
                    a0:c4:05:6e:20:03:24:50:f7:f5:f7:31:0c:f8:99:
                    50:91:f1:3c:f7:5a:d3:1e:7f:48:04:f8:c7:f3:36:
                    0f:02:fd:51:2f:29:00:c3:12:8c:1b:82:eb:e2:ca:
                    c9:73:fe:b1:19:be:5c:ad:41:8f:ff:19:f6:2c:b5:
                    5b:0a:6e:b9:e9:71:60:c7:89:de:61:1e:fa:a0:cc:
                    99:ec:76:65:45:e1:17:0b:25:9b:56:c9:bf:e9:29:
                    e6:93:8d:8d:26:b6:87:06:69:39:3c:09:5a:a8:bf:
                    21:68:3b:03:33:8a:8f:94:18:3e:a6:a3:ad:81:bb:
                    da:8e:f8:ba:1c:90:b1:40:06:5e:b3:70:71:8a:47:
                    bb:3b:cd:92:c9:3c:2a:9f:87:e0:23:ba:7c:2b:35:
                    e5:4e:5d:5f:be:d2:1a:3b:b5:30:e7:35:29:74:d8:
                    ff:2f:64:60:45:48:63:3b:6d:00:cc:51:53:e0:92:
                    a4:d3:af:d4:90:04:2e:a6:c3:5d:26:25:c3:d0:27:
                    e3:c2:db:15:28:70:59:d9:33:48:15:8f:89:78:ec:
                    83:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A7:F4:38:A8:57:AB:CC:CF:97:3B:B7:51:A4:41:E4:70:C4:87:2E
            X509v3 Authority Key Identifier:
                keyid:5A:F3:45:C2:22:B0:9A:55:5C:7E:6A:A5:A5:73:61:03:0B:93:17:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/90D6EB20DF5811EE9A25765FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:90:26:97:3f:60:76:22:9b:a0:1c:8c:f4:59:02:f5:b9:df:
         6e:5e:40:7a:38:c4:86:62:28:a9:16:cb:59:8b:47:53:ce:c7:
         fe:5a:b4:c4:0d:6c:86:1a:8b:91:75:27:1d:8b:0c:15:62:fd:
         10:41:67:5d:46:c2:cd:6f:7d:50:55:38:21:20:a3:fd:ad:ed:
         9b:b1:dc:f0:54:d0:96:c7:30:15:8b:0e:1d:79:02:ec:9e:e1:
         d1:8e:51:ca:7c:90:d4:37:da:dd:aa:4a:b6:96:e6:66:36:a2:
         82:0e:60:b3:3e:a8:4c:00:c0:cd:45:10:b9:98:24:5b:f6:9e:
         ef:53:de:21:9c:8e:cf:5c:f4:94:df:52:46:d9:84:66:af:ad:
         36:11:b9:a5:29:81:dd:94:f6:b2:f2:b3:0f:1c:f4:7d:c3:fa:
         ca:4e:42:a7:8f:3d:37:c3:7e:aa:e6:b5:5c:72:ea:cc:d5:d9:
         97:5a:90:50:ee:40:27:8e:0c:c7:7a:fe:45:aa:27:e0:c6:35:
         07:1c:0b:54:07:cc:96:c7:e0:f2:3d:1d:b8:bf:04:4b:c1:3a:
         cb:b3:bc:72:59:d8:01:60:9e:a3:78:1a:73:22:cf:8e:d1:f0:
         ed:fa:79:4d:80:92:11:90:da:52:b3:a7:d8:b7:4c:a0:2c:4d:
         29:3a:fd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:25 2024 by rpki-client on console-fra.rpki-client.org