Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/220853047F2211EA8E730F35C4F9AE02.roa
File:                     220853047F2211EA8E730F35C4F9AE02.roa (raw, json)
Hash identifier:          xV0WLxYqqQFCLmI/y4DVLsG2EiamVNg0WSby5MmNSBE=
Subject key identifier:   1F:B9:CE:EA:D5:68:1D:F5:EE:E9:26:37:9C:F2:A3:62:FC:6E:CD:32
Certificate issuer:       /CN=A915C1AA/serialNumber=D65AA094A51E2839753B59210B6CF2C54915C01E
Certificate serial:       090D
Authority key identifier: D6:5A:A0:94:A5:1E:28:39:75:3B:59:21:0B:6C:F2:C5:49:15:C0:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/220853047F2211EA8E730F35C4F9AE02.roa
Signing time:             Tue 30 Apr 2024 21:59:49 +0000
ROA not before:           Tue 30 Apr 2024 21:59:49 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     134105
IP address blocks:        103.52.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.crl
                          rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2317 (0x90d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C1AA/serialNumber=D65AA094A51E2839753B59210B6CF2C54915C01E
        Validity
            Not Before: Apr 30 21:59:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=663169d5-6f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:54:8e:e3:30:94:8d:26:83:5f:6f:36:03:71:
                    39:56:01:2a:72:2c:6b:22:ca:a5:59:f4:85:18:7b:
                    cf:ba:cf:2f:b0:84:d1:dd:98:7b:82:7c:d2:39:ea:
                    2b:7a:df:b1:ba:bd:2e:dc:13:9f:78:02:83:67:50:
                    a0:6a:47:e3:b3:69:b1:b8:4a:c3:f2:99:a8:35:2c:
                    44:2d:64:f3:8e:83:3c:b7:d4:b2:ba:8b:85:00:00:
                    62:97:fd:93:51:e1:04:78:f3:99:76:35:f7:ba:9e:
                    27:63:59:fa:97:7c:92:e8:23:08:ee:7d:e9:fe:5b:
                    57:f4:3b:c0:ce:36:1d:08:32:72:21:1d:fa:2c:b5:
                    eb:76:15:95:e6:99:c0:34:41:1a:ac:e3:8d:35:e6:
                    fc:6b:35:ee:b7:3f:3d:ac:ac:c5:33:2c:15:7d:56:
                    71:9b:76:4d:af:e5:5c:da:5a:b8:a9:3c:31:4e:cd:
                    b0:29:d5:f8:21:b1:44:2b:07:05:6d:5f:c7:05:7f:
                    d0:e8:38:d0:31:28:05:34:be:4d:5e:8c:f2:41:1b:
                    e0:cd:33:29:90:6f:9c:55:d4:c3:03:88:29:36:74:
                    6d:ab:0a:ad:96:2f:f3:f1:78:b1:3e:17:7f:33:c2:
                    24:01:81:cd:cb:88:85:b4:01:ca:a0:68:15:0f:66:
                    a8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B9:CE:EA:D5:68:1D:F5:EE:E9:26:37:9C:F2:A3:62:FC:6E:CD:32
            X509v3 Authority Key Identifier:
                keyid:D6:5A:A0:94:A5:1E:28:39:75:3B:59:21:0B:6C:F2:C5:49:15:C0:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/220853047F2211EA8E730F35C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:4b:fa:53:cf:11:e1:98:cd:80:64:8b:81:a8:bf:c6:7f:ed:
         98:5c:e5:7a:88:5c:48:93:9a:ba:02:e8:44:28:35:ec:af:43:
         9e:50:f5:1f:c7:02:b1:cf:18:6b:2b:ca:f8:da:e9:36:f7:9e:
         b9:47:9f:c0:88:fd:64:12:af:c2:89:b2:bb:b7:72:a2:2d:13:
         7f:08:56:84:c7:cf:1a:b8:f5:72:69:d2:aa:82:bf:8d:28:fe:
         5c:de:1c:d4:05:b8:32:6a:ea:0d:a9:7d:5f:ce:81:dd:9c:96:
         c1:cd:a6:3c:7a:4b:fa:25:00:e1:d8:78:d4:d2:ef:df:12:e2:
         1c:2a:2f:1d:ef:50:e9:cc:25:49:d8:bf:8e:8a:f7:8a:19:d5:
         4b:f0:76:98:bb:08:97:38:a7:a3:09:cc:53:3d:9d:5c:4c:d5:
         e0:03:69:81:be:80:23:f2:4b:72:9c:c1:45:5f:84:6a:40:96:
         36:42:24:41:92:bf:5b:de:46:53:71:fe:05:72:9a:90:28:51:
         90:2e:73:88:fb:f1:91:36:e0:30:ad:e7:66:b1:94:46:f3:3c:
         48:9c:58:e3:4e:a7:54:26:fe:68:53:12:fd:30:4c:53:57:8b:
         91:d3:36:7f:0f:4f:ea:ab:6c:2c:e7:d2:d8:06:a3:0d:5c:54:
         67:88:ec:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:28 2024 by rpki-client on console-ams.rpki-client.org