Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/0C1D4BF8038F11EA82150D4AC4F9AE02.roa
File:                     0C1D4BF8038F11EA82150D4AC4F9AE02.roa (raw, json)
Hash identifier:          TfslzRg8GnFh8WZZlRlz17hq1aYEemXqD5Pt4nOxrj4=
Subject key identifier:   70:55:E3:DF:20:89:AC:3E:DE:33:DA:67:14:76:FD:DF:70:66:59:78
Certificate issuer:       /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E
Certificate serial:       0B43
Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/0C1D4BF8038F11EA82150D4AC4F9AE02.roa
Signing time:             Sun 24 Dec 2023 19:07:21 +0000
ROA not before:           Sun 24 Dec 2023 19:07:21 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     134841
IP address blocks:        103.203.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl
                          rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2883 (0xb43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E
        Validity
            Not Before: Dec 24 19:07:21 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65888169-bb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:69:4e:c7:f6:f4:99:fe:7d:ad:64:ef:65:28:
                    fc:a3:05:65:97:07:62:b3:01:2c:4e:01:74:c4:1a:
                    81:0b:fc:ca:1b:0a:f3:7e:93:1a:f1:a3:23:65:65:
                    fc:ea:47:59:3c:52:30:f9:d9:e1:6f:03:88:0c:3e:
                    99:f2:05:7d:f2:97:db:37:39:d7:d8:61:02:d0:0c:
                    92:6f:0e:a3:61:1c:c0:38:4d:c1:39:10:49:8f:6b:
                    b6:53:d2:44:0c:d6:cb:37:2f:5a:55:85:10:0a:4a:
                    47:0b:d7:5a:f7:d3:8e:83:00:b6:62:f4:1b:c4:03:
                    07:cc:18:31:12:8b:a7:9d:71:e1:b1:21:e3:3d:4b:
                    0f:7a:de:64:cb:c6:ba:83:0a:35:41:01:c8:7f:6f:
                    fb:5f:f5:64:ce:67:11:4d:57:d7:8e:bc:d5:8b:1d:
                    60:f4:c7:08:4c:44:8a:a7:58:2b:d7:d3:5f:73:6e:
                    7d:49:34:4e:36:cb:be:ac:1b:4f:4e:03:91:23:e9:
                    99:3a:95:6b:dc:70:df:d6:2d:74:bd:09:a2:05:70:
                    8e:83:56:80:0a:63:54:66:bd:79:aa:c9:ac:ce:4e:
                    42:28:ae:a9:57:4e:46:07:81:ab:91:44:52:f3:db:
                    c6:d4:57:cc:5b:9f:ce:83:4c:d3:a2:51:32:88:94:
                    2f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:55:E3:DF:20:89:AC:3E:DE:33:DA:67:14:76:FD:DF:70:66:59:78
            X509v3 Authority Key Identifier:
                keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/0C1D4BF8038F11EA82150D4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:6f:35:31:eb:25:95:2e:ef:a6:19:37:c4:0c:c4:e1:20:4f:
         38:10:1d:58:84:c6:c4:9c:72:9c:da:3a:13:f2:e4:16:f0:05:
         15:45:95:53:87:e9:d6:44:f7:d2:1e:14:10:47:8c:9a:16:9c:
         b7:f5:c2:2a:93:ac:ff:a7:4e:23:d5:a0:90:c3:a4:99:b5:e1:
         d1:a5:2b:1d:3e:6e:96:cf:44:3c:6b:50:7d:df:5b:f1:12:85:
         b0:d4:f9:a8:52:22:c7:da:b1:c9:db:2f:8d:b5:44:c4:1d:8c:
         12:26:74:e2:8c:f3:0b:7f:7b:a4:15:fb:56:a1:3c:b5:0c:d6:
         84:16:09:4e:1b:18:84:0c:c4:4d:fc:75:c3:4c:20:38:c8:c1:
         17:81:e6:b6:78:ec:82:e7:14:e1:58:82:32:7a:24:14:fa:2c:
         a2:c9:73:a4:fb:00:e6:f0:00:2c:75:33:9b:7d:4e:f3:fa:98:
         58:fa:02:19:32:57:53:2e:1a:dd:6a:bd:1d:ca:39:9e:61:b0:
         15:2d:1d:c5:be:63:2e:b3:a6:f5:30:90:b3:70:09:62:87:25:
         0d:fe:28:04:b8:11:fd:2b:88:2a:53:e2:9b:2b:09:90:cc:2d:
         7b:be:2d:29:69:a3:6f:61:90:51:95:83:d2:ef:dd:b7:ad:ab:
         7a:4e:80:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org