Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/4025C8DC78E811E79F549F43C4F9AE02.roa
File:                     4025C8DC78E811E79F549F43C4F9AE02.roa (raw, json)
Hash identifier:          tFeNcI6kFopNEe6GYOSbUN3Yh/hxqqs68jWZiYvIj3Y=
Subject key identifier:   55:18:7B:10:05:0C:52:0D:DE:7B:A0:BF:00:A1:65:57:93:F2:86:06
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       336E
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/4025C8DC78E811E79F549F43C4F9AE02.roa
Signing time:             Tue 30 Jan 2024 16:13:03 +0000
ROA not before:           Tue 30 Jan 2024 16:13:03 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     58401
IP address blocks:        103.23.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13166 (0x336e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jan 30 16:13:03 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=65b9200e-181f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8a:ba:21:70:90:ac:79:b3:1d:6e:8e:39:a1:
                    e8:96:2f:b3:1d:8d:55:94:c1:2c:b6:cc:09:23:16:
                    e4:9a:f3:d2:f7:da:4a:de:aa:6a:db:b8:55:b6:07:
                    1f:23:38:56:e2:0d:02:61:d3:b4:d4:59:a8:a1:79:
                    0a:84:23:24:20:9b:27:e6:f9:43:61:ba:70:73:cf:
                    e6:f9:00:ad:a0:8e:4e:fc:bf:a8:11:be:c4:d3:88:
                    06:0a:ef:33:d3:7f:56:bd:ee:86:09:33:04:02:b0:
                    f7:72:ab:83:e4:1e:f6:83:e1:a8:40:8c:e7:8b:d8:
                    8b:3f:5b:2d:38:42:64:dd:9b:c9:7b:e8:77:cd:12:
                    72:fa:f3:16:53:1f:4f:b9:13:f6:63:02:42:23:97:
                    06:af:95:e2:0a:64:ea:c3:55:89:71:1d:ad:45:35:
                    9a:f3:1d:d9:69:97:e5:18:dd:c6:b3:1a:f9:ba:28:
                    9b:e5:17:32:38:fb:41:63:00:3c:02:69:a1:8f:91:
                    82:3a:0c:a5:0b:85:47:e9:33:86:6c:01:a5:6d:8a:
                    c1:a2:62:48:dc:33:82:95:4a:11:29:0b:70:2f:e0:
                    4c:0b:81:48:9e:33:de:5d:c1:1c:6f:ce:d7:31:0a:
                    b2:f3:ff:2d:36:26:5e:d3:1d:0f:75:2b:dc:a5:03:
                    df:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:18:7B:10:05:0C:52:0D:DE:7B:A0:BF:00:A1:65:57:93:F2:86:06
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/4025C8DC78E811E79F549F43C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:2c:2b:0b:ff:01:c5:06:fd:48:f6:21:d7:28:cc:2a:da:d5:
         e6:cf:7a:11:dd:89:57:c0:9c:91:c8:4e:b7:b6:67:be:c9:69:
         74:a1:7f:27:cc:b4:5e:27:46:05:d8:e7:0f:50:01:11:b9:fd:
         09:46:2e:89:2d:50:45:dc:76:f6:af:73:5c:ee:c6:0d:22:52:
         78:5f:65:23:76:34:44:d1:a5:7d:a4:8c:5b:0c:42:84:36:52:
         36:b9:8f:43:0f:e0:30:24:f6:e9:85:ac:2f:6d:df:d2:e6:cc:
         70:ff:ea:b2:47:df:18:a4:23:9e:77:84:53:0d:35:1b:36:0d:
         5c:ef:de:39:75:42:97:b4:3b:51:0a:01:87:6a:cf:31:17:e1:
         ac:54:1f:a0:e5:0c:49:de:88:9b:59:ce:49:c7:52:26:55:84:
         85:cd:35:c0:44:7d:36:36:1d:8e:56:68:b9:31:0d:ff:c8:39:
         77:c6:57:2d:48:a0:dc:36:59:95:f4:b4:af:2c:a1:93:91:77:
         9c:3b:a9:82:bb:6e:c2:56:ae:24:b0:d1:80:07:4f:8d:14:b6:
         dc:eb:91:75:01:66:df:10:ff:2c:2f:3c:f4:e6:62:da:08:69:
         92:b2:87:ea:f9:3b:4e:0b:13:4f:2e:1b:16:4e:05:4d:9e:d2:
         83:83:68:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:38:08 2024 by rpki-client on console-ams.rpki-client.org