Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/E97B1E5482E211EEA80A0583C4F9AE02.roa
File:                     E97B1E5482E211EEA80A0583C4F9AE02.roa (raw, json)
Hash identifier:          gun8LCI4ntZotqucrFdTyrzeTUDgktVdrtg4Gwfkh5M=
Subject key identifier:   CF:A7:F5:38:88:5F:80:C6:E7:9E:C6:57:25:70:E7:02:E9:55:7D:B9
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3348
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/E97B1E5482E211EEA80A0583C4F9AE02.roa
Signing time:             Tue 30 Jan 2024 16:12:27 +0000
ROA not before:           Tue 30 Jan 2024 16:12:27 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     132641
IP address blocks:        103.132.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 15:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13128 (0x3348)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jan 30 16:12:27 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=65b91feb-86c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4f:7d:55:c3:46:f2:75:89:41:5e:77:41:3a:
                    85:4a:ee:06:94:0c:3b:06:c3:2b:af:ed:02:f4:4b:
                    51:5c:a4:78:21:8a:db:ee:a9:75:0d:b9:dd:89:0c:
                    62:7f:31:68:b8:11:b5:48:7f:d0:95:05:3a:46:1a:
                    a8:13:be:fe:d2:16:f3:b2:b9:2e:cd:1a:18:56:be:
                    da:21:50:d2:2d:f9:d8:27:55:24:fb:b3:ec:bd:a5:
                    ae:6d:3b:c0:e5:55:0c:76:0a:ce:3d:37:08:f8:f4:
                    99:59:1d:84:48:6a:3f:0f:fd:7c:10:a0:8f:6a:1f:
                    fb:1f:93:4a:67:6f:e9:07:47:0a:78:ee:22:fb:cf:
                    d3:d8:8f:31:2c:bd:59:fd:3d:78:a2:c7:44:12:6c:
                    81:25:6a:7d:62:0e:ca:54:94:07:0e:a3:53:0b:2e:
                    57:22:74:de:7d:b0:38:ba:88:15:29:97:02:f9:2d:
                    c4:a7:cf:9c:ec:36:e7:ab:55:c7:4b:74:05:7a:3d:
                    ef:83:5e:5f:56:b6:b3:31:48:f1:61:ed:06:c6:94:
                    bf:bd:ba:c4:e0:df:df:59:1c:83:a1:bf:8c:3b:41:
                    b4:19:89:87:df:e8:ff:21:fe:7d:f1:40:92:99:9b:
                    42:c2:90:07:2e:ec:cc:13:d9:3e:9b:0f:9a:74:ac:
                    fc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A7:F5:38:88:5F:80:C6:E7:9E:C6:57:25:70:E7:02:E9:55:7D:B9
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/E97B1E5482E211EEA80A0583C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:e5:36:0e:fe:9d:a6:a9:0c:99:44:af:34:0e:78:3a:71:b1:
         68:8e:28:14:bb:e3:57:27:86:40:6c:ab:dc:55:78:a7:02:d0:
         b9:a3:32:1c:97:15:e1:53:1f:a3:b4:05:63:16:da:07:95:e9:
         cb:b6:6f:1e:6c:9e:48:4b:cd:18:1f:78:d1:25:ff:d5:43:e8:
         f9:46:01:96:4d:2a:a4:80:a7:76:7b:01:0c:92:3c:8e:2b:0a:
         60:b1:d7:85:b2:71:46:a2:e7:6b:bf:e8:a7:4d:71:0f:85:c5:
         bd:5b:8b:2f:a8:74:f6:48:3c:a0:3d:95:68:52:61:bc:30:da:
         df:e6:8d:f4:c1:84:14:45:29:ae:a3:76:50:50:a3:51:a8:1b:
         91:56:88:05:fe:da:ad:eb:ca:f5:4b:7e:73:f7:8b:b2:2a:1f:
         0a:6a:7c:eb:4e:6a:81:22:71:4d:6f:76:69:21:4f:3c:d7:dc:
         47:99:db:43:ee:2b:ee:48:93:4a:0d:8b:f8:f9:2f:bf:b4:a2:
         42:49:82:c4:41:b5:24:36:ba:5e:e1:91:cd:2e:a5:51:2b:29:
         c5:c3:6b:f9:77:58:c4:27:b0:46:6b:88:cf:22:c5:ff:56:ca:
         65:f8:e8:56:96:fc:b2:3c:69:92:27:61:66:e3:89:64:d1:65:
         29:91:43:b5
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICM0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjQwMTMwMTYxMjI3WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWI5MWZlYi04NmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxE99VcNG8nWJQV53QTqFSu4GlAw7BsMrr+0C9EtRXKR4IYrb7ql1DbndiQxi
fzFouBG1SH/QlQU6RhqoE77+0hbzsrkuzRoYVr7aIVDSLfnYJ1Uk+7PsvaWubTvA
5VUMdgrOPTcI+PSZWR2ESGo/D/18EKCPah/7H5NKZ2/pB0cKeO4i+8/T2I8xLL1Z
/T14osdEEmyBJWp9Yg7KVJQHDqNTCy5XInTefbA4uogVKZcC+S3Ep8+c7Dbnq1XH
S3QFej3vg15fVrazMUjxYe0GxpS/vbrE4N/fWRyDob+MO0G0GYmH3+j/If598UCS
mZtCwpAHLuzME9k+mw+adKz8nwIDAQABo4IClTCCApEwHQYDVR0OBBYEFM+n9TiI
X4DG557GVyVw5wLpVX25MB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvRTk3QjFFNTQ4
MkUyMTFFRUE4MEEwNTgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnhIwwDQYJKoZIhvcNAQELBQADggEBAGXlNg7+naapDJlE
rzQOeDpxsWiOKBS741cnhkBsq9xVeKcC0LmjMhyXFeFTH6O0BWMW2geV6cu2bx5s
nkhLzRgfeNEl/9VD6PlGAZZNKqSAp3Z7AQySPI4rCmCx14WycUai52u/6KdNcQ+F
xb1biy+odPZIPKA9lWhSYbww2t/mjfTBhBRFKa6jdlBQo1GoG5FWiAX+2q3ryvVL
fnP3i7IqHwpqfOtOaoEicU1vdmkhTzzX3EeZ20PuK+5Ik0oNi/j5L7+0okJJgsRB
tSQ2ul7hkc0upVErKcXDa/l3WMQnsEZriM8ixf9WymX46FaW/LI8aZInYWbjiWTR
ZSmRQ7U=
-----END CERTIFICATE-----
Generated at Thu May 2 17:18:31 2024 by rpki-client on console-ams.rpki-client.org