Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36521694382D11EDB904E684C4F9AE02.roa
File:                     36521694382D11EDB904E684C4F9AE02.roa (raw, json)
Hash identifier:          Omnwow0iZG8VNqPxfANrWrfk0lSwUgPKBEovPutMnDs=
Subject key identifier:   D3:10:F5:A9:B2:16:9A:D5:3A:72:D5:14:FA:DA:74:1B:41:E9:46:8E
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4257
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36521694382D11EDB904E684C4F9AE02.roa
Signing time:             Wed 27 Mar 2024 08:53:10 +0000
ROA not before:           Wed 27 Mar 2024 08:53:10 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     131414
IP address blocks:        45.118.144.0/22 maxlen: 24
                          103.97.132.0/22 maxlen: 24
                          103.237.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16983 (0x4257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Mar 27 08:53:10 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6603de76-32b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:18:c4:08:2f:44:81:33:f2:76:6b:d8:03:6d:
                    db:71:dd:64:72:3e:b9:c9:83:ce:0a:ef:b2:17:3c:
                    41:54:39:e8:b0:5d:4b:92:be:5c:30:4c:1b:dd:91:
                    2b:2c:91:a0:11:6b:2a:61:8e:cd:93:c1:73:97:b5:
                    0e:24:6c:97:0a:49:f5:f3:88:b8:7e:5c:89:89:1f:
                    22:ea:3a:fb:87:d9:82:9a:7a:c2:38:c3:eb:41:15:
                    7a:f6:d0:5d:28:d1:37:51:a4:3c:03:be:86:57:3a:
                    17:bf:ee:2f:98:67:d8:7e:ca:51:6e:83:06:16:bd:
                    b0:90:e7:3b:85:18:40:81:3b:db:6e:ec:dd:e5:46:
                    b4:4d:a7:90:8d:dd:6f:2e:aa:5c:c0:9e:e8:0b:02:
                    e2:d7:74:f4:56:d7:73:b3:09:83:fe:00:4d:e7:78:
                    94:9f:71:3f:41:bc:e1:7c:dc:8d:1f:3a:c1:ae:39:
                    3e:19:f2:38:93:13:97:56:14:be:82:53:ae:dc:fc:
                    4d:40:e9:d8:ec:8c:82:58:1f:f1:6f:00:f8:43:91:
                    cf:2f:34:35:d9:1f:24:18:e4:c0:35:9c:dc:2d:62:
                    67:d5:18:e5:5c:f1:ae:49:02:8a:60:e8:44:92:4f:
                    a0:00:36:02:80:41:e7:af:bc:15:29:af:67:e0:7c:
                    56:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:10:F5:A9:B2:16:9A:D5:3A:72:D5:14:FA:DA:74:1B:41:E9:46:8E
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36521694382D11EDB904E684C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.118.144.0/22
                  103.97.132.0/22
                  103.237.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:b7:4f:4a:1a:64:99:dc:15:4e:ca:ab:9e:9d:23:bb:ce:9a:
         87:e3:27:93:dc:f1:f6:61:0b:78:8a:51:e3:f0:b7:83:69:3e:
         02:ce:ff:f5:74:09:ad:84:0d:65:39:fc:f8:67:78:69:4f:5b:
         f5:78:be:86:01:6b:f3:8f:8d:8e:11:32:51:71:4e:f4:77:ca:
         a4:0b:8d:c0:55:23:d4:3b:37:b0:76:1e:61:a1:04:61:59:84:
         68:4c:69:62:13:d3:a0:cd:30:9a:5b:c3:f1:ea:c3:75:5b:3f:
         54:8c:f9:c1:26:28:fd:ff:f9:84:1c:1d:c5:30:c6:55:f0:20:
         fd:69:3f:ea:39:61:4e:13:b3:3b:4b:01:ce:37:ac:56:68:e4:
         1d:08:a7:2b:fa:2c:e2:ef:4b:a5:5b:5f:bf:36:99:5e:15:7b:
         9e:d2:f1:67:7c:76:c1:f9:92:53:95:1a:89:89:20:22:83:5b:
         21:db:90:55:ba:73:ca:49:08:8c:84:57:85:0b:c1:ab:38:ac:
         af:9e:cd:2c:20:6e:ff:c5:31:55:2d:cb:50:46:c6:fd:c8:f3:
         03:27:5d:a2:4c:0a:8d:48:97:4c:fd:04:3d:08:97:6f:c9:fa:
         04:5e:1a:27:ba:28:51:60:5b:50:06:8e:41:00:90:c4:e2:1a:
         5f:d4:66:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 16:41:39 2024 by rpki-client on console-ams.rpki-client.org