Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/AA5E96065B9F11EF9F1B175DC4F9AE02.roa
File:                     AA5E96065B9F11EF9F1B175DC4F9AE02.roa (raw, json)
Hash identifier:          /YYAM/ja0JhV/6iA5BWq6W3oPILiMBn35Hx66aO0FaI=
Subject key identifier:   19:C0:68:56:ED:76:30:BD:B2:75:8E:B7:E3:EF:8B:D9:E7:77:8C:A8
Certificate issuer:       /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
Certificate serial:       02
Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/AA5E96065B9F11EF9F1B175DC4F9AE02.roa
Signing time:             Fri 16 Aug 2024 07:17:59 +0000
ROA not before:           Fri 16 Aug 2024 07:17:59 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     26658
IP address blocks:        103.212.72.0/22 maxlen: 22
                          139.5.180.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl
                          rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
        Validity
            Not Before: Aug 16 07:17:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66befd27-a138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f8:c0:99:8e:ee:1c:8f:f8:47:c7:18:e1:ee:
                    95:2a:cd:e4:cf:99:9c:e2:53:25:ef:87:c4:07:ed:
                    13:41:27:b1:12:7b:88:0f:61:fc:7c:40:9f:6a:60:
                    81:23:36:a2:f5:f2:c8:9d:1e:34:3f:25:be:87:d4:
                    5b:0a:ad:63:1a:6d:31:7d:86:83:70:6d:d6:b8:5d:
                    78:03:62:19:a2:9b:f3:79:30:aa:b9:1f:70:c3:07:
                    c2:46:a1:1e:16:84:3e:57:af:d9:e4:96:0a:27:bd:
                    f8:f3:45:2a:8b:b9:6b:c0:52:d9:73:ab:46:7d:fd:
                    a2:e9:a1:6f:de:68:79:de:ac:7a:39:38:cc:e9:27:
                    22:2a:0e:c6:a7:91:47:40:40:bc:c5:45:2a:e8:df:
                    70:74:56:5d:66:4f:56:5e:63:05:0a:2e:67:6f:a5:
                    11:22:d1:b6:02:2e:b7:e2:1a:a8:55:0c:d9:26:fe:
                    28:ed:5d:76:8e:5c:bd:2e:c8:f0:ed:69:0e:db:e4:
                    69:59:98:f3:7c:e4:f8:5c:46:33:88:76:b8:fb:bf:
                    0e:91:d1:48:e0:48:8e:e3:7f:e5:b9:af:e8:b3:11:
                    0a:40:07:40:55:7f:9d:e8:8b:16:e7:b9:a6:57:c4:
                    70:51:41:74:f0:24:b9:c7:f4:8e:7e:65:ee:e9:c9:
                    56:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C0:68:56:ED:76:30:BD:B2:75:8E:B7:E3:EF:8B:D9:E7:77:8C:A8
            X509v3 Authority Key Identifier:
                keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/AA5E96065B9F11EF9F1B175DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.72.0/22
                  139.5.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:e9:3c:9a:b1:1e:d4:e6:93:45:90:30:ab:94:38:b9:81:92:
         34:0f:d1:ce:12:72:e9:5f:e0:30:74:d7:1a:d9:e0:fc:7b:09:
         54:16:bb:e6:11:30:42:2f:9b:21:ac:a6:04:4b:3f:16:89:f4:
         8c:cf:9c:00:3b:f9:72:7f:2b:24:e4:0a:52:57:3d:84:c1:4a:
         16:56:ee:02:5a:03:9f:3d:cc:4f:e0:c0:f4:11:4f:53:15:9c:
         da:fd:5b:f1:08:da:90:fd:4f:b8:1b:27:6f:c1:80:18:d1:1d:
         4c:d0:f4:6f:ba:e2:4b:b1:d9:d3:79:ac:64:a5:de:e6:7c:50:
         5c:d4:f0:b5:0c:75:37:9e:c6:6e:eb:ce:d5:1a:a1:b2:4b:d2:
         00:83:70:3d:6a:9a:99:e9:45:61:19:15:5a:3d:fe:ae:2c:36:
         b8:c2:b4:df:94:1a:80:b6:21:85:15:aa:d7:9c:51:76:a8:97:
         5c:05:18:b4:be:25:0d:1e:8a:f0:35:a5:08:1c:3e:56:47:92:
         aa:71:d1:2c:79:0b:b4:e5:ff:b1:6e:34:97:bc:42:f1:80:72:
         f3:96:40:b1:9e:eb:fc:4a:e9:e7:75:55:1d:20:87:ba:ca:30:
         74:b9:08:fd:80:e0:14:1f:06:b5:c9:bb:4f:5f:72:1d:97:6a:
         c9:a1:d8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:39:59 2024 by rpki-client on console-ams.rpki-client.org