Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/1D88932A452911EB9118413EC4F9AE02.roa
File:                     1D88932A452911EB9118413EC4F9AE02.roa (raw, json)
Hash identifier:          SCl5aD29N8FQzsS4y+Nxw7MEzPWUyh/cTZ5qei2/m40=
Subject key identifier:   02:B4:5F:D6:54:0F:60:6A:E9:17:EA:00:48:D7:1B:B9:E8:C5:A8:4E
Certificate issuer:       /CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01
Certificate serial:       062C
Authority key identifier: 09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/1D88932A452911EB9118413EC4F9AE02.roa
Signing time:             Fri 28 Jul 2023 18:56:20 +0000
ROA not before:           Fri 28 Jul 2023 18:56:20 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     58689
IP address blocks:        103.97.162.0/24 maxlen: 24
                          103.97.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl
                          rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1580 (0x62c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01
        Validity
            Not Before: Jul 28 18:56:20 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c40f54-c5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bd:9a:a2:bf:fd:01:75:8e:41:ff:55:b5:20:
                    d9:b4:f5:04:50:86:64:9b:01:21:0b:1d:d6:9f:8f:
                    33:38:5d:e4:41:d7:18:bc:79:26:29:9d:03:ec:bc:
                    d7:b2:81:c5:39:10:d6:88:ab:81:c3:8d:0e:b8:c4:
                    84:a5:e1:bf:f6:48:85:95:64:dd:67:33:8b:57:d9:
                    1f:11:4a:63:0f:40:51:62:1e:1e:51:6e:86:51:bc:
                    81:89:ee:85:dc:cb:7c:98:21:8a:0f:a2:55:59:db:
                    89:2b:20:d0:37:e1:df:e7:61:82:f9:13:00:41:eb:
                    ab:25:1c:12:92:a4:75:87:ae:b4:39:cb:51:a9:50:
                    5e:d3:a2:34:50:70:b1:d9:94:cf:71:dd:b6:56:ea:
                    6b:37:1c:df:96:d2:33:fc:40:44:37:59:50:9d:5f:
                    90:7b:33:ed:cf:cb:94:70:92:9e:de:66:ea:e1:28:
                    d9:9b:e7:64:40:9c:9e:67:5d:46:44:57:9a:f1:03:
                    56:e9:f7:09:be:81:2a:d4:cc:6e:94:c2:5f:eb:dc:
                    5a:01:b7:9a:77:6e:97:63:40:ec:46:d3:e0:c4:98:
                    c1:aa:d7:2a:81:b4:f6:93:d1:34:81:31:26:4e:8d:
                    1b:dc:95:85:e4:cc:dd:a3:95:e2:e1:29:79:ff:65:
                    5a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B4:5F:D6:54:0F:60:6A:E9:17:EA:00:48:D7:1B:B9:E8:C5:A8:4E
            X509v3 Authority Key Identifier:
                keyid:09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/1D88932A452911EB9118413EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:8d:21:f3:72:54:36:8b:37:6d:13:ff:7f:94:58:e3:3f:83:
         74:ec:ce:dd:37:db:4c:cb:cc:7d:37:ba:bf:da:7d:9b:ab:23:
         6e:62:17:d0:c0:10:be:9c:a6:d7:34:c0:92:ee:19:24:5d:cd:
         ee:d7:8f:16:31:8d:4d:b9:62:7b:84:c1:37:00:27:66:df:4b:
         0b:6b:54:2a:df:8e:b5:0d:46:2c:13:91:8c:58:e7:0f:e0:28:
         df:a7:a2:d5:60:b7:78:57:ca:8c:7f:31:e6:48:b4:44:ef:a9:
         b3:d5:f1:70:ba:3b:76:c4:98:20:e6:93:bc:a8:66:7d:8c:68:
         c8:14:22:f1:1c:0d:0a:92:28:6b:c0:25:6a:10:73:24:ff:67:
         92:0c:b1:7f:b5:cd:3b:14:f7:3f:fc:8a:a4:fd:f3:dd:b5:2f:
         a6:22:6e:5a:25:20:7f:64:70:0d:8d:55:f1:fe:de:8d:58:b9:
         c1:b0:5f:4e:f9:65:d1:6e:b1:b0:47:dd:27:16:7c:18:76:8b:
         cc:48:8c:87:54:45:91:07:68:5a:33:ad:91:10:f1:de:21:9a:
         af:9c:1b:2a:1a:6a:4c:dc:e8:5f:3b:de:be:ea:1d:50:a0:70:
         f1:01:17:25:af:4d:8c:b2:66:1c:8a:36:49:af:a9:37:1c:d8:
         a3:51:d8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 20:45:21 2024 by rpki-client on console-ams.rpki-client.org