Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/09AA16F8DB0011ECA67DA10BC4F9AE02.roa
File:                     09AA16F8DB0011ECA67DA10BC4F9AE02.roa (raw, json)
Hash identifier:          LO9ngxXOl+iazHSQjT/XtGyP65JUxjImT6/VdEBjdac=
Subject key identifier:   20:5A:B3:CF:97:88:92:6D:3D:11:F7:65:B2:DE:29:64:F4:FB:C4:CA
Certificate issuer:       /CN=A9118422/serialNumber=386EACFAA61B8B4037DC38AA28085DE31878F1E3
Certificate serial:       0215
Authority key identifier: 38:6E:AC:FA:A6:1B:8B:40:37:DC:38:AA:28:08:5D:E3:18:78:F1:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/09AA16F8DB0011ECA67DA10BC4F9AE02.roa
Signing time:             Tue 05 Mar 2024 04:05:38 +0000
ROA not before:           Tue 05 Mar 2024 04:05:38 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     133914
IP address blocks:        103.47.234.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.crl
                          rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 May 2024 03:58:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118422/serialNumber=386EACFAA61B8B4037DC38AA28085DE31878F1E3
        Validity
            Not Before: Mar  5 04:05:38 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65e69a11-cb55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bc:d2:7b:be:b3:09:50:4c:0b:28:a8:83:7c:
                    60:e2:7b:3b:e6:02:95:95:96:8d:e1:55:b9:e3:01:
                    c6:fe:e1:11:39:2e:3b:55:34:29:68:78:59:cd:08:
                    20:2b:79:03:06:a8:b3:61:2e:3b:bf:f6:5d:48:82:
                    44:72:24:61:5b:c3:b8:f4:4b:f6:2f:c2:18:77:21:
                    8d:95:eb:16:b5:77:f2:f7:40:dc:92:13:5b:f6:92:
                    89:d3:9d:ae:98:cd:ad:ca:02:39:16:86:b9:35:52:
                    ae:6e:f4:d3:0b:17:02:90:39:d0:16:7e:ce:d5:5d:
                    72:a3:f6:f3:b9:d3:bc:53:38:e7:fd:dc:2f:78:b7:
                    12:81:69:22:4b:a2:0e:d8:b1:70:43:01:f3:3a:20:
                    03:5a:a5:97:03:88:3c:79:30:8c:b4:6b:fa:ff:a0:
                    a4:1c:4a:82:6c:91:7b:bc:45:44:71:7a:75:ef:b0:
                    1f:fe:6e:c4:80:92:ac:bf:02:69:97:51:14:c8:a3:
                    a1:ed:9c:39:44:53:d2:7f:f8:90:dd:6a:07:b7:37:
                    b2:e1:05:75:68:f9:07:d1:e5:c7:4e:5e:a8:ed:9b:
                    ce:7e:c0:14:00:af:16:8a:24:e4:f8:1b:63:50:29:
                    d9:af:0b:e6:e3:9e:48:f9:47:b3:f5:1c:d9:05:ac:
                    d5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5A:B3:CF:97:88:92:6D:3D:11:F7:65:B2:DE:29:64:F4:FB:C4:CA
            X509v3 Authority Key Identifier:
                keyid:38:6E:AC:FA:A6:1B:8B:40:37:DC:38:AA:28:08:5D:E3:18:78:F1:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/09AA16F8DB0011ECA67DA10BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:db:88:51:22:d9:5e:17:bf:d3:c4:9c:a7:64:df:4f:05:56:
         03:d4:6a:1c:a4:99:71:4b:56:8f:7e:0f:46:9d:ff:f0:32:53:
         4a:31:de:75:d3:36:e7:00:6a:95:0b:43:db:60:55:63:9f:2f:
         a4:cf:6f:22:35:2a:4f:61:06:06:22:d3:27:3f:16:9c:8f:22:
         de:2b:57:8a:e3:4b:16:f1:89:39:74:5e:05:5d:48:ef:63:87:
         48:f2:1f:5b:78:a7:b1:7c:67:19:36:9d:73:11:da:51:b6:51:
         e8:80:15:95:8f:b6:50:26:8e:a5:a9:18:69:1f:0c:6e:47:34:
         bf:6d:bb:cf:7e:55:68:46:97:96:48:2a:68:7f:d4:6a:6b:97:
         dc:36:2f:1b:c4:43:9f:62:e0:d2:ac:91:44:62:b3:22:6b:e1:
         24:d0:2f:cd:07:a9:01:bf:14:f7:27:e3:04:86:2b:e9:f3:71:
         b9:8c:6c:8c:56:e4:40:c7:9a:f4:50:5b:83:7f:67:8f:f3:b3:
         50:64:a5:7f:96:b0:5c:41:a6:cd:cd:11:ef:80:43:af:4d:ec:
         8d:ee:ad:1e:ed:ef:6e:d1:0e:a7:9c:4e:8c:f0:a8:25:95:98:
         c5:7f:32:3c:b5:14:b6:b9:5c:27:d9:ad:a0:f4:70:d8:64:e0:
         1a:eb:fc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 04:45:51 2024 by rpki-client on console-fra.rpki-client.org