Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/23803F800C9C11ED82C8955BC4F9AE02.roa
File:                     23803F800C9C11ED82C8955BC4F9AE02.roa (raw, json)
Hash identifier:          s5zo6Oy3LdXJqnKHo8639OODD+UWopqrRn4IJ2Zq31w=
Subject key identifier:   57:FB:1E:C2:F4:52:29:2F:1A:08:9E:D6:9F:F2:01:24:35:76:04:D7
Certificate issuer:       /CN=A911BDAE/serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0
Certificate serial:       0183
Authority key identifier: E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/23803F800C9C11ED82C8955BC4F9AE02.roa
Signing time:             Thu 25 Jan 2024 04:05:35 +0000
ROA not before:           Thu 25 Jan 2024 04:05:35 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     38851
IP address blocks:        43.226.232.0/22 maxlen: 23
                          103.46.144.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl
                          rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDAE/serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0
        Validity
            Not Before: Jan 25 04:05:35 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65b1de0f-9073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:95:a5:5d:f7:88:74:30:30:da:8c:46:40:fd:
                    6f:44:8d:d0:c1:5e:18:f6:0a:eb:8a:c5:dd:84:fb:
                    80:f0:27:41:f4:35:08:c4:77:d4:9f:67:cf:75:63:
                    c4:05:4a:1a:bf:2a:77:38:81:df:ef:b7:b3:b5:30:
                    32:42:86:4a:83:9b:6d:af:cd:e3:98:2c:20:2d:3e:
                    28:19:8e:9f:06:26:1d:60:d9:9e:bc:51:0a:b3:97:
                    6a:a3:07:6c:0a:31:08:e3:5e:25:0a:cd:54:7a:ae:
                    45:1d:75:6a:7d:78:81:e5:ee:0f:d8:de:f4:13:c2:
                    b2:c3:08:0b:b1:11:33:26:51:8e:45:7c:3c:15:69:
                    15:fd:bd:81:28:40:56:a6:12:69:91:a0:4d:1a:e1:
                    35:b3:a4:cd:49:af:43:26:5f:a9:e1:d4:f2:8e:96:
                    8f:86:2a:83:69:43:0b:eb:09:01:83:1f:fb:6f:18:
                    c4:93:14:97:22:f4:b8:d6:22:e0:10:5a:66:54:00:
                    29:fc:0e:8b:b6:80:e4:62:40:6a:1a:25:51:eb:d5:
                    5f:39:9c:02:24:eb:29:05:e8:68:2e:19:b7:7d:94:
                    ac:46:99:96:fe:7d:4f:29:75:f1:f9:e6:af:9a:de:
                    8f:49:fb:05:33:25:48:cf:55:ab:82:08:18:de:93:
                    37:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FB:1E:C2:F4:52:29:2F:1A:08:9E:D6:9F:F2:01:24:35:76:04:D7
            X509v3 Authority Key Identifier:
                keyid:E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/23803F800C9C11ED82C8955BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.232.0/22
                  103.46.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:3d:0f:a4:aa:ff:86:76:3d:11:5f:c2:61:3b:b9:7c:71:6f:
         2e:76:d5:e2:46:96:59:d9:85:80:a1:3d:0b:cd:36:d2:96:34:
         98:1d:fa:85:7a:53:24:d4:8a:3d:ab:44:3b:93:35:36:5d:a7:
         39:cb:88:f1:b3:15:0a:00:7a:07:7f:63:a3:87:97:cc:4c:45:
         a9:55:96:b6:52:00:35:fb:87:34:b3:35:c5:61:f2:e7:82:15:
         8f:3e:5a:18:26:8e:53:4a:f4:6a:1c:45:a5:7a:3e:d4:58:45:
         9a:80:0c:69:37:27:bd:a1:9c:4a:c9:5e:33:e6:7d:f0:28:c2:
         ed:9f:92:2d:72:c6:55:4b:47:0d:5b:b8:22:5a:0d:68:8d:ca:
         31:52:ae:f8:c9:01:12:4f:3c:78:3c:99:5a:70:06:0b:7c:01:
         75:0f:36:da:06:5f:ff:fe:6d:d1:88:5a:d5:3e:5f:57:5f:e0:
         aa:26:76:03:d3:27:6d:2a:9b:3e:84:02:9d:f2:af:55:12:5d:
         84:5e:32:5a:39:09:e1:5b:1f:b9:71:e7:29:91:88:ac:4c:7f:
         a1:b5:00:68:66:6b:30:0d:c5:86:8a:37:54:3c:fb:49:0c:ba:
         b1:5f:08:c9:3a:7d:cb:44:69:b9:4d:74:2c:f6:ad:38:d7:2a:
         5f:49:1e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:31 2024 by rpki-client on console-ams.rpki-client.org