Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/02D36C86F50211ED8A235C4EC4F9AE02.roa
File:                     02D36C86F50211ED8A235C4EC4F9AE02.roa (raw, json)
Hash identifier:          dISoXNe9nLBdGWh2sRce7YSRAKbxZcsrgrZkFUMnVC8=
Subject key identifier:   21:B8:97:1E:E7:83:5F:F4:5D:61:CD:F7:A6:9C:44:A9:60:A3:F8:70
Certificate issuer:       /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
Certificate serial:       A2
Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/02D36C86F50211ED8A235C4EC4F9AE02.roa
Signing time:             Thu 08 Feb 2024 11:38:36 +0000
ROA not before:           Thu 08 Feb 2024 11:38:36 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     139597
IP address blocks:        103.25.115.0/24 maxlen: 24
                          103.74.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl
                          rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 06:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
        Validity
            Not Before: Feb  8 11:38:36 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65c4bd3c-ad28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:42:00:d0:5d:48:51:ac:24:84:d2:21:ef:0c:
                    eb:3f:4f:80:77:bb:63:33:75:98:40:ff:3f:a1:d4:
                    70:e1:d2:bf:14:aa:03:88:22:1a:47:a4:fb:55:29:
                    14:93:6b:bd:78:37:72:7d:ea:5f:bd:a7:5f:75:07:
                    80:c2:8c:4f:f6:aa:47:02:85:8b:ab:1a:36:34:d9:
                    69:2a:79:1a:7e:22:e8:df:2d:6f:06:2f:06:05:5c:
                    6c:7a:b2:4f:8b:32:b1:aa:b7:3e:3f:9d:8d:1a:3e:
                    75:c5:b1:a3:3f:04:3b:dc:bd:8e:af:a2:de:00:43:
                    c5:55:ae:28:61:0a:95:ab:50:07:b9:85:d9:ec:55:
                    29:b7:e9:10:89:fb:05:85:dc:e5:4a:6a:ab:45:07:
                    4c:81:24:44:1e:c1:8e:03:7f:a9:78:60:4d:6e:ef:
                    5d:c4:84:e5:1b:5a:85:fd:13:a0:27:79:6e:33:40:
                    a8:ab:30:9b:68:b3:4d:c0:2d:56:3a:e0:f1:78:b4:
                    99:5d:6d:5e:47:5e:f8:e0:06:ea:43:52:4f:a8:6c:
                    d1:20:37:0d:cd:84:8b:11:be:c2:ab:10:35:24:f4:
                    c3:19:d3:4c:35:a3:d4:06:d9:12:33:f2:01:06:7e:
                    a5:91:c0:5a:ee:e8:44:65:9a:1d:ee:ad:fc:2b:ea:
                    21:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B8:97:1E:E7:83:5F:F4:5D:61:CD:F7:A6:9C:44:A9:60:A3:F8:70
            X509v3 Authority Key Identifier:
                keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/02D36C86F50211ED8A235C4EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.115.0/24
                  103.74.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:a4:f5:ee:b2:7c:48:fe:9a:b5:9f:09:8b:15:de:b4:1c:8a:
         62:a8:f3:d7:82:63:1c:09:00:a7:ff:be:89:41:e8:51:e9:ea:
         aa:7b:b9:34:d8:f4:af:c2:15:cc:c6:8e:d5:cf:1d:ea:b2:43:
         9f:40:de:f5:ea:e4:94:70:76:bb:7b:fb:93:de:fe:61:77:04:
         d9:31:b6:65:1c:09:7a:c7:46:9c:cb:65:91:30:43:ef:2d:c8:
         c4:24:be:a5:e5:3c:cf:99:c1:90:52:fd:28:fe:69:bd:5e:5b:
         26:19:32:5e:71:5e:66:15:17:fe:7d:e2:5d:94:cc:58:51:94:
         00:80:c0:8b:95:c3:bf:56:a2:95:70:58:3a:79:36:b9:3c:bc:
         ca:08:3d:0e:32:3e:52:2d:42:ba:d4:5a:dd:85:01:b0:d8:8f:
         36:1c:51:8a:ab:b2:17:ef:4e:45:8b:39:a5:a7:be:c9:68:6c:
         ee:8e:64:e4:71:08:c4:7a:4d:ff:a2:61:78:ef:c0:1e:d0:aa:
         ba:6d:91:de:6f:4c:6c:fb:a1:1c:85:63:85:22:a6:5c:f1:2f:
         2c:38:71:b7:d3:a3:5f:f4:69:89:4c:a4:1a:27:39:a7:79:81:
         be:8a:94:a0:38:7d:27:5e:26:38:64:7f:8a:c1:fc:dd:b8:82:
         c7:32:c6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:52:45 2024 by rpki-client on console-ams.rpki-client.org