Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/C6766086579811EAA245BE5EC4F9AE02.roa
File:                     C6766086579811EAA245BE5EC4F9AE02.roa (raw, json)
Hash identifier:          xCaFRLPGD9q69hJ0yZ+vFad3g0XuUKgpA3HR+sQMI6A=
Subject key identifier:   74:97:05:AD:6B:19:2B:8B:D2:A1:D9:FE:05:BD:B4:A1:74:FF:B1:82
Certificate issuer:       /CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
Certificate serial:       09E0
Authority key identifier: 8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/C6766086579811EAA245BE5EC4F9AE02.roa
Signing time:             Wed 10 Apr 2024 20:59:20 +0000
ROA not before:           Wed 10 Apr 2024 20:59:20 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     136431
IP address blocks:        103.87.208.0/23 maxlen: 24
                          203.96.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl
                          rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2528 (0x9e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
        Validity
            Not Before: Apr 10 20:59:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6616fda8-c2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8f:fb:bf:75:33:59:5e:8a:1e:a9:7a:e7:44:
                    12:3a:15:38:96:22:1d:07:fa:6f:98:dd:bb:bd:fe:
                    80:a1:60:ab:e7:06:2b:ba:d8:9e:ec:d7:52:2b:5e:
                    8c:5c:da:d2:83:2a:a7:9c:02:2c:3e:31:56:9c:ee:
                    c5:5d:4c:00:53:5e:89:f2:07:3d:dc:be:14:d1:9c:
                    8e:86:ff:cd:7c:f1:eb:6a:1a:0f:c3:94:ed:2c:43:
                    f0:41:f0:20:56:2f:bb:85:67:c9:4c:52:a4:a3:56:
                    19:27:72:aa:ee:fc:3c:9b:db:7c:98:70:18:ce:68:
                    cf:ed:36:13:b4:87:6c:d7:d2:87:1e:ae:57:f9:bb:
                    95:f5:23:fa:53:ce:e4:4b:90:58:04:6c:a4:da:47:
                    05:3e:d8:08:94:e6:58:2c:36:63:5c:ce:ac:0d:61:
                    7d:54:fa:b2:68:d7:8e:d6:24:8e:62:0a:47:f4:bb:
                    ad:a0:49:23:20:c6:e6:65:89:cf:e4:37:01:34:89:
                    d3:26:48:4c:a2:d4:cf:8f:97:cf:1d:0f:92:77:37:
                    6f:5a:cc:dd:5e:2b:47:bd:70:9a:ed:93:ad:b9:da:
                    4c:ec:21:6f:d2:45:9f:83:55:04:43:da:ad:f6:a5:
                    d7:f4:f8:9f:7b:2c:82:c0:4d:4f:a5:f8:d8:12:9a:
                    69:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:97:05:AD:6B:19:2B:8B:D2:A1:D9:FE:05:BD:B4:A1:74:FF:B1:82
            X509v3 Authority Key Identifier:
                keyid:8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/C6766086579811EAA245BE5EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.208.0/23
                  203.96.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:3e:a6:d4:91:46:58:43:6c:d9:91:2e:cf:f9:fa:12:0d:fa:
         08:f0:3d:d9:aa:8a:f5:48:54:7e:67:30:d6:49:6c:4d:a5:df:
         9d:a1:e0:0c:56:0c:d9:07:9f:ac:ca:7d:97:68:22:d0:c9:dc:
         59:a0:f5:b6:1d:64:2c:05:42:fb:08:3c:2d:4f:9d:94:2b:95:
         74:b5:be:00:58:78:bf:08:d3:a9:31:f1:d6:a8:e2:d2:20:1c:
         d3:38:15:c2:03:9c:a4:d6:36:ea:b2:ee:4b:f3:74:f3:7e:a1:
         2c:80:3e:25:00:99:38:96:2c:73:04:07:fe:d5:1c:2f:1e:79:
         cf:d5:99:56:38:e7:68:9c:9b:9b:47:b1:4b:d7:6a:90:b6:96:
         b3:7b:b2:81:59:b0:79:5e:e4:78:d8:11:52:fd:19:5f:a8:dd:
         f9:e0:de:63:a1:6a:f5:1c:6a:d1:fd:0b:5c:b7:98:1a:36:a1:
         04:80:06:d7:62:ad:f7:7a:4c:a3:d5:07:43:cf:0b:d4:0e:93:
         6c:87:0f:57:57:92:52:73:44:4b:9a:99:c2:fe:21:6b:bf:78:
         b5:3f:f0:79:c6:6f:e3:98:6b:a0:d1:28:6b:db:4a:d2:61:03:
         40:9a:d6:65:89:5d:f4:22:93:ac:46:5a:6e:e1:7b:fb:3d:5b:
         b4:7c:55:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:23 2024 by rpki-client on console-ams.rpki-client.org