Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/9622AF205A5811EBA7FCC36AC4F9AE02.roa
File:                     9622AF205A5811EBA7FCC36AC4F9AE02.roa (raw, json)
Hash identifier:          RHYMorQDL84peWOHsVgkD8C/ODaxiXG8DCT+xAvPHbY=
Subject key identifier:   B2:D2:AE:48:3C:33:A3:03:02:34:C7:1D:41:A0:30:08:E4:BF:BF:89
Certificate issuer:       /CN=A913397F/serialNumber=D233BB88B0889B64F14F5315D71613AA1674D007
Certificate serial:       05C2
Authority key identifier: D2:33:BB:88:B0:88:9B:64:F1:4F:53:15:D7:16:13:AA:16:74:D0:07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/9622AF205A5811EBA7FCC36AC4F9AE02.roa
Signing time:             Wed 03 Jan 2024 00:01:38 +0000
ROA not before:           Wed 03 Jan 2024 00:01:38 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     141453
IP address blocks:        103.159.181.0/24 maxlen: 24
                          2001:df5:8880::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.crl
                          rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 23:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1474 (0x5c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913397F/serialNumber=D233BB88B0889B64F14F5315D71613AA1674D007
        Validity
            Not Before: Jan  3 00:01:38 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=6594a3e1-4d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:59:f0:95:e9:c7:7b:c1:1f:e5:64:25:85:df:
                    ac:fe:2f:ea:fa:79:d3:68:5d:18:24:67:89:e2:26:
                    dc:7b:4f:4f:b4:71:5f:fa:75:d4:32:b8:e5:a2:8c:
                    31:d1:7e:6c:ba:e1:6a:4f:c5:b6:3d:98:0b:f0:52:
                    1b:a0:bd:d8:84:2c:0a:ee:41:c6:06:7f:34:f4:3c:
                    34:02:aa:09:63:f3:ae:4f:ad:a5:32:d7:5f:f5:93:
                    d2:30:43:72:bf:c3:a5:dc:d9:5c:c2:6b:ba:df:bb:
                    5e:7d:16:19:1b:66:de:69:fb:af:63:7b:b6:a9:6d:
                    07:12:66:52:91:f3:1c:1c:a6:dc:cf:bc:ef:30:5c:
                    c2:f2:36:91:48:bb:62:0c:1c:72:74:46:61:10:c6:
                    a6:9e:c6:f3:25:ca:74:77:d1:f1:70:1f:90:0e:8d:
                    fa:52:f6:7d:df:e2:94:63:0d:55:55:36:f0:75:4b:
                    c5:7c:11:35:1b:c4:a2:8b:b0:34:93:41:ee:c0:f9:
                    34:39:6a:19:4d:f4:50:8b:8c:9f:68:86:99:fe:fc:
                    59:35:3e:93:c0:f7:73:19:1f:5e:a6:8a:8a:3f:33:
                    9e:05:5f:8c:fe:3e:fe:10:fa:24:2d:00:e7:cb:07:
                    5f:54:e4:b0:fc:b6:14:a6:a8:7d:e5:0b:e2:52:c1:
                    9e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D2:AE:48:3C:33:A3:03:02:34:C7:1D:41:A0:30:08:E4:BF:BF:89
            X509v3 Authority Key Identifier:
                keyid:D2:33:BB:88:B0:88:9B:64:F1:4F:53:15:D7:16:13:AA:16:74:D0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/9622AF205A5811EBA7FCC36AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.181.0/24
                IPv6:
                  2001:df5:8880::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:f2:67:18:80:b1:c8:4b:73:71:df:73:04:da:f7:31:2b:ed:
         b1:c2:85:7f:b1:35:5f:e2:62:6a:18:c4:44:21:d4:0d:bd:af:
         fe:5e:53:7d:0b:97:02:0f:a8:56:8e:42:fe:ff:13:ae:db:a8:
         4b:16:a5:ee:54:fb:a2:49:44:af:c8:b5:ac:9b:fb:f2:57:77:
         7d:8a:70:a3:6d:fd:95:98:ae:4f:32:34:1e:e9:66:28:58:a8:
         2b:1a:4c:05:f4:7f:9a:5e:15:a7:86:de:14:a5:89:59:9e:25:
         85:df:13:b3:21:8c:b6:fe:d7:97:95:a3:16:91:47:4e:8b:1b:
         db:a5:f8:ba:47:94:ba:2f:86:4f:d8:a2:84:d6:63:c4:e1:9e:
         11:b4:1d:bb:d8:d4:97:95:ef:cc:38:a7:fe:17:c6:8e:c4:6f:
         9a:ed:ca:c9:65:2f:32:0a:cf:16:7a:6c:bf:d9:7b:c4:ab:8d:
         8b:58:b3:8b:fd:c1:64:dd:0d:9e:dc:37:3a:09:62:cd:d9:8c:
         ae:76:e0:12:1a:91:10:ff:1f:7c:4e:05:11:df:93:e4:cc:b4:
         9e:0e:e4:45:1c:67:71:91:20:4d:d9:42:8e:59:72:3d:3a:ea:
         70:19:dd:d9:15:85:97:ae:32:d4:fb:ad:10:f4:8b:92:a9:bf:
         03:46:34:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 00:53:15 2024 by rpki-client on console-ams.rpki-client.org