Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/195EA596AC8711EEAC4B2427C4F9AE02.roa
File:                     195EA596AC8711EEAC4B2427C4F9AE02.roa (raw, json)
Hash identifier:          hhO5y4e/DFpdPdaj49uvYHcFr1O6lkR5HUgMp+6rOns=
Subject key identifier:   1D:37:33:33:B9:0E:22:BA:60:35:CB:2D:11:16:97:30:8C:A9:A9:CF
Certificate issuer:       /CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
Certificate serial:       01E4
Authority key identifier: E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/195EA596AC8711EEAC4B2427C4F9AE02.roa
Signing time:             Wed 03 Jul 2024 03:45:09 +0000
ROA not before:           Wed 03 Jul 2024 03:45:09 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     38136
IP address blocks:        103.188.234.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl
                          rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484 (0x1e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
        Validity
            Not Before: Jul  3 03:45:09 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6684c945-91d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:81:3d:6b:98:e4:ae:7a:8c:63:66:b1:9c:ad:
                    61:d8:98:36:2b:53:13:b8:02:95:6b:20:16:43:c3:
                    24:0c:a3:47:28:98:be:43:3d:79:3a:78:6b:dc:63:
                    3f:cb:9d:0a:22:b5:ed:3f:82:49:f1:ef:b3:e3:3f:
                    f6:8b:92:4e:83:d5:82:7c:16:07:0c:fb:34:94:a3:
                    79:d5:d5:67:20:32:9b:2b:ff:2c:55:4a:12:31:9e:
                    1a:a0:20:e9:53:e3:af:76:d7:67:67:42:78:10:71:
                    b7:2d:48:44:8e:48:e5:d3:82:47:4e:7c:bb:04:e1:
                    3d:05:aa:3b:88:11:8b:6a:8a:f6:10:c7:d0:b2:3f:
                    06:a6:9c:15:7c:f4:4c:12:d1:ff:19:e3:15:c7:38:
                    e2:29:fa:08:e5:54:a6:a0:6c:fb:57:bd:fe:5c:67:
                    71:b7:95:52:a0:75:3e:60:d0:89:62:a8:56:8b:92:
                    91:b8:05:c7:de:46:ae:a5:ed:6f:9f:ca:bd:5c:91:
                    89:0e:41:a8:d8:30:75:f9:8f:e0:24:1d:f6:c7:11:
                    ca:cf:3b:16:8c:39:85:08:12:84:cc:88:ba:14:30:
                    f1:b5:6c:23:da:5e:31:4d:13:81:6d:11:50:32:a2:
                    d2:64:a2:fa:68:c0:50:eb:83:66:2b:6f:d8:3c:8b:
                    8f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:37:33:33:B9:0E:22:BA:60:35:CB:2D:11:16:97:30:8C:A9:A9:CF
            X509v3 Authority Key Identifier:
                keyid:E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/195EA596AC8711EEAC4B2427C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:da:09:04:d2:81:3d:30:6a:e6:9f:0d:c4:db:10:93:bf:d6:
         a7:93:72:51:ad:e3:2b:95:b4:1a:b0:98:fe:81:42:65:b9:dd:
         2d:f0:02:56:6c:9b:07:b8:a8:6c:06:4d:31:b9:e8:e6:47:d4:
         99:f9:d8:1c:ea:9e:98:da:56:a7:c5:b7:c7:76:a5:24:3a:49:
         d9:23:2f:85:44:f7:2f:55:57:e5:cc:7f:c0:5f:f3:68:cf:49:
         b2:f8:d6:1f:2a:9d:1c:c0:97:e7:6e:89:79:88:22:3f:09:2e:
         07:05:54:f8:c4:12:5e:77:d7:8c:93:4a:bd:59:fa:24:13:d5:
         0e:b8:c5:4f:fa:6d:e1:38:c9:b7:4d:e9:ca:bc:5b:52:da:48:
         7d:23:49:f6:c2:54:09:3f:4c:91:ef:51:18:b3:5f:a4:39:8d:
         a7:7c:80:48:99:91:4c:57:2c:fa:18:14:7a:c6:c6:79:c2:eb:
         7b:d8:35:c2:b5:36:d1:d2:ec:5c:a8:c0:16:ac:03:f1:66:7a:
         b5:de:e4:52:b4:8d:68:4b:8d:3d:7d:26:da:58:51:c7:8a:c9:
         f6:97:b6:56:78:c2:cd:f5:20:d3:b0:b5:37:18:7c:02:fc:97:
         ea:a3:f1:40:b7:de:f0:93:7a:d4:f7:97:00:1f:c6:fa:89:ff:
         c5:bd:a1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:11:54 2024 by rpki-client on console-fra.rpki-client.org