Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/195EA596AC8711EEAC4B2427C4F9AE02.roa
File:                     195EA596AC8711EEAC4B2427C4F9AE02.roa (raw, json)
Hash identifier:          k6uvbVGtGi58Ry2nuRuJB3leni9kRHqzzj/ygd+RWIA=
Subject key identifier:   01:06:2A:4F:38:EF:FB:7D:54:7B:B9:57:79:37:55:A4:EA:D5:AC:FB
Certificate issuer:       /CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
Certificate serial:       0181
Authority key identifier: E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/195EA596AC8711EEAC4B2427C4F9AE02.roa
Signing time:             Sat 06 Jan 2024 11:31:14 +0000
ROA not before:           Sat 06 Jan 2024 11:31:14 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     38136
IP address blocks:        103.188.234.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl
                          rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 May 2024 04:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
        Validity
            Not Before: Jan  6 11:31:14 2024 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=65993a02-1187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6c:53:31:4a:ce:1f:6b:97:b4:18:6b:4d:40:
                    ff:75:99:68:1c:45:0d:91:4c:22:dd:bf:e1:4a:13:
                    36:04:b0:53:7a:87:9b:15:78:fd:35:1f:b9:4d:80:
                    2f:3f:12:79:2e:56:44:d0:84:56:e2:95:c9:1d:7c:
                    a8:3c:6b:ec:a8:a4:c8:a3:bf:9b:f0:03:e6:a5:4b:
                    19:60:b6:35:d8:3a:ff:a0:83:ed:73:d6:e6:c7:78:
                    7d:ec:da:37:53:6d:cb:c3:93:85:db:c5:61:d2:d9:
                    0d:d1:83:9c:04:20:47:06:b2:8f:c4:f7:c3:c0:35:
                    16:da:44:ab:b1:50:b8:9c:2d:e1:fd:6f:4c:d1:88:
                    0d:c5:e5:35:7d:5c:f8:f1:1b:8b:ba:09:f6:61:6f:
                    d0:e3:b9:bc:b6:f5:34:4f:3f:32:5f:8b:2e:f9:51:
                    97:7b:07:4c:2a:2e:6d:97:42:b7:6f:62:2b:50:67:
                    0a:dd:f8:0d:24:3d:66:b4:0b:9a:29:7f:fc:75:25:
                    43:64:31:dd:b1:f9:44:34:d6:25:b0:18:82:f5:b6:
                    ae:bf:a2:93:fd:e7:26:9b:b3:22:a5:8d:4b:94:1a:
                    15:c5:a0:cc:1c:f5:7b:1d:55:26:64:26:c8:98:4d:
                    3f:75:aa:c1:83:ab:de:4f:a4:1a:c3:9e:87:88:69:
                    04:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:06:2A:4F:38:EF:FB:7D:54:7B:B9:57:79:37:55:A4:EA:D5:AC:FB
            X509v3 Authority Key Identifier:
                keyid:E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/195EA596AC8711EEAC4B2427C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:a6:fb:a1:40:c1:4f:99:a5:07:d8:ed:4e:69:45:ee:10:17:
         aa:6b:09:42:ed:2b:65:4d:ba:cd:88:c9:70:2e:29:31:f5:82:
         61:19:bd:cb:74:30:f8:43:60:42:b3:05:72:42:1e:20:d4:62:
         45:03:ed:46:65:28:21:0a:fe:83:8f:0f:26:b5:60:ce:ca:e6:
         e4:5d:db:58:42:32:72:32:0c:cd:4d:46:e4:15:33:21:0f:bd:
         9b:29:29:ec:4a:cb:26:61:6d:00:84:e8:8c:0a:af:73:de:30:
         20:f0:7f:41:58:59:d7:29:0e:df:c9:fd:4e:48:fc:94:7a:bf:
         92:4f:76:9a:8f:46:9d:2c:7d:51:3f:da:58:c2:22:33:f5:fa:
         65:99:34:83:93:3a:a4:97:a4:c2:e9:44:cd:49:45:71:81:26:
         96:d9:72:8f:e9:46:bc:73:27:85:76:4a:c4:29:ee:e2:42:39:
         cb:52:2d:b1:25:ae:83:25:bf:09:fb:dc:44:ce:34:84:04:56:
         d9:91:0a:fd:ff:64:20:11:51:88:28:c9:a7:a8:cb:53:49:09:
         9a:f4:fa:1e:52:7f:58:00:3f:43:dd:84:55:ee:6a:18:77:b6:
         f0:ab:89:a0:55:73:87:b5:b9:6c:84:f1:d8:c8:0c:46:95:9c:
         ae:9b:fe:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 05:24:55 2024 by rpki-client on console-fra.rpki-client.org