Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/2201EFC86E5211EEB027A974C4F9AE02.roa
File:                     2201EFC86E5211EEB027A974C4F9AE02.roa (raw, json)
Hash identifier:          lMkK8nXb5Yl5F9jOOdoaz3bU2vYTfy2+o+XXNd5XlBk=
Subject key identifier:   F3:A6:E7:F1:FA:F6:0D:25:6F:97:99:7F:F8:8B:51:61:C4:FE:7A:7B
Certificate issuer:       /CN=A91490C8/serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81
Certificate serial:       02
Authority key identifier: 33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/2201EFC86E5211EEB027A974C4F9AE02.roa
Signing time:             Thu 19 Oct 2023 07:35:53 +0000
ROA not before:           Thu 19 Oct 2023 07:35:53 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     38203
IP address blocks:        103.65.132.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.crl
                          rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 07:18:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91490C8/serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81
        Validity
            Not Before: Oct 19 07:35:53 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6530dc59-2f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:51:fa:f5:36:43:77:1f:11:f5:90:53:44:8a:
                    82:bd:b8:01:89:44:db:5b:82:e8:81:2b:1c:d1:90:
                    b0:b4:40:3f:3d:f1:31:b7:52:6c:c4:3a:17:5f:22:
                    8c:bb:ff:04:9d:41:7d:f3:25:f6:0e:58:42:a3:51:
                    e3:9e:21:7a:b9:ab:0a:45:bc:e1:ba:47:d7:14:69:
                    f6:1d:4b:81:4f:c6:3d:39:52:21:a9:ff:7a:de:88:
                    19:52:92:35:7e:e1:ee:a0:10:59:00:da:0b:46:a5:
                    a8:28:33:d1:eb:95:f7:cf:de:d7:7c:66:a1:76:9b:
                    b9:1a:cb:7b:e1:1a:fe:d2:d7:0f:fa:30:fe:2b:fd:
                    b8:1d:09:e7:a3:d8:8f:26:e2:dc:fc:64:44:a7:fe:
                    bb:00:62:4e:10:cc:d6:c9:c9:9d:42:ea:0c:33:96:
                    33:dd:8c:b2:0a:40:b5:f9:a1:64:f7:66:1e:16:52:
                    25:66:09:87:ad:5f:85:79:ff:f7:b8:c5:eb:5e:85:
                    ab:dc:db:2f:b2:9d:7c:39:3c:2b:36:64:97:c0:f0:
                    aa:b7:cb:a1:21:87:8e:55:b3:98:9e:45:74:2e:ce:
                    2a:e9:b5:0c:cb:5b:79:37:4c:78:10:7d:22:96:b6:
                    50:34:d5:97:19:fb:d1:53:91:58:99:bc:88:67:1b:
                    a4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A6:E7:F1:FA:F6:0D:25:6F:97:99:7F:F8:8B:51:61:C4:FE:7A:7B
            X509v3 Authority Key Identifier:
                keyid:33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/2201EFC86E5211EEB027A974C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:62:47:45:d4:2d:b3:04:8a:d3:d5:76:60:bb:d1:29:55:90:
         6d:35:27:90:8c:d5:64:cd:db:b2:f0:5b:ed:1d:fb:04:fc:8e:
         ca:ce:2d:b5:51:a2:c9:9b:78:73:90:22:93:d3:15:48:f9:3e:
         dd:0c:5a:29:a0:7c:99:f7:e7:13:6f:5d:e2:ee:82:92:31:79:
         95:96:7e:5b:be:c7:88:74:34:68:a3:9d:df:ed:f0:76:d3:d3:
         d8:e4:09:63:01:53:86:b1:f1:08:48:18:66:3d:42:cd:38:e8:
         54:df:b6:1c:dd:b1:1a:ee:e1:59:06:ff:3e:71:7a:41:aa:e9:
         b3:48:a0:9d:a1:0c:28:7b:b9:79:30:d3:59:d4:40:b3:f0:b7:
         60:40:ed:e3:d7:88:0b:b2:cf:7f:ac:b5:b0:14:21:4a:30:fa:
         d7:d3:41:53:cc:4c:e0:0c:8b:48:4b:0a:b3:a2:39:8e:cc:c0:
         54:6f:1d:10:26:b9:a6:6a:f9:98:5d:b1:bd:6b:52:7d:71:f1:
         60:c4:29:d3:89:fa:66:d6:41:0a:1a:de:07:cb:ee:73:10:dd:
         b6:72:ea:96:2c:b2:70:da:11:2b:eb:d8:49:97:cc:17:d0:c2:
         7c:17:ba:7f:80:73:fc:06:e7:17:aa:7b:38:7c:82:d4:7b:cb:
         3c:31:14:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:21:08 2024 by rpki-client on console-ams.rpki-client.org