Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/2201EFC86E5211EEB027A974C4F9AE02.roa
File:                     2201EFC86E5211EEB027A974C4F9AE02.roa (raw, json)
Hash identifier:          4nQ3/xG4CFEbotiusShRvyeKgM0UbijAal8OSC/u9HU=
Subject key identifier:   0E:A8:0D:71:9D:51:FD:79:CB:6B:3B:B1:94:9C:3B:78:DC:32:EE:AA
Certificate issuer:       /CN=A91490C8/serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81
Certificate serial:       C5
Authority key identifier: 33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/2201EFC86E5211EEB027A974C4F9AE02.roa
Signing time:             Sun 03 Nov 2024 03:57:54 +0000
ROA not before:           Sun 03 Nov 2024 03:57:54 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     38203
IP address blocks:        103.65.132.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.crl
                          rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:51:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91490C8/serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81
        Validity
            Not Before: Nov  3 03:57:54 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6726f4c2-299c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:86:4b:a0:4a:07:c5:2f:8a:6b:ee:6a:54:cd:
                    6c:7d:50:a9:65:1c:9a:c4:fc:c2:a8:c6:e5:26:8f:
                    54:66:6b:d5:b6:e9:d7:a4:f9:ad:b6:a2:58:5a:a2:
                    51:2a:cf:2e:94:b4:37:1e:62:80:24:b5:b0:7c:b2:
                    df:39:8a:b8:92:c4:f2:01:71:78:37:f4:75:c9:07:
                    48:45:08:77:a0:48:34:b9:c8:24:5d:64:af:7e:0b:
                    a0:e5:cc:6f:c9:0c:a3:13:32:24:10:c8:50:23:17:
                    c5:2e:01:c5:50:22:aa:dd:c7:9e:f1:a7:a8:d1:90:
                    a3:4d:a1:ee:33:50:da:aa:d7:a9:9f:26:6b:dc:9a:
                    e5:6e:57:27:23:c0:2a:76:d5:8c:ff:de:15:01:ed:
                    64:55:13:48:db:98:43:24:31:c9:37:2b:79:a5:28:
                    26:39:ac:09:cf:c7:64:71:e4:dd:32:e8:11:cf:07:
                    85:51:b0:94:e4:79:83:7a:c9:53:00:05:c6:67:56:
                    69:70:4d:5f:5d:d0:c9:4d:e1:00:58:b6:0a:07:88:
                    d4:51:da:81:a1:2a:b5:1d:2a:e1:72:d0:c6:2a:7f:
                    ab:21:02:e9:52:84:b7:c6:07:45:91:28:fe:20:64:
                    ed:de:cb:7a:c7:5c:c7:a6:eb:49:b7:b5:6c:40:aa:
                    89:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A8:0D:71:9D:51:FD:79:CB:6B:3B:B1:94:9C:3B:78:DC:32:EE:AA
            X509v3 Authority Key Identifier:
                keyid:33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/2201EFC86E5211EEB027A974C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:e8:90:e1:9b:1d:4f:0f:15:2b:cc:c5:4e:8b:0e:ff:90:af:
         99:31:4f:46:af:04:70:27:2c:9d:72:50:9b:96:da:34:c0:ae:
         d7:e1:72:88:28:7d:9b:b9:97:8b:d1:96:c4:fc:13:62:53:9b:
         bf:16:e2:33:e8:61:ff:7c:2e:53:33:29:8c:76:85:26:e2:1b:
         fe:87:be:e5:bd:a0:ac:bd:e4:8c:59:4b:6a:2f:8c:56:14:bd:
         f8:11:c1:50:53:a5:15:73:cf:58:a4:2f:55:ec:bb:a5:28:af:
         38:13:ee:64:30:dc:58:2d:e5:04:68:37:9e:bc:8d:ec:b3:57:
         d5:69:94:e7:c8:d8:95:07:80:c7:5b:8d:48:63:5b:18:8f:cb:
         c7:5e:63:df:d1:c0:25:3b:13:3c:0b:59:9b:db:0b:69:20:69:
         58:e8:19:81:65:69:1e:08:63:46:f4:b6:7f:8b:b2:e0:5a:ed:
         f0:0e:ed:ca:f7:92:ba:2e:99:1e:2f:62:2f:20:e5:1d:f4:ce:
         f8:d9:52:f8:91:e8:34:79:1a:41:61:7c:b7:15:c4:2e:7d:a5:
         d0:60:2f:70:75:f3:4b:da:e3:41:fa:f6:54:c8:cb:b8:61:40:
         5e:db:37:ab:33:c6:c6:89:80:cc:ee:fb:78:fd:bd:e1:f7:b7:
         16:93:76:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:56 2024 by rpki-client on console-fra.rpki-client.org