Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/B527A9C8604111EF97252962C4F9AE02.roa
File:                     B527A9C8604111EF97252962C4F9AE02.roa (raw, json)
Hash identifier:          c2522H0euUuP0sg8Mvl3kcMxQDDI8YZRAF5eJnZgtNo=
Subject key identifier:   34:10:94:A5:41:01:9B:2C:88:EC:4B:5F:45:C3:7A:6D:B0:B2:46:5B
Certificate issuer:       /CN=A9155001/serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE
Certificate serial:       08
Authority key identifier: 56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/B527A9C8604111EF97252962C4F9AE02.roa
Signing time:             Thu 22 Aug 2024 05:02:21 +0000
ROA not before:           Thu 22 Aug 2024 05:02:21 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     4826
IP address blocks:        103.65.233.0/24 maxlen: 24
                          103.220.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl
                          rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155001/serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE
        Validity
            Not Before: Aug 22 05:02:21 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66c6c65c-070f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cb:78:31:b1:2a:df:1c:6a:4e:96:6c:6b:f8:
                    7d:9e:6c:ec:2f:fe:0c:e0:e0:a6:22:dc:98:f0:35:
                    15:0f:2a:d0:d0:7a:39:3a:f2:35:70:6d:ae:1a:32:
                    84:0b:f1:84:bb:0f:2b:d3:56:ff:9a:c5:dc:72:67:
                    70:7c:78:73:ff:94:cc:f2:b2:a6:a9:9b:8c:bd:ac:
                    fc:89:ad:12:1f:ec:d7:3c:34:09:6e:37:9e:79:30:
                    60:3a:14:6e:db:22:05:a9:26:e9:e8:d6:38:5d:ca:
                    cd:53:b7:3a:19:60:89:05:54:36:71:9a:bd:51:43:
                    19:6f:6f:93:0f:c7:55:81:32:ba:74:de:21:ed:3f:
                    a7:a1:95:7f:ab:61:b6:dc:67:82:7f:c0:fc:0e:7f:
                    72:5a:a9:be:a0:53:7f:aa:0b:50:c6:66:56:81:d6:
                    b3:61:b1:2c:79:ee:be:4b:f4:91:02:53:d4:cb:3e:
                    00:e6:37:38:ea:5c:26:ad:59:a7:a8:d3:d5:d4:a0:
                    40:ea:97:57:f8:42:52:01:02:6f:cf:46:5e:a0:b5:
                    a4:ad:cf:ec:31:0e:25:10:fa:6b:0c:c5:ad:73:be:
                    9e:6b:31:ad:6e:3a:91:b9:7e:9d:12:39:58:28:ac:
                    06:10:0e:08:f1:c7:67:e0:4a:c0:c4:e4:78:a3:e7:
                    d2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:10:94:A5:41:01:9B:2C:88:EC:4B:5F:45:C3:7A:6D:B0:B2:46:5B
            X509v3 Authority Key Identifier:
                keyid:56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/B527A9C8604111EF97252962C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.233.0/24
                  103.220.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:c8:7c:33:2f:d3:75:0f:2f:d0:b2:17:4d:dd:cd:81:10:e0:
         25:78:d6:e2:5d:4a:1c:bf:41:3f:75:1c:18:2d:75:62:d1:2f:
         53:65:81:af:9f:e8:aa:0b:e1:61:ca:71:86:08:40:94:f8:c2:
         ce:42:ad:a0:f8:40:83:42:98:19:03:4c:13:ca:b5:4c:1e:a0:
         39:03:ca:a9:b2:81:e7:bb:a7:f6:f0:f1:1f:4b:7d:7e:99:b5:
         f9:79:d7:62:3c:af:95:b3:f4:40:6c:22:fb:b1:b1:69:a0:2a:
         81:16:97:41:0a:07:66:31:68:5e:00:7a:49:7a:e4:a4:b6:7d:
         76:09:dd:10:48:b0:55:96:88:dd:86:cc:1d:1f:a3:47:4e:39:
         b9:6e:48:cb:2e:58:1c:55:9b:88:cc:8b:5c:4e:2a:36:bd:1d:
         7a:be:11:3e:0a:f1:d3:70:13:ca:9b:90:96:49:9f:2a:48:42:
         75:02:a5:ff:0d:0d:e0:87:1b:1b:c0:b8:d1:39:53:db:0e:a7:
         0a:e3:98:2d:f6:43:26:bd:41:0c:0b:e6:d4:c1:22:a1:b7:89:
         5b:bc:bc:b1:aa:5a:ed:58:d2:a9:23:cc:3f:99:12:d4:0d:ea:
         0e:47:0b:7b:cf:f2:3d:ef:96:1a:6c:1f:b8:d9:c1:1c:98:63:
         ef:43:11:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:04 2024 by rpki-client on console-ams.rpki-client.org