Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/0A2301B2FCEB11EEBA59DC2BC4F9AE02.roa
File:                     0A2301B2FCEB11EEBA59DC2BC4F9AE02.roa (raw, json)
Hash identifier:          /AyQMqWZ57bgXPGZC6xfQU7bxlqUkG6/f7HGBOIGwIM=
Subject key identifier:   18:4F:B2:BC:FF:A9:60:D7:3D:57:FE:0B:A2:18:4D:0B:D9:0F:C5:58
Certificate issuer:       /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
Certificate serial:       06
Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/0A2301B2FCEB11EEBA59DC2BC4F9AE02.roa
Signing time:             Wed 17 Apr 2024 18:48:11 +0000
ROA not before:           Wed 17 Apr 2024 18:48:11 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     38136
IP address blocks:        103.14.92.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl
                          rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
        Validity
            Not Before: Apr 17 18:48:11 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6620196b-983b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f9:74:a4:0f:8f:0e:ed:cb:05:97:1b:0d:af:
                    d3:55:37:21:53:64:9c:99:d5:70:cf:5e:32:aa:35:
                    38:e9:3b:15:4b:7b:2f:1b:d0:de:d1:b1:cb:52:c5:
                    09:48:a6:16:6b:89:8b:eb:df:8e:c3:d5:3f:cd:f5:
                    78:44:26:81:ed:18:54:14:f5:b8:85:4e:c1:e9:b9:
                    4d:c0:dd:f5:73:59:96:4e:7e:4a:64:72:da:4e:da:
                    32:3c:ef:d6:6d:98:44:eb:30:4c:39:0c:bb:22:91:
                    35:5d:9c:75:66:c8:1f:49:12:3e:ca:58:cf:01:23:
                    7c:62:a6:86:25:5c:cb:e1:bf:e7:9a:bb:67:ab:28:
                    f2:2e:eb:a3:5b:f6:41:bd:89:d1:23:77:06:c0:d3:
                    df:18:24:e4:9b:07:98:22:86:28:fb:26:db:6f:a6:
                    64:5b:99:90:33:0f:28:01:32:30:6e:f3:3d:17:41:
                    45:12:52:e9:7b:46:bf:6e:5c:74:72:61:78:6b:4e:
                    62:03:60:b8:55:2b:fd:41:74:f1:a3:99:95:bc:14:
                    59:f9:00:e2:cf:63:d1:a1:f2:be:ad:db:92:4e:83:
                    cd:fa:2e:59:a8:0d:70:fb:da:b6:3a:eb:57:51:39:
                    8c:67:50:00:93:1d:05:d6:22:4d:cc:71:6b:5a:bf:
                    68:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4F:B2:BC:FF:A9:60:D7:3D:57:FE:0B:A2:18:4D:0B:D9:0F:C5:58
            X509v3 Authority Key Identifier:
                keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/0A2301B2FCEB11EEBA59DC2BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:63:66:fb:78:9f:50:e3:46:a7:54:f5:40:c2:ec:21:d5:93:
         53:a1:9e:61:c0:2d:4a:28:0a:a9:82:fd:e6:b5:a7:c9:ac:0f:
         e3:c7:c2:23:b3:4b:9e:16:ed:e1:85:c8:98:91:3a:6c:d2:56:
         0d:ad:40:94:c6:42:11:86:a5:26:e7:66:51:8e:82:ad:c3:09:
         a4:66:fa:61:9d:b9:36:a0:ac:3e:56:b2:56:2f:98:41:65:b0:
         59:06:45:8b:67:0b:41:75:01:09:b5:35:d9:6d:43:92:34:d3:
         bf:86:80:ad:38:30:e6:9f:b6:08:9f:36:79:81:8d:b9:b5:aa:
         fb:e4:fe:b8:39:f9:85:1a:dd:0e:a6:3e:3e:b9:a7:55:b8:d8:
         76:43:a3:21:ef:5b:3f:09:2c:71:a3:6d:ca:ff:b4:a2:2d:4d:
         b3:2b:5d:33:35:17:e2:e6:4b:9a:c8:91:da:46:c5:6b:5d:e8:
         05:53:f6:af:07:ed:53:34:68:ea:12:60:d8:05:c8:41:31:f1:
         fd:ab:2a:e6:d9:f3:6a:c6:cf:c5:3d:bc:9a:84:0f:fa:86:9c:
         bb:1d:95:76:a1:e8:44:9a:a1:d1:a7:05:a8:52:3a:07:32:a2:
         8b:a1:69:3e:41:bf:03:a1:65:e7:b9:f8:b5:f1:a8:e0:15:3a:
         13:93:d3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:16 2024 by rpki-client on console-fra.rpki-client.org