Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/A92EC53AC95B11ED9ABE6935C4F9AE02.roa
File:                     A92EC53AC95B11ED9ABE6935C4F9AE02.roa (raw, json)
Hash identifier:          NLCu2j7NyVCfAMNadoeiUtb8mS5PqTykxmEmvgk0+vQ=
Subject key identifier:   B0:D3:E9:BA:6B:BA:98:68:7D:97:88:00:DA:52:7B:55:57:92:FB:AD
Certificate issuer:       /CN=A9165BD7/serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E
Certificate serial:       C7
Authority key identifier: 6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/A92EC53AC95B11ED9ABE6935C4F9AE02.roa
Signing time:             Wed 03 Apr 2024 06:39:14 +0000
ROA not before:           Wed 03 Apr 2024 06:39:14 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     133370
IP address blocks:        103.225.210.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl
                          rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 05:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165BD7/serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E
        Validity
            Not Before: Apr  3 06:39:14 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=660cf991-b942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a0:91:7a:6a:c9:74:38:83:a6:58:c2:35:27:
                    7a:b8:d0:20:8e:57:06:ec:3b:0a:57:47:92:20:25:
                    01:fc:0e:33:35:be:a4:8a:3d:d9:40:e9:eb:fa:0c:
                    0e:5d:c2:30:cb:4a:f0:79:a9:ee:5e:92:9b:8d:41:
                    64:a8:01:e0:83:74:56:8c:e6:04:81:6b:65:96:32:
                    dd:de:72:3f:f2:64:42:c7:45:96:42:83:ef:6a:fd:
                    bf:bc:5e:80:46:22:97:c8:22:80:99:e6:3d:18:ff:
                    e6:f1:f4:fd:6e:af:e0:08:93:bc:01:56:76:8e:48:
                    08:85:62:79:79:97:0e:69:e2:75:c4:38:e2:13:f1:
                    4d:54:cb:05:a9:93:3d:ac:38:1a:04:a6:9b:5a:d9:
                    4f:50:b0:56:dd:d4:9d:18:66:bc:6d:c0:60:04:95:
                    cd:2b:22:5d:f4:ec:ce:7f:82:d3:5f:97:1e:b4:2b:
                    b8:e4:0f:0b:8e:e3:b8:b3:f4:50:97:99:2a:d2:a9:
                    ae:78:22:2e:13:92:cb:59:54:01:85:fc:fc:0e:05:
                    84:09:ce:93:36:cf:4a:17:44:55:26:db:31:67:62:
                    0f:7d:e8:33:43:71:e7:ad:aa:c6:05:0f:48:d4:17:
                    57:4e:61:a0:d5:38:30:48:b3:45:54:a7:2c:a3:e4:
                    6d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D3:E9:BA:6B:BA:98:68:7D:97:88:00:DA:52:7B:55:57:92:FB:AD
            X509v3 Authority Key Identifier:
                keyid:6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/A92EC53AC95B11ED9ABE6935C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:74:60:e7:6e:b1:e8:cf:15:a6:f9:58:0d:9e:3d:f7:64:ce:
         0c:69:77:f3:61:f0:f0:28:c8:79:cd:98:dd:d1:87:90:4d:3e:
         7d:a8:b8:bd:98:a2:d1:5b:73:30:be:bf:8a:5c:4b:a4:c2:08:
         e8:80:e4:92:fb:85:8b:8a:81:33:d4:a1:a7:5d:9d:26:52:59:
         eb:b5:b2:9f:e1:69:01:58:41:00:9f:9a:50:11:51:0d:46:4b:
         26:e1:ce:b9:6d:ad:dd:1f:b2:6c:de:46:4c:e4:e3:3c:15:d2:
         a3:39:7f:74:c0:5a:40:26:41:73:24:f2:24:fd:1d:fd:7e:f1:
         8c:36:ed:de:0e:db:04:96:64:19:27:dc:75:ec:d5:92:8a:d1:
         cf:18:2c:d0:1f:af:64:bd:ab:92:36:25:e0:6b:1b:6c:3b:c1:
         b6:2c:50:98:8e:1e:46:41:93:65:f6:73:b5:0d:8b:5a:cb:4b:
         fd:cd:b0:af:e9:e6:54:06:62:54:7f:bd:de:d9:b8:1d:08:4f:
         9c:76:7d:8e:8b:0a:b7:2b:5e:34:3e:6b:65:34:99:54:a6:e4:
         04:55:cc:05:8a:5f:37:5d:68:f2:c4:f7:5a:49:01:46:b9:82:
         e9:67:7b:4a:17:46:94:af:95:09:8d:95:43:11:2e:50:6a:d9:
         0e:58:72:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:46:23 2024 by rpki-client on console-ams.rpki-client.org