Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/5AA0DC6EB13E11EBA7704F2CC4F9AE02.roa
File:                     5AA0DC6EB13E11EBA7704F2CC4F9AE02.roa (raw, json)
Hash identifier:          /w5fG5I8SVvb6KU0qV88HCDiJhOJmaZaXcIt+zZPytA=
Subject key identifier:   11:1B:D0:B8:2A:0E:49:62:0D:D5:DC:BB:A0:E1:58:BE:5E:BA:13:B3
Certificate issuer:       /CN=A9166646/serialNumber=E03F58007B97290BA52343597917B2B6AB5DD2E9
Certificate serial:       0569
Authority key identifier: E0:3F:58:00:7B:97:29:0B:A5:23:43:59:79:17:B2:B6:AB:5D:D2:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4D9YAHuXKQulI0NZeReytqtd0uk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/5AA0DC6EB13E11EBA7704F2CC4F9AE02.roa
Signing time:             Wed 11 Sep 2024 01:33:01 +0000
ROA not before:           Wed 11 Sep 2024 01:33:01 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     141036
IP address blocks:        103.155.38.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.crl
                          rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4D9YAHuXKQulI0NZeReytqtd0uk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1385 (0x569)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166646/serialNumber=E03F58007B97290BA52343597917B2B6AB5DD2E9
        Validity
            Not Before: Sep 11 01:33:01 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66e0f34d-58e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:e9:e1:b8:54:32:d1:a7:88:39:5a:f0:6d:
                    81:e9:e7:be:98:e7:9c:2e:dc:68:ec:f0:ba:59:06:
                    81:be:b2:1b:ff:0f:a2:87:ff:1e:09:b4:ab:f6:6c:
                    eb:3b:7b:c7:da:fa:d1:f5:ed:3a:04:38:fa:85:0b:
                    fd:a5:ad:6b:ff:b6:41:f4:3e:a6:5e:83:39:2a:d1:
                    92:a1:5a:f6:0c:3e:a7:7d:43:74:eb:25:11:b9:2b:
                    6c:ef:ea:8b:62:be:81:62:7a:53:20:89:36:bf:c3:
                    47:21:55:c0:97:25:72:c9:d6:a5:68:fa:59:de:e7:
                    fd:df:97:33:3e:a0:ec:7b:f0:19:f1:22:ec:92:4f:
                    bd:38:bd:44:a3:de:22:fd:25:3f:df:30:27:ce:04:
                    b4:f0:6b:a8:10:58:06:f5:5d:c5:67:d4:a9:e2:c1:
                    59:6e:d7:15:9c:2d:c7:71:0e:ed:36:82:9a:7c:67:
                    7a:61:e3:ee:37:48:d8:c2:ff:d5:04:c6:af:5f:2f:
                    32:a3:fa:e3:a8:61:89:e9:fa:81:49:e6:9f:b0:4a:
                    10:50:52:78:48:c4:40:00:3a:47:a4:af:35:4b:df:
                    4b:e9:dc:22:93:24:0c:62:be:9a:78:68:15:4b:5f:
                    09:55:5b:f4:01:c6:bd:93:6f:f3:f9:83:53:ce:0a:
                    09:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:1B:D0:B8:2A:0E:49:62:0D:D5:DC:BB:A0:E1:58:BE:5E:BA:13:B3
            X509v3 Authority Key Identifier:
                keyid:E0:3F:58:00:7B:97:29:0B:A5:23:43:59:79:17:B2:B6:AB:5D:D2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4D9YAHuXKQulI0NZeReytqtd0uk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/5AA0DC6EB13E11EBA7704F2CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:fd:8c:17:55:20:d0:0a:22:bd:8e:31:cd:54:af:84:5a:e8:
         de:04:b4:8b:a0:c8:4f:dd:f2:41:b2:94:75:4c:3c:e0:77:35:
         ff:42:62:d3:f0:9b:8b:60:cd:86:a6:c2:d1:14:b5:cc:f0:72:
         fa:52:a0:b6:fe:c1:05:9d:a3:8c:23:0e:c6:a0:19:87:69:75:
         49:c0:2b:49:5e:1f:23:da:44:f3:40:e1:b8:1d:19:6b:26:d9:
         5d:2d:f3:ab:48:50:76:92:76:ae:69:a4:50:82:81:ac:63:b2:
         7d:31:f6:fe:9f:af:75:14:f8:aa:94:af:46:4f:31:ce:a8:d9:
         12:48:ea:a6:09:c8:e2:29:b8:00:b5:25:4e:d6:99:af:d7:82:
         20:cb:80:3a:20:88:28:9a:58:2e:2e:3a:f9:c6:9d:62:62:83:
         8d:35:e2:39:a6:6a:04:1a:f0:13:2c:2c:7a:05:5d:2d:4c:e3:
         91:9f:b9:b5:4a:f1:37:5d:0f:4a:57:ad:91:4d:70:c9:dd:11:
         5b:38:fe:1a:85:ad:48:57:33:a1:5f:b9:b1:bf:57:7b:1f:d2:
         b6:6a:be:bc:df:db:ff:4f:3b:19:80:bb:87:2e:43:ba:f5:39:
         d3:8e:0e:5f:ff:25:b7:c7:39:a5:7c:79:c9:a5:62:36:45:72:
         16:e4:3d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:41 2024 by rpki-client on console-ams.rpki-client.org