Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/3B62C20EFF3911EDBCDB5046C4F9AE02.roa
File:                     3B62C20EFF3911EDBCDB5046C4F9AE02.roa (raw, json)
Hash identifier:          JuNByZogw7Q3Wr5AqPKRTQsxkAmTBvInp+ozIJH6zCk=
Subject key identifier:   7E:28:A4:F8:AD:33:8C:B2:C1:C5:2D:2C:D1:5A:97:FB:B7:DC:C8:10
Certificate issuer:       /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Certificate serial:       02AF
Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/3B62C20EFF3911EDBCDB5046C4F9AE02.roa
Signing time:             Mon 13 May 2024 04:07:58 +0000
ROA not before:           Mon 13 May 2024 04:07:58 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     18041
IP address blocks:        103.186.118.0/23 maxlen: 24
                          2400:70e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
                          rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 687 (0x2af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
        Validity
            Not Before: May 13 04:07:58 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6641921e-ac20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:22:4e:db:b5:08:fe:4b:86:3c:d5:bc:ee:80:
                    f5:ca:a5:89:05:84:e9:f4:47:5b:03:e3:2d:18:5c:
                    7b:08:bb:f5:8a:a8:2c:0c:c9:32:af:57:4e:27:e1:
                    0e:7d:e4:5b:6c:2f:c9:da:cb:bf:a6:7b:30:d6:0b:
                    35:4b:01:46:99:07:11:1b:06:29:4f:23:42:89:f8:
                    1f:e3:71:4c:8c:64:70:36:cb:8b:e9:f5:b3:0c:4b:
                    02:0a:ad:64:41:78:80:18:49:6a:69:ee:47:76:e8:
                    ee:55:63:50:00:db:76:c8:96:1f:93:69:7a:12:8a:
                    ce:b0:68:17:6d:53:11:72:93:ea:28:67:81:b6:3e:
                    ec:dd:e1:42:89:71:1e:37:bb:e8:3b:a6:06:f3:70:
                    64:69:ce:e3:d5:af:38:ce:39:c6:a8:00:27:e2:7e:
                    30:ef:c0:ff:43:b6:9c:41:6b:a3:f6:64:70:3f:36:
                    b4:36:20:1b:b4:a2:17:89:07:0d:4e:65:5b:bb:85:
                    6d:10:3b:95:5e:e7:57:4b:63:15:47:c4:11:4b:0e:
                    55:b4:b2:4b:d1:5c:07:8c:48:a5:52:c4:2d:04:22:
                    f7:5a:03:b7:8f:66:7c:41:38:00:3a:d7:05:b7:78:
                    b3:4c:c0:aa:ac:2f:8a:7a:9b:9d:29:46:6f:4e:4b:
                    62:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:28:A4:F8:AD:33:8C:B2:C1:C5:2D:2C:D1:5A:97:FB:B7:DC:C8:10
            X509v3 Authority Key Identifier:
                keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/3B62C20EFF3911EDBCDB5046C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.118.0/23
                IPv6:
                  2400:70e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:d5:27:9a:d6:f7:cb:c5:0c:db:79:1f:84:1f:6f:c0:9e:f8:
         d3:71:1a:15:d2:1c:ae:77:9d:0a:8d:c3:fb:09:ca:00:08:8e:
         c6:8a:99:dc:40:37:4e:34:39:96:d3:59:1a:09:e5:ec:78:4c:
         62:12:08:90:13:70:6c:62:a0:68:9f:b3:7a:da:ed:23:b9:59:
         64:04:a3:e2:4b:1f:75:97:99:d2:19:6f:8a:52:3e:ef:9b:cd:
         81:52:eb:59:60:17:2d:1d:57:58:6b:d6:24:9f:48:e4:af:b8:
         4b:84:19:5c:71:e2:47:e2:c1:79:72:14:3d:5e:05:08:41:e1:
         8a:71:ee:9b:86:9b:af:be:2b:25:90:86:21:62:61:6e:26:1b:
         58:bf:04:40:95:b1:6b:91:78:04:95:4c:75:17:a8:ed:a8:84:
         05:5b:2c:75:b0:a5:5a:75:97:81:07:37:3c:cd:51:e8:13:94:
         42:2a:2d:ac:00:3f:c5:6b:55:25:0e:9d:b0:85:81:84:77:84:
         66:fc:dd:46:e0:7c:2f:cc:74:8d:dc:6e:ac:93:2b:8b:15:ba:
         74:60:99:88:e2:8d:aa:4d:7b:7f:b0:29:06:3c:59:ef:af:a2:
         71:33:03:65:cb:04:5e:05:61:03:03:a8:71:a8:3b:2b:06:63:
         25:82:18:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:39 2024 by rpki-client on console-ams.rpki-client.org