Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/89317668E87B11E785247983C4F9AE02.roa
File:                     89317668E87B11E785247983C4F9AE02.roa (raw, json)
Hash identifier:          1qrDjblkeP2tM8jzoukBBQ3Hg5xw3h46ujdJa0cnruI=
Subject key identifier:   92:1B:D8:85:24:91:F0:F3:54:0D:BF:3E:A8:63:CC:10:04:C0:58:43
Certificate issuer:       /CN=A916E64F/serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9
Certificate serial:       15F7
Authority key identifier: 86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/89317668E87B11E785247983C4F9AE02.roa
Signing time:             Thu 30 Nov 2023 17:44:43 +0000
ROA not before:           Thu 30 Nov 2023 17:44:43 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     133738
IP address blocks:        103.103.100.0/22 maxlen: 24
                          2401:f140::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl
                          rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 17:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5623 (0x15f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E64F/serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9
        Validity
            Not Before: Nov 30 17:44:43 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6568ca0b-5713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8c:cb:f0:c6:b7:92:c8:22:f9:bc:d0:ef:f9:
                    7b:7e:b8:97:48:01:9e:64:c8:c2:84:dc:02:84:99:
                    19:2f:b8:79:80:e4:c7:c8:dd:d1:b1:4d:ab:e4:e7:
                    3c:af:d7:1a:07:df:f8:f9:ee:04:5c:4d:9a:ef:dd:
                    39:39:ed:c6:2c:b3:b1:d2:7e:33:91:79:67:c9:17:
                    a1:54:16:18:67:d6:a3:82:fd:50:c3:63:c4:c7:1e:
                    b5:52:6b:0a:cd:0b:53:9b:5f:c4:08:c0:08:b2:4a:
                    ec:0a:54:13:13:69:49:73:72:98:5d:31:97:b0:8c:
                    03:95:94:43:26:2e:47:e8:d2:08:e1:c4:51:e6:a4:
                    6a:6f:5d:9d:5f:6c:c2:cb:9e:cc:e7:9e:5e:1b:09:
                    c4:f4:82:23:3e:81:88:a0:85:4b:a7:6c:8b:3c:4b:
                    c7:27:c8:00:ba:c0:53:d0:42:41:e4:7d:91:8f:d6:
                    e0:c9:e2:24:73:48:70:ee:39:c1:c2:0d:f7:42:e3:
                    5e:07:d1:fc:70:ac:c6:95:92:55:34:67:fa:25:c9:
                    0c:25:f0:18:71:fd:b2:7b:1c:a3:2d:86:d6:f0:36:
                    66:81:cb:a5:6e:b6:97:ff:19:1e:95:c0:2c:aa:e9:
                    f4:91:5c:fd:b2:cf:8e:e2:7e:6a:57:b0:82:1d:87:
                    8c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1B:D8:85:24:91:F0:F3:54:0D:BF:3E:A8:63:CC:10:04:C0:58:43
            X509v3 Authority Key Identifier:
                keyid:86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/89317668E87B11E785247983C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.100.0/22
                IPv6:
                  2401:f140::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:31:f0:5a:04:7d:c5:d4:ab:30:38:d5:ba:57:c4:ab:92:0c:
         b4:c1:22:fc:d3:a1:05:80:7d:f8:fd:6b:c6:e7:2c:ae:0c:42:
         a1:fd:9f:80:f8:94:08:24:c1:b3:d0:0b:06:69:24:06:d4:35:
         05:b5:06:64:5c:ec:10:b7:5a:52:52:bd:fa:aa:00:1e:c9:39:
         d8:d2:1c:78:50:ec:b5:5b:3f:7b:7b:da:3c:de:53:50:46:8d:
         7c:4b:04:9c:32:a9:db:6b:5d:ae:df:0b:07:2a:eb:53:28:55:
         f8:32:8a:43:eb:40:37:71:66:fd:ba:60:30:6c:54:2e:a0:d0:
         b2:43:56:68:a3:e5:bd:a0:a9:db:9c:a3:6c:42:1a:e3:75:59:
         c8:4f:12:79:b2:71:f5:4d:c0:36:b7:e2:80:3f:94:53:f1:cb:
         0d:60:96:e9:8b:98:dc:e4:08:54:a5:76:70:0d:f9:df:9c:ab:
         73:70:92:85:96:33:64:93:60:84:86:f1:62:00:eb:31:a2:72:
         7f:e8:17:4b:31:11:10:49:ee:48:d7:df:74:0b:13:3e:5a:8d:
         cb:44:93:e2:d4:a7:33:0b:c3:23:62:80:43:a1:b8:bf:d9:fa:
         f6:ee:50:1d:6b:b2:5e:c2:a1:73:e0:74:f5:5f:4a:0b:15:83:
         28:51:e0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 19:55:14 2024 by rpki-client on console-fra.rpki-client.org