Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/3C63FD0A5A2611EF8C4A222CC4F9AE02.roa
File:                     3C63FD0A5A2611EF8C4A222CC4F9AE02.roa (raw, json)
Hash identifier:          FxRO0iN6PMQbWxcc5itr3YJ/gDQA6nqqJ4qZu1u7NVA=
Subject key identifier:   19:3A:3A:8E:9B:2B:8D:ED:43:07:B1:7F:83:B8:90:CC:3E:F0:5E:4F
Certificate issuer:       /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
Certificate serial:       0282
Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/3C63FD0A5A2611EF8C4A222CC4F9AE02.roa
Signing time:             Wed 14 Aug 2024 10:16:14 +0000
ROA not before:           Wed 14 Aug 2024 10:16:14 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     137823
IP address blocks:        103.185.226.0/24 maxlen: 24
                          103.185.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl
                          rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:06:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 642 (0x282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
        Validity
            Not Before: Aug 14 10:16:14 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66bc83ee-4641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4a:8b:82:87:65:94:4c:32:58:7a:51:5e:52:
                    79:c5:81:27:a9:9f:eb:33:66:04:ec:18:c0:ba:37:
                    e4:f0:be:1e:b7:3c:ab:f0:ff:a9:b7:85:0e:c7:8b:
                    32:dd:37:0a:b2:a5:b8:eb:54:da:f7:c0:35:a5:a3:
                    db:1f:46:ac:a2:b8:b8:24:24:ee:7d:ec:ca:c8:c5:
                    b3:65:5a:8c:43:d6:4a:5b:54:b8:77:fd:26:9a:70:
                    9c:d0:84:ba:79:e6:18:43:aa:fb:e5:ab:93:38:9d:
                    85:5c:a2:ba:32:f0:94:0c:38:0d:be:e1:e8:61:be:
                    5f:5f:71:9f:18:77:15:9b:68:e6:d3:9f:10:4b:3a:
                    bc:9a:f9:39:df:f9:62:5e:07:1c:8f:1e:0b:c8:80:
                    4d:7e:17:af:cd:13:19:76:03:d2:9b:a6:f7:35:61:
                    d6:d5:78:96:48:39:66:92:7a:92:f0:7c:6e:7c:20:
                    90:7f:04:b7:c7:ea:33:a1:af:a6:60:b1:1b:75:88:
                    90:df:7a:90:58:2c:bd:a4:e0:24:8b:d3:63:10:fa:
                    88:25:2c:d8:de:b2:33:e3:cc:02:50:29:57:05:75:
                    8f:76:0c:cd:83:18:f4:9f:56:db:1c:d0:9e:5d:d3:
                    12:40:60:ae:8a:1d:ca:14:64:0f:2e:df:dd:53:f6:
                    13:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3A:3A:8E:9B:2B:8D:ED:43:07:B1:7F:83:B8:90:CC:3E:F0:5E:4F
            X509v3 Authority Key Identifier:
                keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/3C63FD0A5A2611EF8C4A222CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:b5:b6:eb:32:21:82:36:2a:9a:2e:97:b2:0d:38:a1:8d:f6:
         c9:22:39:82:7a:88:d6:ec:a4:d1:6f:4e:e2:78:77:cd:dd:10:
         ef:97:53:cb:98:0d:9c:3c:6a:b1:98:74:f4:ee:41:19:c3:09:
         c7:e0:01:22:2e:c2:c2:fd:b9:c3:f2:6d:34:7c:f2:79:82:30:
         b4:b6:89:3b:69:0d:61:38:c9:f6:cb:8f:c0:aa:9d:be:58:5f:
         fe:65:8b:0f:17:12:7e:da:01:c2:bb:8e:df:a9:e7:40:10:2c:
         d6:a8:57:b0:42:62:ed:52:a7:35:ec:07:d4:5b:5d:67:c2:23:
         af:33:9b:46:ed:e1:f1:55:a3:cd:ee:30:10:16:4c:ba:89:2b:
         5c:b7:cd:0e:a7:4b:df:9c:30:27:98:65:82:e7:e9:a6:39:4c:
         93:43:e5:2a:e7:97:65:af:f4:83:99:39:4e:c7:7c:6c:69:bc:
         a5:77:23:05:d2:61:47:57:25:bf:09:0b:25:c2:90:c3:8f:42:
         5c:c5:96:40:32:46:9b:0b:df:70:a8:9e:5b:15:0b:da:3a:12:
         39:22:c8:44:f8:61:20:ea:1e:5d:47:2e:7a:68:45:3d:63:ce:
         6b:57:0f:ba:00:d1:5c:d0:ee:a8:fa:bf:8a:3c:ed:d4:fe:83:
         1b:02:76:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:44 2024 by rpki-client on console-ams.rpki-client.org