Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/E97B1E5482E211EEA80A0583C4F9AE02.roa
File:                     E97B1E5482E211EEA80A0583C4F9AE02.roa (raw, json)
Hash identifier:          qOUObwlVz2AIU79PBAC0mr9kyTjqlOSy9AkKav2eBLc=
Subject key identifier:   4C:52:51:CD:C7:83:42:CA:3D:7E:8F:4A:20:15:41:B1:1E:15:C0:7F
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3402
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/E97B1E5482E211EEA80A0583C4F9AE02.roa
Signing time:             Tue 30 Jul 2024 16:02:22 +0000
ROA not before:           Tue 30 Jul 2024 16:02:22 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     132641
IP address blocks:        103.132.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13314 (0x3402)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jul 30 16:02:22 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=66a90e8d-619a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:75:fe:36:82:0c:4d:79:cf:be:50:31:35:
                    a0:54:71:c7:6b:27:ba:ea:62:ff:c6:60:36:a4:31:
                    a8:0b:83:d7:13:13:ad:22:2f:95:3b:08:2f:cc:72:
                    f2:c7:42:26:d6:a0:e9:b4:52:fd:b1:ee:b1:d1:b2:
                    28:0a:f5:62:71:3e:7a:2d:b3:04:9d:af:bf:91:6d:
                    54:80:e0:98:6f:1c:58:c0:5b:ce:5b:78:59:ef:c2:
                    d9:75:26:89:80:90:8a:01:88:ba:a3:26:03:39:d3:
                    88:e7:ff:f2:53:26:62:df:5f:bf:5b:b3:d3:ba:70:
                    30:ae:93:e5:a7:f9:53:7f:9c:51:b6:bc:bc:5a:d3:
                    a4:4d:fd:dd:e2:99:bc:29:7d:3c:84:61:f7:81:c7:
                    a6:ea:b0:49:f6:56:83:a1:ce:9a:52:5d:be:42:89:
                    40:39:01:ed:4b:78:7c:0b:98:d7:a5:3e:8d:32:58:
                    ea:39:8a:c8:3b:7b:50:1a:8a:fe:ea:d2:04:d2:2f:
                    ea:39:28:ab:eb:22:c6:1f:a9:c9:5a:18:5f:20:8e:
                    29:d7:1a:5e:d4:f6:e6:9f:2f:f7:5a:cc:7f:c5:b2:
                    02:0d:8e:a6:e6:b0:11:d9:67:d2:dd:f5:50:2f:f1:
                    f1:dc:06:4d:c5:cc:70:85:9a:06:20:35:b7:4d:7c:
                    86:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:52:51:CD:C7:83:42:CA:3D:7E:8F:4A:20:15:41:B1:1E:15:C0:7F
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/E97B1E5482E211EEA80A0583C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:bb:79:ef:8a:a2:6d:7e:1f:da:b3:82:13:8c:41:f1:ae:6e:
         58:2b:e5:b4:03:17:66:c0:21:db:0a:06:9a:8b:2e:56:6f:db:
         8f:b7:81:4c:54:58:40:22:8a:78:6d:ca:a5:64:cf:d9:0d:ce:
         12:8f:26:28:a4:6d:64:19:cd:79:5b:73:39:b9:85:41:14:c7:
         83:b9:a1:72:5c:31:ed:4c:b2:6d:42:08:7f:93:15:8d:db:12:
         71:cc:d4:e7:9c:8d:72:ff:b8:6e:30:a3:7c:66:0d:34:be:10:
         4a:65:78:8a:a4:6c:f4:38:9f:e4:59:30:80:b7:a9:0e:fb:57:
         59:b9:ed:19:7f:ad:40:1c:46:68:3e:25:21:b3:76:cf:3e:f9:
         7f:d9:ee:38:43:05:5b:b2:6c:6b:0d:2b:d2:5c:a3:79:6e:ac:
         b0:35:75:d7:2f:bf:84:60:f9:77:3e:91:68:35:76:53:28:fb:
         a9:9c:b9:f2:33:e2:b7:d0:b8:0a:4f:ea:4b:f5:86:3b:9a:a2:
         55:18:41:8b:44:fd:94:5c:1a:bd:ef:25:4d:50:9e:eb:84:5a:
         31:13:5f:f9:7b:7b:2e:2d:90:b4:f6:73:8b:a5:7b:9f:77:9b:
         7d:df:a0:ab:3a:a3:99:63:84:da:2a:e6:97:0e:63:9b:98:ff:
         31:1d:3f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:21 2024 by rpki-client on console-fra.rpki-client.org