Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/8D176BFAF65011ED90F79C33C4F9AE02.roa
File:                     8D176BFAF65011ED90F79C33C4F9AE02.roa (raw, json)
Hash identifier:          1/99aAvu3jh/Qi79wJIYoHLs2ybcs8p45fZpq6rEUXk=
Subject key identifier:   81:E4:73:30:8C:D4:79:62:88:AF:1D:B2:2F:25:78:82:E9:3A:50:F9
Certificate issuer:       /CN=A9187532/serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256
Certificate serial:       2B
Authority key identifier: C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/8D176BFAF65011ED90F79C33C4F9AE02.roa
Signing time:             Thu 03 Aug 2023 05:25:07 +0000
ROA not before:           Thu 03 Aug 2023 05:25:07 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     135548
IP address blocks:        103.65.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl
                          rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187532/serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256
        Validity
            Not Before: Aug  3 05:25:07 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64cb3a32-36a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:54:a1:5e:ac:ee:e1:04:8e:e8:1e:25:96:6d:
                    45:9d:ba:62:c5:e7:d5:e7:88:d5:b7:b6:3c:4a:c4:
                    e4:b1:de:4e:44:ab:c0:4e:46:c1:d0:2c:06:71:18:
                    66:9c:c6:61:21:e1:e8:37:6b:22:c2:61:81:a9:a2:
                    ba:e9:98:3c:5a:48:bc:4b:c1:b5:0c:13:fc:0d:c5:
                    e7:17:ea:7e:4d:52:38:e0:e9:df:fc:53:86:b8:26:
                    5f:44:fb:6c:e2:92:ba:26:12:23:a6:8b:e0:65:0d:
                    ea:28:f0:9a:33:0b:68:0a:03:ee:96:e1:f5:89:62:
                    8a:44:12:f4:5b:dd:fa:a7:f0:dc:7b:6a:b3:c0:89:
                    4a:75:c2:ce:45:13:9c:08:13:6d:b2:53:41:e5:c1:
                    fa:69:06:0b:db:4e:ad:fb:c3:dc:53:e6:5b:6a:e4:
                    b8:3c:a4:4e:ff:fc:69:20:9c:1b:dd:22:1c:17:a5:
                    68:66:89:7d:52:ee:3d:2d:c9:a7:85:72:2a:a9:c5:
                    a1:3a:2b:40:6a:bd:2f:37:3f:20:08:d2:1b:66:25:
                    23:a7:e2:3c:c5:84:3f:ec:52:36:fa:0b:35:2a:7e:
                    c6:7c:b5:17:a8:43:55:5d:3a:73:86:eb:23:aa:f3:
                    ee:26:50:c8:9b:30:9f:0e:ab:b8:58:cf:ff:9d:76:
                    6b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E4:73:30:8C:D4:79:62:88:AF:1D:B2:2F:25:78:82:E9:3A:50:F9
            X509v3 Authority Key Identifier:
                keyid:C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/8D176BFAF65011ED90F79C33C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:6f:b0:9c:d0:fd:72:b8:52:52:42:24:ed:f0:33:3e:e8:2b:
         4e:4b:78:89:5f:a5:b6:c1:4c:ef:a0:15:46:a0:a6:29:08:1a:
         82:6f:47:bf:ff:46:37:9c:70:1a:13:94:65:53:7a:d1:89:e7:
         1f:40:86:dc:63:ab:1e:86:99:8b:21:d4:3d:06:35:91:55:52:
         89:f8:a2:44:71:8c:7d:b0:27:47:fc:86:e4:5b:26:4f:ab:58:
         e2:45:e5:fa:22:d8:bb:29:30:7c:0e:44:4e:46:9e:a4:3e:6d:
         69:f1:86:fd:6a:30:6f:83:6e:32:66:80:0b:bb:a0:1b:d0:e6:
         3d:9c:71:e5:c8:e2:17:5b:8d:64:53:e1:b7:81:f8:c2:41:8b:
         d0:9b:2f:2b:1c:eb:ff:59:79:97:fb:2b:53:9d:b7:d7:17:e0:
         29:dc:2a:f2:97:0b:b0:c9:a8:dd:48:1f:a6:8e:26:9c:a0:40:
         fd:09:5e:29:0f:31:54:9f:68:23:3a:d0:31:22:3f:48:73:bc:
         d4:86:4a:d7:0d:ce:21:aa:45:cb:ca:ce:40:95:4f:53:33:b3:
         35:4a:db:42:6a:01:46:98:b7:94:f6:60:2a:0f:bc:42:6f:74:
         09:61:11:34:11:db:45:0e:0c:0b:4e:0e:42:ed:06:c6:6b:59:
         ca:68:4d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:25:03 2024 by rpki-client on console-ams.rpki-client.org