Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/166B5FEA727711EEA4209110C4F9AE02.roa
File:                     166B5FEA727711EEA4209110C4F9AE02.roa (raw, json)
Hash identifier:          vsKfFCQHXUJoMCmvwJp4+1zKcYj11D7GJ21Jh4nT+4I=
Subject key identifier:   D6:31:D0:E2:58:B4:00:DF:B0:1B:4F:BC:C2:57:E1:82:1D:C6:FC:7C
Certificate issuer:       /CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
Certificate serial:       02
Authority key identifier: 7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/166B5FEA727711EEA4209110C4F9AE02.roa
Signing time:             Tue 24 Oct 2023 14:10:30 +0000
ROA not before:           Tue 24 Oct 2023 14:10:30 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     132227
IP address blocks:        103.214.248.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl
                          rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 07:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
        Validity
            Not Before: Oct 24 14:10:30 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=6537d056-591f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:69:59:3a:6f:f8:ff:0b:04:ce:a6:15:39:
                    26:5d:98:0e:43:b7:8f:c8:0c:f8:b0:e2:e4:b3:c5:
                    5c:22:a6:66:7e:0f:02:ac:63:61:3a:21:95:a6:16:
                    7d:a9:f2:50:b2:98:c0:5e:0a:31:34:5d:e8:ce:71:
                    6d:7f:0c:ba:a0:37:8c:37:ff:50:a9:ed:be:5f:84:
                    40:c4:a5:7f:e3:23:b5:e9:0b:a0:38:6e:a8:0c:8a:
                    13:84:64:b7:1e:92:22:94:03:01:9e:ad:20:33:67:
                    5e:8e:c1:2a:ce:76:69:e0:12:77:20:ed:45:fa:af:
                    f1:b5:79:9c:f7:e5:97:d2:9c:b2:c1:75:35:41:47:
                    4b:cb:6a:f3:23:66:10:0b:30:ae:91:eb:f4:e3:38:
                    38:77:ad:1e:18:6a:c6:68:aa:77:25:c8:c8:d6:2f:
                    a2:25:9d:d3:fd:55:84:43:91:cc:f5:33:d8:92:a8:
                    80:98:3a:95:b9:3a:9b:98:89:50:c0:61:1c:50:86:
                    d4:6a:ac:98:75:1a:f3:e1:5d:c8:e4:9d:01:4d:9b:
                    0a:46:85:cf:d8:ee:2f:dd:01:42:a4:29:c3:c5:66:
                    23:3f:e8:f7:d1:32:1d:64:d6:03:cb:4a:ed:45:f2:
                    17:24:ef:2d:21:1d:e2:03:df:00:92:80:cc:8b:c3:
                    5b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:31:D0:E2:58:B4:00:DF:B0:1B:4F:BC:C2:57:E1:82:1D:C6:FC:7C
            X509v3 Authority Key Identifier:
                keyid:7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/166B5FEA727711EEA4209110C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:1b:de:29:4b:f1:42:d9:15:77:00:e2:16:4a:37:2c:59:18:
         9e:d8:b5:ef:d2:d6:8b:ba:ef:75:59:4f:19:2d:00:66:c9:51:
         11:90:a1:20:9d:44:76:a3:81:a7:59:23:ae:a7:31:6e:c7:cb:
         06:c4:34:ac:4f:97:1e:5d:3f:22:da:b9:21:33:80:98:a5:27:
         21:aa:fc:a4:38:a8:ea:10:17:86:8b:c2:24:87:49:58:63:d6:
         ee:4b:2e:63:cc:b3:d5:bf:9d:e5:93:5a:e4:4a:5b:60:76:a2:
         72:63:8b:f8:f7:28:de:5b:a6:e7:52:30:42:28:b1:f9:99:8e:
         f0:09:7f:d3:ce:6e:f6:6e:fe:53:83:4c:a5:90:a7:65:c3:5d:
         41:de:5c:89:cc:48:80:5a:28:f9:63:96:46:f5:8c:39:1d:51:
         4c:e4:a0:53:d2:9e:17:4a:a2:9e:99:46:8e:d6:91:26:9c:39:
         16:dd:ce:84:97:ac:4d:fd:be:27:be:63:aa:b7:a3:90:b3:77:
         58:23:bf:0b:66:a2:cf:6c:77:2d:7a:b7:09:13:7e:b2:73:98:
         6a:f0:7b:4b:8c:ff:8e:4f:14:49:ab:d7:ed:0e:88:a7:3b:e3:
         08:f1:18:45:3b:fb:d2:27:64:7e:64:63:c5:5c:2a:7f:0c:14:
         00:77:e6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 09:40:22 2024 by rpki-client on console-ams.rpki-client.org