Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/B229257AE72511EEB731362CC4F9AE02.roa
File:                     B229257AE72511EEB731362CC4F9AE02.roa (raw, json)
Hash identifier:          WPpkw8gSp2U+YQXbYFDmHhxc7XujQT9XnaUaXlT+A54=
Subject key identifier:   6B:47:27:D3:0E:42:C0:04:1B:26:F8:04:10:42:07:E4:BD:C6:78:CF
Certificate issuer:       /CN=A918A132/serialNumber=016569C3CF8E700932F14E482C56AA66BBAF2B61
Certificate serial:       02
Authority key identifier: 01:65:69:C3:CF:8E:70:09:32:F1:4E:48:2C:56:AA:66:BB:AF:2B:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/B229257AE72511EEB731362CC4F9AE02.roa
Signing time:             Thu 21 Mar 2024 01:52:38 +0000
ROA not before:           Thu 21 Mar 2024 01:52:38 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     13213
IP address blocks:        103.163.132.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.crl
                          rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 09:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A132/serialNumber=016569C3CF8E700932F14E482C56AA66BBAF2B61
        Validity
            Not Before: Mar 21 01:52:38 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65fb92e6-7fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5f:c9:a0:2b:4f:4f:70:f5:f6:25:9e:37:06:
                    e6:82:f6:6a:19:40:e8:d6:51:98:60:1c:b2:6e:05:
                    d0:78:e7:b7:ba:7c:2b:bd:12:df:43:21:a1:71:5c:
                    71:57:ea:fc:b1:83:10:a3:ae:c6:4f:3a:63:6f:b8:
                    04:45:d7:d2:c5:af:0e:59:6a:24:a6:cc:9e:70:8b:
                    e2:c5:18:4e:b5:89:77:4c:cc:ea:85:4b:a6:7d:8b:
                    c8:90:af:d2:dd:02:a7:25:d3:f1:fb:bb:ce:bb:4e:
                    f4:9a:2f:d9:3b:e6:fb:3d:cd:e8:20:c0:b8:0b:5e:
                    82:36:95:43:93:93:27:3b:d4:5e:d9:ca:db:c2:4a:
                    9a:9f:f6:3f:6a:1f:42:77:5b:99:a0:33:02:91:28:
                    b9:db:95:bc:94:7f:31:73:12:2a:b8:c1:b1:d8:69:
                    67:54:7a:1a:b7:f9:a8:56:88:bc:dd:93:06:ad:c9:
                    a4:d3:61:f9:80:12:7a:0d:6a:a2:91:94:80:b0:3a:
                    b8:20:47:60:84:a9:52:95:1f:92:dc:1c:9c:3f:e0:
                    e4:d4:49:ae:95:77:d0:30:85:61:1f:9c:cd:9b:21:
                    b8:8d:07:cd:b8:c6:17:d0:fb:99:57:32:1b:07:9e:
                    e9:bf:77:7c:7f:0b:0a:44:a1:07:1e:79:dd:5c:05:
                    6d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:47:27:D3:0E:42:C0:04:1B:26:F8:04:10:42:07:E4:BD:C6:78:CF
            X509v3 Authority Key Identifier:
                keyid:01:65:69:C3:CF:8E:70:09:32:F1:4E:48:2C:56:AA:66:BB:AF:2B:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/B229257AE72511EEB731362CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:67:72:f1:25:b9:17:8b:78:11:31:28:8e:16:21:c5:5b:94:
         18:73:79:c4:f2:46:75:ad:d7:4d:2b:cf:9c:7f:fe:03:91:6d:
         e6:94:1c:f8:db:a9:b6:e4:dd:2f:f7:dd:a2:81:22:20:ae:32:
         ab:a3:ce:6b:ac:3a:ad:f4:8d:38:2a:73:29:7b:27:0b:48:3c:
         97:c6:9f:8e:4c:d9:06:20:e0:b7:ea:77:d0:9d:4d:de:70:b6:
         4b:fc:12:c1:72:29:a3:11:1d:40:e5:1e:b8:16:b3:2f:ce:b5:
         de:51:5c:85:0c:75:dd:0f:ba:ed:41:12:ae:04:f3:4d:c4:2c:
         42:af:a4:a4:46:da:4f:69:de:4a:28:61:e6:c4:b9:a4:c6:08:
         dd:c7:15:ae:18:9b:67:d2:94:20:fd:23:be:6b:5e:8e:37:ad:
         68:8d:43:40:ef:2d:0d:60:d0:47:3f:b0:b0:bf:03:9b:dc:34:
         0d:5c:36:89:6f:8a:8c:8c:b9:4b:f0:f0:c9:63:96:3d:a8:29:
         34:ce:fa:99:28:42:95:a2:2c:e0:00:e9:da:6b:ad:c0:02:96:
         75:07:1e:2a:d8:c3:4b:0e:cd:cd:43:48:18:27:68:d4:c0:ea:
         f4:78:38:06:35:8c:b9:b0:12:ad:0d:2d:a2:aa:d5:98:50:c6:
         bb:54:4a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 13:04:16 2024 by rpki-client on console-ams.rpki-client.org