Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/F7ACA074DC3F11EC8323B460C4F9AE02.roa
File:                     F7ACA074DC3F11EC8323B460C4F9AE02.roa (raw, json)
Hash identifier:          pktrHR+QS/er0s+loh1K6z6/oPCthVtEcSW6fBSWLVw=
Subject key identifier:   CE:C1:3E:B1:40:21:89:8F:F1:D2:01:85:22:C0:01:B1:1E:E3:0A:70
Certificate issuer:       /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Certificate serial:       024A
Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/F7ACA074DC3F11EC8323B460C4F9AE02.roa
Signing time:             Wed 19 Jun 2024 04:15:21 +0000
ROA not before:           Wed 19 Jun 2024 04:15:21 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     137526
IP address blocks:        103.186.238.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl
                          rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:07:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
        Validity
            Not Before: Jun 19 04:15:21 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66725b58-9a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:69:8f:5d:37:be:23:41:ec:ee:1c:d4:13:58:
                    22:db:1e:8c:73:4d:78:1f:18:06:39:05:65:3d:ac:
                    18:27:27:60:07:43:50:aa:e7:c2:9e:66:58:5a:ed:
                    59:27:49:6b:ac:df:f9:62:fc:14:52:49:19:9c:bf:
                    a2:b1:02:8c:2e:9a:9d:65:a5:f6:60:c6:b6:4a:39:
                    d2:8e:e3:ad:30:4c:9a:e6:4b:50:58:fe:b6:bf:85:
                    2e:9f:b6:27:8a:36:aa:2d:63:88:2b:1e:0f:ec:53:
                    78:fd:b6:1a:c3:29:5b:3e:09:a5:ea:06:b2:de:38:
                    c4:25:d5:af:32:32:3f:04:62:c0:36:56:e0:87:aa:
                    57:29:c1:c4:55:ab:1e:5c:83:b3:19:83:6e:a3:7a:
                    04:bf:46:9b:df:6c:31:ef:ad:a4:77:d4:e6:7d:98:
                    2c:05:64:1e:15:ac:2a:af:a5:8f:de:6b:9b:9e:e5:
                    79:e0:1a:99:68:61:e2:c7:d7:1c:71:4b:b0:5b:e3:
                    8a:27:85:79:57:7f:74:91:ef:c9:83:b2:ba:c0:cb:
                    e7:92:80:f9:93:0c:ad:8f:4d:22:aa:d5:40:df:24:
                    6f:61:c1:61:9b:bd:49:e9:dd:3a:17:8f:a2:1a:83:
                    ce:f1:d5:31:9f:b9:fc:a8:95:0a:a0:53:7a:78:d8:
                    b7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C1:3E:B1:40:21:89:8F:F1:D2:01:85:22:C0:01:B1:1E:E3:0A:70
            X509v3 Authority Key Identifier:
                keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/F7ACA074DC3F11EC8323B460C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:b6:ef:71:36:ef:17:b2:a0:e9:5c:fc:69:41:52:37:17:50:
         6e:d0:f9:b5:9c:e3:d4:90:09:ce:f3:f6:b6:ae:bb:92:b8:8e:
         e9:83:63:0c:39:c6:44:66:ab:5d:f1:7c:5d:54:08:13:19:9f:
         19:c8:f2:b3:13:b6:ee:6e:a8:5b:2e:cc:f4:4d:1a:78:88:9f:
         c6:e2:d8:31:7f:6e:96:94:b5:e9:3f:e4:ca:47:29:72:3e:1e:
         56:15:77:10:72:6c:35:3a:e4:74:51:92:9e:08:3c:81:30:36:
         88:a8:dd:05:86:bc:41:dc:46:5f:f8:cc:82:dd:7a:77:c7:7d:
         d8:04:90:74:e8:5d:e3:63:9d:5c:22:af:0e:e6:4b:3f:3f:59:
         0c:ed:c6:c9:bb:74:2c:d4:a7:a1:7e:11:4d:44:fe:2f:a1:78:
         45:b3:80:06:94:f5:23:01:8b:7c:62:08:1d:a8:5c:56:74:da:
         27:6b:45:cb:73:b0:7b:d1:ba:03:45:48:44:a5:32:d2:76:73:
         b8:97:bc:db:05:b4:27:14:3f:c0:1a:8a:f6:e7:10:c1:99:b6:
         73:44:ff:28:2f:00:73:45:f9:0c:d6:6f:05:0c:aa:20:f7:e1:
         83:a5:93:92:aa:7e:3d:70:54:d1:15:2b:eb:da:d2:53:84:96:
         86:e0:50:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:44 2024 by rpki-client on console-ams.rpki-client.org