Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FCD53C02B90E11EE90F01680C4F9AE02.roa
File:                     FCD53C02B90E11EE90F01680C4F9AE02.roa (raw, json)
Hash identifier:          tLe1s3XbM9DeYc0OkxoPlcVHC3GA0KxuAjAS9JVmCq0=
Subject key identifier:   F3:EC:EC:39:63:35:F1:5D:B7:51:E8:2F:CC:0A:EA:EE:9B:15:9C:0A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       81A7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FCD53C02B90E11EE90F01680C4F9AE02.roa
Signing time:             Mon 22 Jan 2024 10:14:12 +0000
ROA not before:           Mon 22 Jan 2024 10:14:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     138291
IP address blocks:        103.122.172.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33191 (0x81a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jan 22 10:14:12 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=65ae3ff4-2004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:45:6f:f7:57:12:19:e8:fb:44:10:89:3a:d0:
                    d7:6a:0d:10:f8:6d:3b:b5:b6:ef:0d:3b:52:48:7d:
                    d7:9c:c6:80:3a:63:8a:30:ed:56:94:ef:ff:a4:14:
                    b3:da:b4:ca:4d:2f:f2:13:48:ae:dd:08:12:72:43:
                    4d:22:5b:1f:f4:63:dc:50:7e:26:6d:47:3b:84:cc:
                    22:ed:d3:28:85:6c:94:22:3d:42:0f:5f:0e:fa:1c:
                    78:cc:b7:ce:a5:64:90:d7:bf:07:af:10:3c:cc:22:
                    cf:55:72:31:48:90:29:cd:38:3c:f7:30:ea:45:0d:
                    fc:c8:c3:7a:05:1c:b9:9a:50:03:2d:75:51:71:d5:
                    cb:1a:26:36:e4:08:61:65:5c:36:07:44:4a:ee:35:
                    4d:ac:bb:99:90:7a:c4:39:31:80:45:ef:84:8d:87:
                    7f:f7:ad:7f:13:17:24:77:ec:bc:73:9a:ca:41:79:
                    0d:24:00:68:07:09:2a:54:c8:3b:22:2d:e6:76:ae:
                    17:91:36:30:26:be:dd:05:6d:15:3d:77:7c:00:b8:
                    42:43:a1:35:d9:24:92:46:b1:1c:4d:24:f8:2d:d7:
                    90:80:c2:26:1e:b9:b3:30:21:a6:54:42:65:46:75:
                    e8:25:e1:db:7f:8e:fc:a7:69:e4:27:e9:24:89:f6:
                    4c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EC:EC:39:63:35:F1:5D:B7:51:E8:2F:CC:0A:EA:EE:9B:15:9C:0A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FCD53C02B90E11EE90F01680C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:80:e5:0e:87:5f:c6:a5:b8:ef:2e:c6:67:63:50:54:f2:b8:
         d8:0b:f4:5c:bf:52:74:e8:bf:33:30:a7:fa:c5:f0:64:2c:d5:
         e7:a8:be:19:2f:75:fe:31:83:8f:36:c4:bf:b3:1e:78:fc:85:
         2d:cf:f7:d8:a1:ab:3f:05:4b:ef:e3:01:54:60:97:3b:d1:74:
         93:a4:50:7f:81:b6:8b:89:97:a4:ed:87:ec:16:a6:23:1f:9b:
         f6:82:77:b4:0a:f7:59:a8:87:fd:e6:51:1b:ae:c7:fe:b0:d9:
         67:c1:40:fe:8e:fe:24:70:8e:f1:aa:c9:50:47:fb:ac:21:9f:
         9f:60:a0:b3:b1:c9:41:32:41:f4:5e:46:9d:49:0c:16:f2:91:
         a7:10:ec:cb:8b:3e:27:96:ae:aa:07:73:f2:66:45:a6:fa:f9:
         3f:5f:ec:ea:8f:d2:c9:13:c5:75:65:11:eb:7b:95:94:d8:95:
         02:c3:94:b3:78:ab:0b:be:86:52:bf:06:2b:b1:14:8b:e8:41:
         dd:39:07:fd:f4:ef:97:77:d9:bf:ba:5d:1d:08:68:41:1a:dd:
         e1:2b:b4:f1:94:3a:66:9b:e3:92:c7:77:84:29:9b:ba:5a:02:
         c3:7c:9b:9c:83:ab:0b:45:db:bb:10:80:e3:33:38:20:33:0a:
         7d:e6:eb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:51 2024 by rpki-client on console-ams.rpki-client.org