Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/A445EAA0B5B911EC8AADD413C4F9AE02.roa
File:                     A445EAA0B5B911EC8AADD413C4F9AE02.roa (raw, json)
Hash identifier:          Y2n2BjZK7YcDbJf+OeJwUoZderld4t4C424W9hVCQCo=
Subject key identifier:   82:ED:68:0C:FC:D3:A6:4E:87:69:78:AA:42:26:7C:D5:C9:80:04:72
Certificate issuer:       /CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D
Certificate serial:       027F
Authority key identifier: 87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/A445EAA0B5B911EC8AADD413C4F9AE02.roa
Signing time:             Mon 19 Feb 2024 03:25:03 +0000
ROA not before:           Mon 19 Feb 2024 03:25:03 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     139743
IP address blocks:        103.84.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl
                          rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 03:28:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 639 (0x27f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D
        Validity
            Not Before: Feb 19 03:25:03 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65d2ca0f-654c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6a:8c:aa:20:4f:fb:18:31:57:18:5e:a7:61:
                    58:1a:af:25:f5:1c:a6:07:6f:fc:9b:5a:88:5d:2e:
                    29:54:dd:b8:e4:bc:2e:5b:97:8e:38:15:b3:08:89:
                    15:a4:a4:e0:0d:37:5f:dc:0a:37:d6:32:e8:f5:cb:
                    1d:87:58:cf:9b:fc:aa:27:b6:cb:11:73:b6:f1:ad:
                    ef:75:07:c6:39:41:dd:38:e9:0a:c8:d0:a5:d4:d9:
                    be:05:14:22:52:03:50:ef:90:af:37:3b:24:2f:bb:
                    83:19:94:74:f4:52:fa:82:6a:50:af:b8:80:28:7f:
                    db:a7:6a:ba:12:51:5b:f9:ed:be:7b:bc:b5:d0:ab:
                    af:42:b2:b5:a6:30:fc:a8:6c:a5:97:24:d0:fa:4a:
                    a0:89:5d:e3:15:20:62:fd:9e:d2:3d:94:28:29:28:
                    a3:2a:61:cd:e3:80:d8:00:2a:d0:d6:83:39:03:43:
                    05:a7:27:90:a8:3a:73:a1:cc:14:33:b8:27:09:7c:
                    2a:a5:cd:03:84:9c:38:7b:9b:46:b4:7c:93:89:7f:
                    b0:05:e7:c5:d4:a5:45:d7:2f:58:bf:96:0b:e6:9f:
                    f0:8f:38:90:a2:89:bf:6f:2a:4e:f2:ca:64:75:8e:
                    be:0b:23:11:2a:91:77:2b:f8:6d:1a:90:28:d9:18:
                    53:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:ED:68:0C:FC:D3:A6:4E:87:69:78:AA:42:26:7C:D5:C9:80:04:72
            X509v3 Authority Key Identifier:
                keyid:87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/A445EAA0B5B911EC8AADD413C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:cf:58:e4:e7:15:0d:b1:2b:b2:30:5a:7c:9a:5b:1d:2e:67:
         3d:37:16:8a:28:ae:4f:ca:18:1b:e8:46:a0:5e:6b:e0:96:58:
         ed:f8:cf:c1:1f:57:26:01:35:5c:c4:80:64:3b:b4:bd:6c:11:
         6a:b3:37:e4:36:b3:48:f0:ed:9e:ff:8e:b7:35:a5:89:2d:47:
         8d:c0:27:a6:30:13:35:d0:4f:04:b1:04:7e:be:cd:1c:8b:8e:
         28:40:59:f3:fa:99:8d:62:a8:a8:2a:71:95:97:03:3f:11:60:
         17:ec:c2:00:0b:70:f7:4d:de:4f:a7:7a:cb:e1:38:38:00:2a:
         d4:e5:b7:a8:97:d2:3b:c1:51:c3:4e:fb:1f:8a:b7:e9:31:c9:
         c8:cb:bc:ad:3f:c1:d6:06:ed:40:c0:1b:34:b5:c4:44:0c:0d:
         21:14:69:41:7b:45:85:99:eb:97:13:4a:b8:08:ac:93:06:93:
         d2:a1:7b:32:71:53:b8:2d:2e:39:17:a5:4d:b7:dc:ca:b2:be:
         11:dd:ec:a3:4f:cb:fa:29:16:18:09:61:16:35:2b:d4:cc:9c:
         11:a9:51:33:75:4e:c7:58:6b:19:ac:d8:3e:16:7b:90:3f:ef:
         b2:a3:49:c0:a3:e2:80:3b:60:96:63:fe:bd:94:07:ac:65:11:
         37:ee:06:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 04:35:41 2024 by rpki-client on console-ams.rpki-client.org