Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/B8DEA630C28011EDBFDC524DC4F9AE02.roa
File:                     B8DEA630C28011EDBFDC524DC4F9AE02.roa (raw, json)
Hash identifier:          RBpss0r0rSjo6OsGB9/QuzwOZe6XEcC8KZEKcKW0sII=
Subject key identifier:   B2:82:03:D4:F6:12:72:82:6E:EB:50:E2:8E:07:FB:FF:84:6C:78:B2
Certificate issuer:       /CN=A91975B6/serialNumber=E95FA0EDF1112E320C225E7B8D50418667A30ACF
Certificate serial:       012A
Authority key identifier: E9:5F:A0:ED:F1:11:2E:32:0C:22:5E:7B:8D:50:41:86:67:A3:0A:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V-g7fERLjIMIl57jVBBhmejCs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/B8DEA630C28011EDBFDC524DC4F9AE02.roa
Signing time:             Sat 21 Sep 2024 03:26:19 +0000
ROA not before:           Sat 21 Sep 2024 03:26:19 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     132165
IP address blocks:        103.236.132.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/6V-g7fERLjIMIl57jVBBhmejCs8.crl
                          rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/6V-g7fERLjIMIl57jVBBhmejCs8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V-g7fERLjIMIl57jVBBhmejCs8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91975B6/serialNumber=E95FA0EDF1112E320C225E7B8D50418667A30ACF
        Validity
            Not Before: Sep 21 03:26:19 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66ee3cda-3f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:27:34:b7:4c:b8:09:eb:4b:93:74:ef:63:f4:
                    08:00:6e:af:25:cc:df:a4:bf:6d:2e:ad:1e:e4:18:
                    b7:d8:ff:69:ca:f0:14:ab:50:97:8c:57:e2:f0:86:
                    10:89:f0:bb:a7:c2:48:c7:c5:be:d9:45:30:4f:8a:
                    f4:d8:04:19:30:38:9b:66:04:c2:9c:32:24:83:d0:
                    c3:d0:a9:11:51:51:c1:8f:85:b5:93:0b:00:a8:74:
                    9e:af:fd:ba:9a:34:f6:b4:b5:b1:16:8f:1d:2a:be:
                    7a:df:d2:f5:14:da:ba:51:50:01:28:83:14:9d:99:
                    87:34:ff:3d:c2:be:b5:32:62:04:40:1f:4a:5a:92:
                    a6:bf:61:3f:1d:1b:91:3b:d2:27:63:1d:bd:88:eb:
                    58:1b:58:2a:a2:5d:73:d1:f7:39:7d:45:de:c8:9c:
                    c4:2e:a9:f2:9a:d9:43:fb:8e:25:9a:dc:65:7d:55:
                    3c:f2:f6:67:55:37:d0:71:b4:65:af:6b:82:51:16:
                    e4:b7:42:89:9d:21:86:44:a9:11:11:87:4f:11:3c:
                    ef:9e:70:7d:dc:80:8e:54:e5:2f:0f:97:77:b3:fc:
                    e5:93:cb:b3:53:93:12:0b:74:25:fb:ff:9b:97:d1:
                    26:31:32:e3:82:0f:47:3d:3e:a2:d5:9d:31:7e:09:
                    4f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:82:03:D4:F6:12:72:82:6E:EB:50:E2:8E:07:FB:FF:84:6C:78:B2
            X509v3 Authority Key Identifier:
                keyid:E9:5F:A0:ED:F1:11:2E:32:0C:22:5E:7B:8D:50:41:86:67:A3:0A:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/6V-g7fERLjIMIl57jVBBhmejCs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V-g7fERLjIMIl57jVBBhmejCs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/B8DEA630C28011EDBFDC524DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:cd:d8:d5:51:ef:12:e7:a3:1a:5c:9b:e3:57:72:8b:7b:74:
         83:e4:75:93:37:34:97:55:9a:68:50:70:dd:51:be:28:bf:9d:
         b7:d9:6f:bf:2c:0a:42:27:31:7e:4f:56:50:11:a7:f0:66:2e:
         bb:63:07:a9:5f:34:e8:d9:49:40:66:34:9c:23:34:5e:91:2d:
         2f:b3:cd:71:69:cd:5c:46:fa:da:48:9c:4e:c5:4d:a2:44:0a:
         08:e8:7b:5d:8b:d8:5f:a3:cb:f3:25:83:be:43:ff:38:23:56:
         07:75:19:46:9b:06:c5:8e:30:c5:44:49:40:65:15:34:7e:3c:
         c2:dc:ef:c1:71:3a:5a:62:e8:eb:b0:74:4f:e8:9e:86:77:ce:
         92:2b:62:a2:b1:84:bf:0d:9b:eb:0b:58:6c:24:3e:f3:de:d9:
         c3:fa:45:01:c0:60:db:5e:dc:fc:6a:b3:6b:7b:75:67:86:27:
         c5:3a:2a:d1:31:11:41:eb:e0:86:cd:9f:25:3a:7d:c7:c2:38:
         f7:6c:5a:74:93:cf:ef:58:3d:69:6f:73:f4:2b:5b:83:5e:dc:
         4e:7e:9c:50:0b:d8:58:9e:dd:bc:97:94:e6:c4:21:5e:80:03:
         cc:31:c9:b1:e5:87:8e:99:7a:ea:1c:81:0b:bc:6b:92:9f:ef:
         b6:7c:8d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:06:01 2024 by rpki-client on console-fra.rpki-client.org