Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/0B1FBD4A40F611EAACD44866C4F9AE02.roa
File:                     0B1FBD4A40F611EAACD44866C4F9AE02.roa (raw, json)
Hash identifier:          7/xTj0hWgFoZxHiobIJ1SZYazXXBJG8VrDqlWC2SosA=
Subject key identifier:   8C:9A:AA:82:86:84:69:73:9D:15:5B:35:E5:6D:92:A1:9A:15:B5:F5
Certificate issuer:       /CN=A9198F53/serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
Certificate serial:       09EC
Authority key identifier: FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/0B1FBD4A40F611EAACD44866C4F9AE02.roa
Signing time:             Sat 28 Oct 2023 20:08:18 +0000
ROA not before:           Sat 28 Oct 2023 20:08:18 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     137038
IP address blocks:        103.102.216.0/22 maxlen: 24
                          2401:ea40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl
                          rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 20:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2540 (0x9ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198F53/serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
        Validity
            Not Before: Oct 28 20:08:18 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=653d6a32-c978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:92:bf:05:97:f1:10:22:a4:48:ba:9a:80:f8:
                    76:31:96:aa:e8:8d:c8:20:b8:79:f3:cc:85:d6:ab:
                    a9:31:47:ad:ad:cb:25:b4:e1:f3:b7:e3:0a:51:2f:
                    35:64:63:bc:bf:47:b8:b5:28:51:bb:ab:50:ac:1b:
                    ef:14:27:d9:a3:e4:32:5c:0f:ba:88:42:fa:4f:dc:
                    b6:f5:23:b4:a3:3c:c7:f6:43:1f:ac:c4:7a:f0:5c:
                    72:a9:77:e6:ad:99:d9:5e:42:82:45:27:70:46:bc:
                    0e:70:36:1f:38:19:e6:a9:3c:fb:79:80:d1:89:0c:
                    b5:16:38:c1:c9:ed:24:c5:f9:f7:e1:62:36:b1:2a:
                    b5:03:ca:67:27:e5:96:de:81:da:1d:7d:61:93:13:
                    8d:17:09:6d:52:da:10:c9:15:10:a8:8d:0e:02:17:
                    8c:c3:89:8f:58:57:2e:32:05:a0:db:6b:b8:1d:84:
                    57:fa:cd:88:7f:ef:18:f1:dc:d9:0b:68:79:d6:6b:
                    15:24:80:67:e7:51:88:c4:6c:4f:a7:97:99:6d:64:
                    81:48:36:a9:9b:2e:5b:1c:99:5f:9c:62:f1:4f:1e:
                    71:82:eb:4f:e1:81:5a:98:8a:55:80:c4:d3:14:70:
                    cb:de:a9:82:3a:21:c4:44:d6:f9:59:4e:57:33:8d:
                    e5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9A:AA:82:86:84:69:73:9D:15:5B:35:E5:6D:92:A1:9A:15:B5:F5
            X509v3 Authority Key Identifier:
                keyid:FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/0B1FBD4A40F611EAACD44866C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.216.0/22
                IPv6:
                  2401:ea40::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:77:0f:b9:6b:4e:17:de:4e:29:80:19:09:8b:b1:3d:7e:01:
         23:5b:31:ee:af:a6:54:21:66:38:a7:12:45:31:13:2a:fd:21:
         dd:56:09:33:d7:f1:dc:6a:58:66:94:49:18:09:64:9a:73:b1:
         db:12:2f:2d:36:60:15:f1:02:cd:b5:c4:c0:a4:75:9b:d3:b0:
         bb:c1:b7:d8:1c:be:ec:01:1e:6b:1f:ee:94:b2:a3:2a:b3:6a:
         75:91:05:5d:29:d5:7c:40:5c:a4:f4:37:03:b9:3f:96:ac:fa:
         48:c9:09:76:43:83:e5:91:1c:4f:ec:87:e1:51:20:c7:a9:71:
         64:c8:e2:a3:84:b4:b5:af:ba:9f:1b:30:17:98:60:03:3d:8e:
         f0:d7:f6:2b:14:cd:c2:b4:86:d3:e4:2f:24:c8:ab:09:0b:a3:
         9b:1a:8b:69:56:8b:ba:63:43:3c:b7:20:e7:0d:d2:be:86:0a:
         e0:31:52:44:4c:e8:64:57:79:52:73:1c:bf:e3:ce:3a:8c:ec:
         9b:5f:57:69:e1:73:05:ee:da:b7:60:af:4f:bb:e4:87:27:4b:
         a8:87:97:50:53:a7:89:28:26:90:20:d4:2e:b5:17:ef:8b:65:
         44:20:43:82:0c:ea:65:cc:01:8a:42:02:32:c3:87:f0:87:cd:
         e0:0f:d0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 21:48:42 2024 by rpki-client on console-ams.rpki-client.org