Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/888B171A960D11ED942B5D62C4F9AE02.roa
File:                     888B171A960D11ED942B5D62C4F9AE02.roa (raw, json)
Hash identifier:          7hwDXnY/VSA9GeUJEFRZsOQeVulT134imAqDjjhy4Sw=
Subject key identifier:   B7:BE:F0:8B:FF:63:AF:A7:79:E0:F1:ED:5B:05:D7:A6:8A:03:70:81
Certificate issuer:       /CN=A91A8D22/serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3
Certificate serial:       3352
Authority key identifier: A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/888B171A960D11ED942B5D62C4F9AE02.roa
Signing time:             Mon 26 Jun 2023 15:10:53 +0000
ROA not before:           Mon 26 Jun 2023 15:10:53 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     148989
IP address blocks:        103.112.36.0/22 maxlen: 22
                          180.189.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl
                          rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13138 (0x3352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8D22/serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3
        Validity
            Not Before: Jun 26 15:10:53 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6499aa7d-f72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f6:ed:c5:fc:71:5c:2e:ee:f1:c8:8d:ca:c9:
                    26:61:c0:a3:db:9e:a7:3f:f1:ce:fc:0e:2c:2f:2f:
                    36:63:57:e8:62:d6:f1:cc:78:07:20:d4:17:e0:83:
                    6f:4b:bb:cf:52:84:03:0c:d8:86:f4:d2:fd:6e:cd:
                    38:bc:58:95:60:ba:99:b1:20:f7:9a:fa:2f:f9:de:
                    1f:e3:fd:03:4a:94:bb:b3:7c:be:13:70:a6:c2:b7:
                    17:7e:54:53:9d:b2:92:c0:52:8f:82:75:b2:4b:bb:
                    4b:6c:a4:38:a2:92:dc:11:af:9c:1e:f7:57:c4:81:
                    ea:b9:60:f0:f5:b2:10:1d:5a:a7:e6:ea:26:f6:18:
                    b2:e2:dd:c3:d5:0c:df:16:80:6e:54:91:66:2b:16:
                    3d:94:05:73:e5:12:95:90:8e:7e:18:7b:b4:3c:53:
                    45:4d:1e:70:68:bb:6c:4d:e3:f9:07:fe:96:e8:59:
                    a6:77:71:c7:cd:34:5e:7d:1d:91:f0:08:24:df:f9:
                    e6:80:fe:fc:58:96:83:b2:a8:52:4c:a4:49:dd:1b:
                    b1:d8:bb:77:c9:59:e1:a3:32:8d:3f:ed:eb:d9:1f:
                    a6:b0:b4:d0:4c:fd:b1:41:45:9f:cb:4e:52:64:90:
                    54:e8:43:c7:4a:4b:63:10:45:85:a3:30:8b:c6:26:
                    3a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BE:F0:8B:FF:63:AF:A7:79:E0:F1:ED:5B:05:D7:A6:8A:03:70:81
            X509v3 Authority Key Identifier:
                keyid:A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/888B171A960D11ED942B5D62C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.36.0/22
                  180.189.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:fd:1d:a0:ad:b0:c4:27:04:fb:d7:45:36:5d:7b:46:ee:2f:
         70:d1:5a:ec:e9:a6:c6:b0:7c:4b:c5:fd:5a:7d:12:f4:e9:7a:
         62:0f:65:1f:bc:38:0a:b6:29:99:40:0c:d4:0e:6a:92:39:1e:
         9b:42:1d:59:cf:32:77:74:87:3b:d5:de:62:3e:0a:a4:85:00:
         a2:7d:1a:56:3b:a8:0c:f2:49:31:9a:10:23:b8:77:f7:89:10:
         ca:f7:38:6d:2b:97:20:aa:23:97:ec:0b:b0:71:b5:80:49:1c:
         df:49:34:1e:c9:ba:b7:a1:9d:3c:ed:d8:9f:cd:1b:81:64:33:
         1a:09:85:04:13:79:e8:be:a6:8f:ce:bd:9a:dd:4f:12:78:58:
         ad:63:ba:48:c6:67:4c:78:f3:0e:89:11:9e:f9:03:2b:9f:8f:
         b2:98:72:5d:3d:80:de:de:ce:87:88:cb:01:2e:6f:0c:6a:13:
         05:42:84:ea:8f:6f:68:a7:d3:ad:15:f3:b0:fe:2f:da:9d:a1:
         1e:06:b6:bd:ad:bc:c3:ad:ce:aa:45:21:dc:8d:83:31:32:bd:
         f3:60:f6:7e:3a:b8:d6:79:eb:9e:0a:ff:1e:ed:de:20:36:48:
         4c:3f:79:08:48:14:af:06:82:fd:c3:71:27:6b:fa:18:cb:1f:
         78:56:d8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:19:10 2024 by rpki-client on console-fra.rpki-client.org