Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/186A84C83A1811EBAF24B12EC4F9AE02.roa
File:                     186A84C83A1811EBAF24B12EC4F9AE02.roa (raw, json)
Hash identifier:          Aiioa6HROkA0Wu9hWdqlc2P5ZsuUkz08muRFBZ4+o1Q=
Subject key identifier:   06:94:D6:6E:5F:B3:F2:F6:77:62:AD:22:04:D4:63:5E:83:93:46:9E
Certificate issuer:       /CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2
Certificate serial:       09E3
Authority key identifier: 7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/186A84C83A1811EBAF24B12EC4F9AE02.roa
Signing time:             Fri 08 Dec 2023 20:27:44 +0000
ROA not before:           Fri 08 Dec 2023 20:27:44 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     139809
IP address blocks:        103.145.132.0/23 maxlen: 23
                          103.145.132.0/24 maxlen: 24
                          103.145.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl
                          rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 20:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2531 (0x9e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2
        Validity
            Not Before: Dec  8 20:27:44 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65737c40-aa65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2b:b5:a0:6f:33:c2:cf:13:86:ef:1f:50:e3:
                    05:27:f2:c9:7a:2c:50:91:64:00:9e:0f:16:c9:3b:
                    9a:5e:f5:86:e8:df:ec:a6:d3:bd:7d:3d:ef:15:b5:
                    0b:4c:19:f5:a1:7e:0b:fe:6e:38:31:51:6c:9a:fa:
                    fc:fd:64:c1:c3:b7:f8:6a:60:94:c3:11:12:ad:4e:
                    61:bc:90:22:2c:ae:e6:9e:44:cd:01:b4:ab:93:56:
                    13:89:c3:1b:bb:8f:48:37:71:c4:95:cb:4c:6b:07:
                    18:36:a3:f0:46:53:85:92:f5:6a:a8:7c:c7:bb:24:
                    a2:c8:67:38:66:2b:f9:cc:75:3a:44:b8:17:28:0c:
                    7e:6e:a1:15:b1:4b:5f:0e:a3:9e:df:fe:31:1e:6f:
                    2e:b6:00:9f:b6:07:d5:5a:ee:75:94:72:bc:ec:65:
                    f9:b4:eb:1d:f3:ae:05:12:86:f7:b1:04:11:7a:60:
                    e0:b0:e8:ed:c7:70:e1:1a:5e:55:89:d6:48:a7:d3:
                    01:0a:db:d4:34:a9:bd:f6:ff:3e:ff:2f:3e:69:fa:
                    d5:a2:d6:6c:ca:4b:48:c1:a6:cb:65:59:3e:91:a0:
                    46:96:7c:03:76:14:62:32:9b:8e:1c:fe:38:96:02:
                    6a:f5:15:75:c1:ee:dd:d7:f1:1d:f6:bb:7f:c6:62:
                    7d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:94:D6:6E:5F:B3:F2:F6:77:62:AD:22:04:D4:63:5E:83:93:46:9E
            X509v3 Authority Key Identifier:
                keyid:7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/186A84C83A1811EBAF24B12EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:54:f0:65:c1:68:86:4c:a4:eb:99:38:06:53:73:15:09:df:
         d7:63:e7:78:9d:ac:0a:88:ad:a8:47:c3:87:7c:29:71:ea:84:
         83:21:36:9c:70:ec:d0:15:65:2c:12:9c:1c:4f:65:b9:db:e1:
         5c:b6:64:c0:a0:f7:92:02:85:3a:4b:1a:43:27:38:c8:22:ad:
         c7:08:07:9a:47:04:7a:4a:d8:51:57:47:cb:ec:1a:dc:41:2f:
         36:8e:6b:67:c2:09:a3:5e:87:81:8c:26:85:c1:87:0f:13:94:
         ab:03:76:2b:d3:59:52:a9:3c:aa:4d:92:18:a0:60:d0:3e:04:
         40:3c:63:94:cf:7f:f6:b4:ad:7f:e2:b1:9c:9a:ba:d2:10:9e:
         9d:5e:45:d9:b9:ac:77:8a:d4:d5:cb:d7:2a:0d:73:b8:ab:4c:
         58:29:5e:5d:4b:ef:37:c0:71:05:ae:e9:c3:90:24:ce:9f:8b:
         c1:86:6c:3e:85:e5:1e:3d:cf:43:22:22:36:68:fb:79:d5:64:
         d5:26:d1:23:40:fe:15:95:87:60:d6:3e:a3:80:19:5e:69:1f:
         b5:cc:57:bb:65:8d:25:04:29:58:84:6d:f1:b4:42:b7:4d:e9:
         f6:80:d8:91:6e:a6:9b:c6:69:c9:4a:ea:08:35:12:78:50:2b:
         6e:3b:b6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 21:48:45 2024 by rpki-client on console-ams.rpki-client.org