Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/8A162CBC5CC011EEAD18A95CC4F9AE02.roa
File:                     8A162CBC5CC011EEAD18A95CC4F9AE02.roa (raw, json)
Hash identifier:          uWXYe8F4NZ1KTtscCCzXjUiRK9hUa9iZhisG2LywSZg=
Subject key identifier:   D7:64:06:72:0A:54:F3:45:AF:93:99:5E:BE:AD:79:1D:01:E2:1A:96
Certificate issuer:       /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Certificate serial:       062E
Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/8A162CBC5CC011EEAD18A95CC4F9AE02.roa
Signing time:             Sat 02 Mar 2024 23:42:46 +0000
ROA not before:           Sat 02 Mar 2024 23:42:46 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     138968
IP address blocks:        103.242.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
                          rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1582 (0x62e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
        Validity
            Not Before: Mar  2 23:42:46 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65e3b976-278a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:17:5c:13:f0:e8:53:b7:35:41:85:82:e3:32:
                    eb:32:05:44:e1:b7:ce:59:60:d7:c3:11:61:8f:0b:
                    74:11:60:fa:66:3e:6c:ac:b7:16:74:27:23:c9:af:
                    bd:be:2d:fd:ec:86:02:92:cb:11:42:3d:da:2f:50:
                    45:f8:c5:54:89:e4:5e:b4:80:75:fb:11:a4:2e:24:
                    35:5c:6f:90:de:60:40:ec:bf:47:45:df:62:57:da:
                    30:32:d0:43:3f:1e:ed:0b:0f:d8:6c:32:95:d5:b7:
                    dd:5d:39:ea:6a:d8:ce:ef:c4:6d:10:f3:0f:76:41:
                    09:87:19:ed:37:00:b6:7d:e6:a4:1f:73:b0:4b:8e:
                    13:a2:3f:53:b3:3c:49:5e:73:59:90:09:4a:45:a6:
                    8b:2c:21:11:30:a6:6e:60:16:b9:e7:ea:df:a7:25:
                    b6:ff:d9:49:ef:81:b2:5c:69:0a:6c:ab:45:e2:07:
                    62:8f:61:23:e4:5f:68:f2:8b:a2:a5:5a:29:4f:45:
                    21:82:52:79:a7:1b:64:f1:97:2a:5f:34:1d:b9:35:
                    b8:95:d4:ca:63:10:14:8e:48:34:9c:8f:0e:16:25:
                    7e:35:8f:cd:89:05:95:2f:65:e2:2e:6c:7a:b5:86:
                    93:72:01:cf:98:40:0f:66:b8:d5:cd:3d:e5:84:46:
                    11:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:64:06:72:0A:54:F3:45:AF:93:99:5E:BE:AD:79:1D:01:E2:1A:96
            X509v3 Authority Key Identifier:
                keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/8A162CBC5CC011EEAD18A95CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:6e:54:c0:a2:3d:5d:fe:22:40:20:04:2c:77:ea:c8:a1:90:
         94:d8:83:76:05:18:28:da:b7:e1:ac:30:27:6d:08:fe:96:68:
         12:b4:4c:21:36:3f:ed:00:dc:3e:ac:be:92:77:c3:bc:42:89:
         9b:c1:5a:6d:e9:4d:d9:8d:f0:23:75:e6:9c:7a:51:89:2d:9d:
         7e:6b:3e:2e:e9:fd:3a:9c:07:36:b9:66:a6:3c:9f:29:3c:46:
         96:f5:06:e4:2a:8e:89:ba:19:f5:fc:df:8f:f9:a4:84:28:74:
         17:9e:f7:43:2f:d8:81:25:a7:5e:49:d6:7f:4a:4b:c0:8f:75:
         ad:bb:1a:0e:26:8e:26:dc:2b:dd:69:71:e1:cc:43:b7:54:fb:
         90:9a:3b:05:4c:66:21:ed:9c:71:66:fe:c2:6e:b3:50:da:86:
         fb:cd:26:d5:97:fd:cd:b2:46:20:5d:53:1b:35:67:26:56:50:
         13:62:55:28:37:9e:1e:8a:0b:7c:4d:0c:61:03:83:72:93:68:
         78:0b:6a:69:d2:ff:28:ab:cc:7c:dd:ab:1d:fa:3b:af:2e:05:
         4f:51:e5:61:d8:f7:2b:39:41:93:c2:ea:30:58:5a:ec:a4:6f:
         c2:94:07:7b:de:04:40:25:36:89:fb:68:af:fc:5a:f4:f4:9f:
         15:83:6c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:23 2024 by rpki-client on console-ams.rpki-client.org