Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/ECDFACE4C6F611EC95352E19C4F9AE02.roa
File:                     ECDFACE4C6F611EC95352E19C4F9AE02.roa (raw, json)
Hash identifier:          a5ZaxTKm0g3+6bMrlgoxCh5d5uAK6bM0ukEp5ULHrNk=
Subject key identifier:   42:0C:9B:23:1C:C4:9C:DA:6C:95:04:28:F4:F0:0F:00:43:58:1D:4A
Certificate issuer:       /CN=A912611F/serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745
Certificate serial:       085B
Authority key identifier: 1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/ECDFACE4C6F611EC95352E19C4F9AE02.roa
Signing time:             Thu 18 Apr 2024 18:26:09 +0000
ROA not before:           Thu 18 Apr 2024 18:26:09 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     139325
IP address blocks:        103.135.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl
                          rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Jul 2024 05:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2139 (0x85b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912611F/serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745
        Validity
            Not Before: Apr 18 18:26:09 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=662165c1-de27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:90:8a:2a:5b:c4:ef:7b:b2:a6:94:fc:5b:42:
                    d0:e5:20:95:f7:1e:2a:fe:81:d5:9c:5b:e4:01:fa:
                    8c:ea:b7:64:14:9f:1a:3e:e6:13:d7:60:b1:c0:cc:
                    7d:02:50:b0:1b:ce:40:f6:31:dd:34:a5:f1:1c:2d:
                    3f:2d:af:1f:cc:39:cb:ae:d3:80:f9:6f:4c:54:20:
                    66:37:02:2c:de:93:4e:89:75:01:08:f0:cd:fb:4c:
                    d4:0b:f7:3a:a8:c2:9e:2d:3f:27:b6:a3:80:0c:85:
                    ec:48:3b:82:71:09:95:3d:e0:b8:fb:a4:28:c7:66:
                    80:15:cc:ba:1a:3f:04:ea:5d:67:8f:d3:6f:71:26:
                    99:58:f2:97:28:20:17:72:da:de:31:96:85:4e:2c:
                    fe:13:8e:5f:2d:5d:27:72:40:d0:37:d8:c1:7f:91:
                    b8:65:2c:29:a6:ea:d5:a9:1b:1f:83:86:c0:ee:61:
                    17:db:ea:8a:b5:a2:0c:4f:6e:82:d6:e2:11:71:26:
                    fa:a7:9d:55:fb:e5:21:e7:50:32:20:0c:9d:18:73:
                    04:a3:54:16:a7:69:49:ad:c5:47:1e:42:d3:62:c7:
                    bb:3b:47:da:3b:bf:aa:26:3b:c1:de:49:41:4b:b9:
                    89:33:80:0b:23:3b:63:ba:60:d1:18:06:31:d4:01:
                    f1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0C:9B:23:1C:C4:9C:DA:6C:95:04:28:F4:F0:0F:00:43:58:1D:4A
            X509v3 Authority Key Identifier:
                keyid:1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/ECDFACE4C6F611EC95352E19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:95:29:e0:36:9a:34:2c:be:c6:be:f8:f1:19:ca:5b:a9:8b:
         0b:ac:45:ac:aa:11:14:aa:8c:67:e8:cf:54:a6:e9:2b:cc:f2:
         47:1d:48:51:de:62:1c:30:b9:d9:66:94:84:f0:59:28:b0:b7:
         fb:94:a5:ff:9d:82:ac:63:06:97:ec:c2:24:7a:0a:8c:e0:b2:
         c1:fb:90:57:8b:62:30:7c:ca:dd:b6:fa:50:c9:22:e0:c2:a4:
         37:bb:b7:38:f6:55:94:18:e0:93:4d:30:13:2f:78:50:13:f7:
         83:f1:cd:d6:40:6a:7a:6e:76:93:70:06:5f:d9:df:c9:a5:54:
         3e:27:67:87:ed:32:b3:fd:a3:c1:fd:4f:73:95:2d:28:34:c7:
         f3:c1:a1:f7:57:bf:1b:53:9b:ed:2d:50:ef:12:95:ed:d9:b3:
         72:4c:97:51:c7:c1:4a:ef:7f:ed:19:1d:7b:a3:35:0b:73:76:
         b5:9d:0f:1b:59:39:6c:15:88:ba:ed:06:88:67:b0:84:f4:63:
         03:1a:08:5f:ee:7e:c1:69:f5:8c:00:75:45:61:dd:4c:69:0d:
         35:6d:30:f0:6a:dc:f1:9b:88:f7:20:00:93:8f:e6:3e:7d:0e:
         78:a5:f6:53:a6:ef:28:db:a3:05:96:d2:9f:e9:14:4c:87:18:
         a4:c7:45:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 09:20:39 2024 by rpki-client on console-ams.rpki-client.org