Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/7F0509300CCE11ED97C94316C4F9AE02.roa
File:                     7F0509300CCE11ED97C94316C4F9AE02.roa (raw, json)
Hash identifier:          7VxNMjQG1zgfT4tsEQfcFuOpbFyf2w1++cKzRTPQB1c=
Subject key identifier:   6E:6E:41:11:59:44:FF:1D:A8:BE:1A:78:A5:44:CF:BE:71:53:9F:A5
Certificate issuer:       /CN=A912759E/serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC
Certificate serial:       01EB
Authority key identifier: 5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/7F0509300CCE11ED97C94316C4F9AE02.roa
Signing time:             Thu 15 Aug 2024 03:04:59 +0000
ROA not before:           Thu 15 Aug 2024 03:04:59 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     140940
IP address blocks:        103.153.168.0/23 maxlen: 23
                          103.153.168.0/24 maxlen: 24
                          103.153.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl
                          rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912759E/serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC
        Validity
            Not Before: Aug 15 03:04:59 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66bd705b-8026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8f:cc:68:47:28:b9:68:54:1a:70:91:d6:07:
                    30:a1:78:26:c9:39:e1:2a:f4:9d:9c:31:36:65:11:
                    10:da:3a:e6:f7:2a:2b:90:97:51:85:82:ca:83:c6:
                    4d:c5:ab:d9:91:5f:5e:cd:80:49:3a:64:a8:47:42:
                    3f:50:cc:7d:cd:a0:6a:d8:71:6b:b2:25:6e:e9:57:
                    a9:14:d5:5f:28:bc:f4:78:87:28:cf:8e:2b:22:6d:
                    a9:bd:3a:82:e0:83:0a:00:db:db:d3:41:07:34:08:
                    49:fb:3d:f7:fc:ea:12:9f:9d:43:5d:66:e9:52:18:
                    dc:bd:80:da:a5:1e:a1:a8:01:46:7b:73:bc:3e:8e:
                    33:0c:31:82:65:79:3d:5c:c2:f9:76:3c:47:5b:0b:
                    89:dd:56:66:74:ec:bf:e2:d8:08:90:0f:f1:2f:a2:
                    1b:84:81:30:20:70:63:fd:ac:2b:51:90:c8:9b:ac:
                    33:58:4d:fe:f2:c5:51:87:80:1d:86:82:12:0e:ae:
                    71:8d:02:6b:87:0d:06:7e:df:e0:9d:12:aa:a3:29:
                    72:3f:a7:b7:61:6f:ca:93:fc:ac:a6:85:e4:99:27:
                    f3:77:77:b1:23:38:af:9d:02:1a:68:15:1d:81:37:
                    44:e0:a5:cf:eb:57:f0:51:cf:81:24:0d:e9:4b:21:
                    e4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6E:41:11:59:44:FF:1D:A8:BE:1A:78:A5:44:CF:BE:71:53:9F:A5
            X509v3 Authority Key Identifier:
                keyid:5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/7F0509300CCE11ED97C94316C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:71:1e:9a:9f:5c:d6:a2:fb:a4:d0:56:fd:93:4b:92:bf:de:
         2d:09:a7:60:91:10:32:40:90:af:73:3e:89:37:5a:f2:0e:8d:
         13:d9:bc:6e:93:6f:de:8f:55:50:96:2a:08:7c:44:90:6f:7c:
         79:69:f1:a5:da:23:ed:3e:61:28:ab:8d:ef:6e:e8:64:f3:18:
         16:03:db:a6:3c:74:3b:e7:ac:c8:89:58:4e:48:76:15:c8:f9:
         5b:8e:97:f8:25:e1:78:56:ef:0b:bc:87:d5:35:f0:49:84:4e:
         20:b0:62:09:06:00:a3:d3:43:5e:ba:1e:c5:61:8e:ca:d5:7a:
         69:8d:c6:02:e9:10:61:25:81:08:c8:5e:4e:ba:67:75:e1:00:
         75:79:2b:01:cb:46:84:c4:23:41:58:9a:09:04:7e:41:f8:a0:
         2d:b8:ac:ed:7f:ec:8c:64:b4:34:28:4b:f2:64:ac:f6:3d:86:
         f5:66:3b:7e:19:65:f3:6a:cc:ad:52:e6:dd:00:2c:38:67:f5:
         7c:90:24:d4:0a:1b:7a:c8:e7:27:98:72:14:8a:17:06:0b:e9:
         73:25:b8:83:19:f1:52:f8:de:42:4f:a6:f6:b0:58:8a:3d:2e:
         dd:2f:d2:72:04:ca:ed:1f:b4:69:55:13:6b:e7:fa:f6:01:6f:
         c9:e0:9f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:32 2024 by rpki-client on console-fra.rpki-client.org