Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/A59A5B6641F611ECB1465157C4F9AE02.roa
File:                     A59A5B6641F611ECB1465157C4F9AE02.roa (raw, json)
Hash identifier:          s/2XE3OKwLRXbsetwS9Ty1/cmYjDSHV9UY8kueVDyls=
Subject key identifier:   04:95:FD:8D:A0:90:AF:D3:CE:B7:24:5F:FB:9F:C1:B1:0D:2E:A6:22
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       35F3
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/A59A5B6641F611ECB1465157C4F9AE02.roa
Signing time:             Fri 16 Aug 2024 14:40:26 +0000
ROA not before:           Fri 16 Aug 2024 14:40:26 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     17878
IP address blocks:        101.202.0.0/16 maxlen: 16
                          103.139.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13811 (0x35f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E
        Validity
            Not Before: Aug 16 14:40:26 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66bf64da-26ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:2d:ef:00:b4:a0:9e:07:b1:25:44:4d:31:
                    90:6a:5a:a8:7d:e0:73:db:de:16:09:db:9b:40:8a:
                    c5:91:a4:cf:fd:9b:8b:99:66:4d:2f:8b:35:28:36:
                    e6:20:39:18:df:c6:4d:dc:fb:1d:77:66:fc:12:15:
                    65:c3:38:c5:04:ac:e8:6e:0c:c2:53:20:25:c8:87:
                    f5:d1:0d:43:90:44:e1:7c:61:97:32:d2:84:aa:23:
                    8f:16:56:c1:6b:8a:45:cb:50:6a:b1:d9:c6:fe:bb:
                    b1:14:91:39:eb:58:2e:38:da:8c:cf:41:12:45:a2:
                    ce:cf:a3:2c:fc:cc:91:9e:d2:fc:e9:c0:35:52:a5:
                    38:60:55:c7:66:42:20:63:45:06:5c:0b:67:05:fc:
                    a2:3a:34:61:29:37:a8:f9:3a:19:66:87:86:ea:37:
                    c8:8e:58:7f:58:7e:4a:b9:6d:e0:2a:98:02:8c:8b:
                    1b:9a:0a:76:76:5e:4c:bc:cc:c1:1f:44:af:a6:94:
                    17:97:7b:18:94:1e:b6:46:72:06:2f:8d:ec:1d:fd:
                    11:85:73:87:3d:df:20:37:6e:be:a2:4a:bf:89:ff:
                    f0:0a:00:d9:90:77:0d:e4:f7:23:ce:bf:f2:30:cc:
                    4a:ec:56:d0:9b:05:c4:af:ba:46:60:5b:82:f5:72:
                    05:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:95:FD:8D:A0:90:AF:D3:CE:B7:24:5F:FB:9F:C1:B1:0D:2E:A6:22
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/A59A5B6641F611ECB1465157C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.202.0.0/16
                  103.139.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e5:60:ff:79:c7:c3:d6:8d:24:5a:f7:1e:54:d0:6c:60:68:ef:
         da:6c:10:b1:48:6a:76:e4:66:2b:3e:e6:cd:2b:40:1b:48:8a:
         21:f8:44:87:e5:e8:9a:e1:fb:ca:78:2d:25:8c:f0:2a:90:f0:
         09:cd:15:6c:2b:c0:8e:05:44:5b:35:2d:fc:87:46:cf:b9:1b:
         b8:83:78:2d:f5:e2:c2:eb:73:94:22:37:5f:ab:6e:fd:0b:98:
         7d:c9:93:f7:2c:71:d5:db:23:22:2c:7a:2b:b7:17:4e:52:c3:
         b8:17:a2:27:40:b8:4d:ef:77:d2:6b:47:30:cf:82:00:2f:8d:
         eb:0f:09:8d:94:00:a6:27:f7:35:eb:99:90:a9:75:ae:b9:a7:
         de:42:7f:ae:5a:ef:e1:53:cd:2f:d7:ee:22:ea:9e:a3:6a:ff:
         ab:6f:d9:c5:fb:2b:81:38:32:14:60:ca:f2:c5:55:b2:ff:f5:
         24:67:1c:a6:28:18:71:68:93:b9:fb:14:d4:31:a3:98:f5:99:
         09:36:ce:6d:e0:30:06:ac:19:36:77:eb:0d:78:cf:be:47:50:
         1b:03:50:df:11:79:70:dc:f4:7f:1d:d8:9a:93:c4:17:ab:6b:
         cf:03:a5:bd:98:e0:ba:ac:d3:80:a0:fa:fb:dc:41:d7:44:74:
         0b:c8:6d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:09 2025 by rpki-client