Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/7D512C7EB0C611E5BDBA5065C4F9AE02.roa
File:                     7D512C7EB0C611E5BDBA5065C4F9AE02.roa (raw, json)
Hash identifier:          oKEra+z5HTLTSNTTjpMj+EhrYzyjYHuTj8yp31ybe8E=
Subject key identifier:   E2:F2:59:4F:D2:FD:F9:95:C2:ED:A1:E6:7B:B0:B7:2B:E7:BC:BA:90
Certificate issuer:       /CN=A916475C/serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE
Certificate serial:       33F3
Authority key identifier: 01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/7D512C7EB0C611E5BDBA5065C4F9AE02.roa
Signing time:             Sat 18 May 2024 14:20:11 +0000
ROA not before:           Sat 18 May 2024 14:20:11 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     38204
IP address blocks:        103.163.76.0/24 maxlen: 24
                          103.247.246.0/24 maxlen: 24
                          202.52.44.0/24 maxlen: 24
                          203.189.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl
                          rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13299 (0x33f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916475C/serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE
        Validity
            Not Before: May 18 14:20:11 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6648b91b-50e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2e:1f:99:53:62:be:60:fd:a9:da:9e:09:4b:
                    a5:55:aa:49:9f:bb:6a:be:bf:d5:1f:04:f8:73:49:
                    e5:56:2f:1d:9b:e6:d3:41:4b:64:ac:5c:ae:c5:3f:
                    7a:f0:f4:65:b2:50:09:24:62:f4:13:4a:14:07:7a:
                    3b:16:9d:99:52:68:bf:9a:7b:57:ee:06:e9:65:f2:
                    92:b4:f9:ae:71:f7:f6:6d:a6:21:a6:2e:17:83:98:
                    50:92:2c:5f:83:9f:7c:a2:bf:80:9d:9f:aa:fa:87:
                    3a:3f:6f:18:28:81:a2:b4:16:2b:6a:2e:33:ad:ef:
                    d5:00:33:92:ab:22:36:b9:ff:7e:9c:08:c8:92:d9:
                    30:aa:b9:6c:c1:84:97:2a:69:2d:6d:58:56:c4:5c:
                    1d:8b:98:77:23:ba:95:46:d3:90:57:f8:2b:0a:3f:
                    e6:37:cb:3f:c3:2c:65:d5:ed:30:74:29:05:33:fc:
                    4f:50:bf:c7:2d:67:d3:b6:aa:3e:9e:88:86:0c:54:
                    3d:fc:6a:d5:b2:87:57:44:c9:4e:ce:6b:f7:5b:3c:
                    4f:dd:97:63:31:6a:e3:4a:65:a3:2b:84:1a:28:30:
                    ec:f4:36:b1:70:84:dd:f9:ad:48:23:e6:28:49:c6:
                    0b:b8:7c:1d:9d:82:f5:88:b0:69:da:47:10:d3:cb:
                    e9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F2:59:4F:D2:FD:F9:95:C2:ED:A1:E6:7B:B0:B7:2B:E7:BC:BA:90
            X509v3 Authority Key Identifier:
                keyid:01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/7D512C7EB0C611E5BDBA5065C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.76.0/24
                  103.247.246.0/24
                  202.52.44.0/24
                  203.189.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:7e:c3:17:15:86:70:17:83:ef:21:9e:76:4d:c7:27:a6:2b:
         4c:73:b4:27:2e:d2:59:41:f0:2b:80:d4:16:30:a3:95:d6:cb:
         d3:ea:7a:e8:42:68:14:38:5a:5f:e5:fb:69:b2:96:2e:6a:3c:
         8d:dc:67:51:63:1d:c3:7e:25:37:44:ff:39:e8:8a:68:78:28:
         84:87:13:f8:4c:20:c9:8c:39:a7:6e:3c:9a:2b:4f:a8:83:95:
         b7:da:95:e6:93:c2:0a:3b:b4:18:e3:a6:6d:ae:d4:d9:e4:dc:
         21:91:a0:78:e4:c3:46:30:98:2c:a5:d2:2f:47:f2:5f:45:a3:
         f6:8f:33:2e:be:c4:7d:3f:26:85:45:e1:2a:3a:44:83:82:88:
         6e:3b:da:72:dc:a1:3c:51:bb:1c:3f:08:ec:af:43:d5:d8:8b:
         13:18:83:63:96:95:49:04:08:8d:53:61:af:df:78:5d:cd:23:
         51:a1:ca:b2:00:42:4d:ad:3a:4a:68:45:03:ba:bc:84:39:a8:
         55:7c:dd:b7:7b:1d:eb:b0:ec:0c:2e:89:38:f2:74:a7:fa:07:
         ff:73:1b:11:11:f8:c4:20:58:96:e3:f8:e4:de:b9:42:08:0f:
         ec:90:73:8b:b7:9c:2d:92:03:e8:d6:dd:15:5a:50:a2:3c:af:
         b7:26:65:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 14:56:38 2024 by rpki-client on console-fra.rpki-client.org