Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/7B026F0686C711EF9B284139C4F9AE02.roa
File:                     7B026F0686C711EF9B284139C4F9AE02.roa (raw, json)
Hash identifier:          EZr43Zd/nvWqNQBFSUi7UV8hDLrvC+/bbJUY/Mjkjnc=
Subject key identifier:   19:77:92:28:75:8B:9A:44:41:6F:09:87:25:5F:86:3A:36:7D:BD:AE
Certificate issuer:       /CN=A916B845/serialNumber=12E62B5B4D3301A08D67A7B8B3C65D4414F2D93F
Certificate serial:       04
Authority key identifier: 12:E6:2B:5B:4D:33:01:A0:8D:67:A7:B8:B3:C6:5D:44:14:F2:D9:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/7B026F0686C711EF9B284139C4F9AE02.roa
Signing time:             Thu 10 Oct 2024 05:21:55 +0000
ROA not before:           Thu 10 Oct 2024 05:21:55 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     152847
IP address blocks:        103.153.98.0/24 maxlen: 24
                          103.153.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl
                          rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B845/serialNumber=12E62B5B4D3301A08D67A7B8B3C65D4414F2D93F
        Validity
            Not Before: Oct 10 05:21:55 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=67076473-365f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:43:6a:4c:c6:8a:61:53:4c:c2:03:c2:17:1a:
                    ca:77:da:c8:76:86:33:74:66:27:b7:2b:65:b3:c3:
                    9f:89:7c:18:c8:01:ea:bc:3e:8b:d1:07:c4:44:17:
                    31:f6:f0:5e:de:9d:30:0e:c3:0b:5e:e8:aa:ee:d1:
                    d0:75:f4:2c:b8:b6:e1:06:25:72:e4:5a:8e:bb:a3:
                    ea:e9:ca:3a:5f:93:af:ec:45:a4:5b:1b:15:16:b0:
                    c0:03:ef:b7:c5:d2:20:a4:9f:fa:80:c8:bc:e1:e5:
                    78:ee:fb:83:56:3f:c6:5e:e0:cc:f1:af:03:ea:6a:
                    73:c8:1f:46:cc:9d:cd:28:9b:02:16:54:84:29:0a:
                    e6:86:52:dc:94:a6:f7:f8:e5:5f:3f:1b:05:95:9b:
                    6b:51:f0:26:17:f6:73:50:69:c2:c3:51:20:4d:10:
                    ad:e8:51:fe:94:e4:93:dd:05:2f:b9:f2:4c:4a:3f:
                    8f:74:e5:07:92:46:e7:8f:cf:43:8a:96:83:06:9f:
                    5a:0d:e2:21:8a:e1:e9:01:52:f6:41:da:d0:32:b2:
                    af:36:29:3a:dd:bd:4b:8e:68:fc:ec:bd:28:f7:07:
                    08:ce:1c:6b:38:36:b2:f2:f0:72:3f:8f:3f:87:30:
                    fe:c4:9c:c7:94:15:55:6c:12:8f:27:74:54:9f:d3:
                    c3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:77:92:28:75:8B:9A:44:41:6F:09:87:25:5F:86:3A:36:7D:BD:AE
            X509v3 Authority Key Identifier:
                keyid:12:E6:2B:5B:4D:33:01:A0:8D:67:A7:B8:B3:C6:5D:44:14:F2:D9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/7B026F0686C711EF9B284139C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:7c:1e:95:36:a1:e3:1b:c4:b1:e9:b1:9f:fa:f6:e7:14:78:
         c9:30:2a:33:a6:53:47:60:fe:54:ad:49:23:a4:3a:e7:20:6b:
         75:49:d6:10:80:28:53:30:8b:5e:ab:82:03:03:44:be:77:fb:
         8c:4b:fa:aa:b3:43:56:7e:d2:73:b4:06:e4:db:77:2b:b9:14:
         02:ee:7c:eb:86:e2:a4:9e:e5:80:97:a0:99:10:1d:36:43:9f:
         39:21:61:30:97:57:68:9f:f5:90:19:ed:c2:d8:a2:69:1a:86:
         dd:72:b7:b9:17:43:e3:02:0c:41:b5:d8:1b:44:a4:ff:23:dd:
         0c:43:93:f3:7c:e5:4d:a4:71:b8:d6:00:4a:52:00:68:23:d4:
         69:7b:8a:85:bd:f3:cc:5d:b7:b3:00:6a:03:ea:d1:0d:e4:8d:
         30:7c:e8:62:0e:99:13:b8:d7:39:09:f3:f9:8f:84:1e:35:a6:
         15:0d:80:9b:9b:2a:ae:38:a9:dd:38:7c:87:06:0f:a9:93:eb:
         bd:15:af:f0:2b:1c:3c:4d:9b:ed:b2:e3:eb:28:f3:4f:d6:4b:
         d3:7b:39:b6:36:35:cf:8c:37:6c:c5:91:6a:fa:3d:94:e3:38:
         c2:74:67:df:4b:f5:f2:25:ce:d5:e8:50:f1:a9:c6:9d:88:25:
         bf:46:75:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org