Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/E0CEA472AF1911E7B848027EC4F9AE02.roa
File:                     E0CEA472AF1911E7B848027EC4F9AE02.roa (raw, json)
Hash identifier:          TssE0PJiXYYcEB2YrA++xagVqViSeFBsHV31+MUgEYA=
Subject key identifier:   9A:D7:5B:05:FE:BB:A0:D3:98:A6:14:A5:55:D3:BD:FD:6C:98:19:31
Certificate issuer:       /CN=A916D8BE/serialNumber=ED66BB40D121BA63C58597A93FE779C71D3317BB
Certificate serial:       1718
Authority key identifier: ED:66:BB:40:D1:21:BA:63:C5:85:97:A9:3F:E7:79:C7:1D:33:17:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wa7QNEhumPFhZepP-d5xx0zF7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/E0CEA472AF1911E7B848027EC4F9AE02.roa
Signing time:             Fri 24 Nov 2023 17:04:32 +0000
ROA not before:           Fri 24 Nov 2023 17:04:32 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     137016
IP address blocks:        103.102.24.0/24 maxlen: 24
                          2001:df2:c500::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.crl
                          rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wa7QNEhumPFhZepP-d5xx0zF7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5912 (0x1718)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D8BE/serialNumber=ED66BB40D121BA63C58597A93FE779C71D3317BB
        Validity
            Not Before: Nov 24 17:04:32 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6560d79f-3186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6b:cc:90:b9:e1:37:1f:c2:2a:62:80:74:6d:
                    93:80:10:47:a0:96:ef:c8:e9:8b:df:e8:a1:9a:40:
                    1d:14:52:8a:6f:52:1d:a5:ee:2c:41:c2:4a:03:68:
                    b3:50:0b:fa:d4:57:9b:28:88:27:6c:12:48:76:90:
                    bc:6f:51:9d:a8:04:4b:d5:f7:71:d6:7b:68:89:92:
                    fc:01:9e:75:62:0b:a9:4b:c0:20:8b:34:b1:1e:05:
                    af:f5:a5:d6:92:e4:dd:b1:b0:92:84:da:48:a8:00:
                    38:80:0d:8c:2b:a5:14:3f:0e:19:8f:8d:5f:2a:d7:
                    4d:d3:26:22:22:77:65:1e:94:89:54:f5:85:d4:71:
                    ee:4b:2d:d9:87:58:93:32:59:c8:5e:84:85:b6:10:
                    b0:c3:3e:35:b0:bb:13:98:53:91:87:dd:14:60:04:
                    1a:f6:bb:8e:aa:b5:76:af:e0:13:1f:96:09:35:14:
                    ba:8a:f3:b2:0c:22:62:4f:57:a0:8b:ca:f6:c7:13:
                    28:af:5d:8c:30:80:58:ed:c8:30:1f:1c:77:ef:56:
                    3f:b5:82:d9:21:a3:d3:ff:04:e9:16:cd:e0:aa:36:
                    d0:c4:93:98:fa:90:ff:a5:57:0f:ca:c1:c1:e9:40:
                    05:ba:7d:a3:98:be:72:14:12:2e:f3:a9:e7:bf:98:
                    cc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D7:5B:05:FE:BB:A0:D3:98:A6:14:A5:55:D3:BD:FD:6C:98:19:31
            X509v3 Authority Key Identifier:
                keyid:ED:66:BB:40:D1:21:BA:63:C5:85:97:A9:3F:E7:79:C7:1D:33:17:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wa7QNEhumPFhZepP-d5xx0zF7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/E0CEA472AF1911E7B848027EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.24.0/24
                IPv6:
                  2001:df2:c500::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:ba:f8:af:6b:45:b2:f5:42:6a:11:88:ba:72:5d:57:48:c4:
         1f:54:1a:95:11:0e:8a:36:7f:c9:95:c4:bf:7a:42:6d:d0:c8:
         bc:43:5e:1b:8a:7b:ad:b8:3e:45:7a:45:16:68:a0:8b:d2:5c:
         88:2f:63:05:2f:3c:3e:71:cc:d2:93:3d:b8:52:b5:66:e6:bd:
         dd:54:14:66:e4:c1:2c:2f:81:af:97:31:9e:78:1c:6f:91:c2:
         be:c4:7e:51:30:b5:c1:c1:3e:2f:2b:3e:66:35:86:d8:a4:66:
         9d:13:47:d6:6c:79:74:c4:50:70:d1:16:41:3f:77:71:75:00:
         ae:a3:93:d9:e2:5f:63:b5:b9:02:8a:cf:a2:3a:96:e1:7f:23:
         51:57:d2:1e:a5:f8:6c:a6:dd:07:ea:be:be:8c:be:43:e2:78:
         d5:36:b2:80:ee:25:ca:1c:48:ce:7a:e5:fe:96:19:b2:ca:0e:
         26:08:d6:b5:36:db:5e:a1:9f:0d:bc:0c:61:59:08:b5:ee:8a:
         76:61:56:55:21:18:f3:b6:8e:7d:0e:e6:c4:46:8e:3c:15:a3:
         06:75:3b:ba:21:3e:a9:44:38:42:1e:d7:15:a1:19:bf:3e:d3:
         e0:68:02:3d:52:de:7e:6c:96:7b:70:34:fd:6a:6e:bc:77:d7:
         38:05:17:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:20:07 2024 by rpki-client on console-fra.rpki-client.org