Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/E744DAB06C0D11EB89BF4725C4F9AE02.roa
File:                     E744DAB06C0D11EB89BF4725C4F9AE02.roa (raw, json)
Hash identifier:          sUhBtszyGA77U+0hMf0ckqr3Bu7sksYzljgOUrgetwk=
Subject key identifier:   D9:C1:D3:27:4A:0F:FD:D7:5D:34:C7:B2:F2:C4:E3:2D:40:16:A2:B7
Certificate issuer:       /CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Certificate serial:       059B
Authority key identifier: 12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/E744DAB06C0D11EB89BF4725C4F9AE02.roa
Signing time:             Mon 04 Dec 2023 23:50:53 +0000
ROA not before:           Mon 04 Dec 2023 23:50:53 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        103.153.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl
                          rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 23:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1435 (0x59b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A
        Validity
            Not Before: Dec  4 23:50:53 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=656e65dd-f4d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b6:ef:e8:40:75:15:05:92:2c:9b:04:c9:38:
                    25:bf:f8:e8:c5:c0:ee:70:de:e3:51:6a:05:d3:8f:
                    34:13:11:05:09:50:b5:f0:b0:4b:1d:72:9b:86:57:
                    10:18:f0:c5:0f:0c:60:02:26:4d:d3:cf:05:f3:b6:
                    c1:b2:dd:ec:80:19:6d:fa:30:30:00:0c:d1:07:54:
                    95:f0:36:92:b1:a7:19:a9:6d:60:46:7e:b8:1f:23:
                    cf:fb:0a:6e:bd:c3:38:0e:fc:1e:f8:13:0a:ec:57:
                    c2:97:9e:ee:d2:37:82:2f:26:1f:94:bc:aa:68:e3:
                    c7:8b:72:55:27:2a:a8:06:2c:a9:cb:64:63:23:2c:
                    3a:e6:ce:45:9a:94:68:87:ff:50:3c:41:96:4a:ad:
                    f9:8b:e8:1e:e8:5f:8c:cd:7d:cd:a7:81:90:e2:dd:
                    d7:9f:a0:96:d5:73:20:dc:db:4d:16:4b:cb:a6:dd:
                    a8:42:35:3a:54:31:b8:a5:1c:20:45:11:b3:77:cc:
                    78:97:4a:3b:85:43:50:df:75:4b:fb:0a:8a:a5:9b:
                    42:28:87:d8:70:9c:1c:ee:13:38:99:31:e2:ae:8a:
                    83:8e:f0:98:ad:39:b9:e2:41:a8:b3:33:50:38:e9:
                    fa:56:ff:37:60:6e:95:58:18:23:95:d3:63:7f:42:
                    29:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C1:D3:27:4A:0F:FD:D7:5D:34:C7:B2:F2:C4:E3:2D:40:16:A2:B7
            X509v3 Authority Key Identifier:
                keyid:12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/E744DAB06C0D11EB89BF4725C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:a7:e7:36:b2:03:03:ca:bc:2a:92:71:61:fc:a8:4c:fa:56:
         5a:d5:ce:6d:7b:05:14:3f:5a:dd:18:8a:1d:d3:4f:34:0e:4b:
         c2:23:59:c7:9a:1f:67:1a:3c:a6:8e:f3:69:ff:73:e9:13:14:
         d6:33:01:7d:36:da:d0:89:f0:92:29:e4:8f:ee:0d:a5:df:0e:
         84:e5:61:bf:f9:02:89:ef:0c:81:a8:24:71:65:fa:b9:58:f7:
         e9:34:5d:ce:9b:68:bc:92:de:cb:8f:f8:a1:e4:e1:36:44:91:
         6c:81:f1:1e:6a:84:f2:79:41:f6:08:8d:d3:dc:f0:38:93:54:
         ae:70:9a:73:2d:ce:0e:b7:47:c7:89:1c:41:56:00:73:83:e8:
         ba:c5:86:7c:80:7b:6d:c5:1b:4f:64:26:ff:4f:4d:28:0e:b5:
         7a:44:21:51:d2:a7:13:85:6f:2e:b2:69:f9:64:b1:c3:2f:2d:
         d3:4c:5a:f9:8a:5c:c7:cf:9e:77:e0:9e:6e:81:0a:9d:05:ae:
         df:72:78:ef:8d:6d:32:15:12:5f:60:d4:5c:be:44:cf:35:74:
         a2:51:fe:0d:c6:50:f2:f4:11:f5:c9:70:85:d5:35:e4:05:a5:
         a3:cf:cd:ec:6e:1e:fe:91:d0:4d:a8:fd:4e:22:cd:f1:e6:fd:
         7b:4e:4a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:32:29 2024 by rpki-client on console-fra.rpki-client.org