Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/5E54C4BEA06411EBB6AFCD55C4F9AE02.roa
File:                     5E54C4BEA06411EBB6AFCD55C4F9AE02.roa (raw, json)
Hash identifier:          DD3W62iXqfM6WVvA6ioa/M9Aja29c1MxBPKpE9uTGH4=
Subject key identifier:   9E:06:1C:C8:88:EC:EB:84:47:56:E0:B8:87:31:66:11:B2:5E:C0:D2
Certificate issuer:       /CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
Certificate serial:       0517
Authority key identifier: 90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/5E54C4BEA06411EBB6AFCD55C4F9AE02.roa
Signing time:             Mon 15 Jan 2024 00:12:34 +0000
ROA not before:           Mon 15 Jan 2024 00:12:34 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     134804
IP address blocks:        103.13.132.0/23 maxlen: 23
                          103.13.132.0/24 maxlen: 24
                          103.13.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl
                          rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1303 (0x517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
        Validity
            Not Before: Jan 15 00:12:34 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65a47872-5356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:49:01:98:41:bf:0f:72:21:e1:63:06:74:7a:
                    36:d5:cf:5c:2e:8b:4f:c7:d1:33:e8:de:a4:54:6e:
                    d8:e2:6c:7e:dc:13:53:3f:a6:35:65:d1:5c:d4:42:
                    2d:61:6e:51:6a:af:f7:34:7f:2e:69:d0:eb:ed:76:
                    ba:29:d0:37:92:aa:fe:7e:48:10:13:22:ad:f1:ff:
                    bd:29:c8:a3:9c:0f:34:f0:e8:01:10:a6:70:41:a4:
                    19:95:56:81:67:da:b2:24:e2:ad:d0:f4:27:0c:13:
                    ca:4f:fe:2c:8d:96:00:da:72:6d:c5:c8:df:05:9d:
                    1e:68:dc:17:02:a7:92:26:80:78:03:29:ea:4f:28:
                    8e:03:82:79:04:e4:1b:50:cc:ce:87:24:d2:57:2b:
                    66:cc:16:d7:50:ad:bc:ec:7d:3c:b8:a0:88:0b:7d:
                    90:66:e0:76:42:6b:d1:49:d1:6b:e8:4d:5a:f0:61:
                    3d:d7:98:ef:bc:a8:c2:2e:eb:b5:8d:28:dd:32:c2:
                    ed:30:27:63:52:f9:55:78:6b:3a:c0:51:1b:0c:59:
                    57:48:be:77:f6:9f:ce:0b:1f:c0:73:fd:d0:e9:4c:
                    92:3d:6d:48:4b:eb:cd:38:85:2b:08:0a:69:0e:ab:
                    9f:23:b6:a6:e7:7d:ff:a1:19:aa:1d:80:ba:c4:29:
                    7e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:06:1C:C8:88:EC:EB:84:47:56:E0:B8:87:31:66:11:B2:5E:C0:D2
            X509v3 Authority Key Identifier:
                keyid:90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/5E54C4BEA06411EBB6AFCD55C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:9b:ea:f4:56:d1:0c:0f:b7:9f:0a:72:4e:80:73:7e:77:ae:
         80:60:85:16:bc:86:c2:bd:f2:8d:40:2e:ba:73:c4:2d:ce:cf:
         72:c1:79:ac:c0:8f:ea:48:11:37:fe:80:a3:82:d7:e5:85:e4:
         f9:4f:67:c6:71:6d:9c:77:96:4d:ed:f6:e7:82:57:76:71:ab:
         37:ec:a8:ee:80:f9:21:0d:ad:d6:ef:bc:11:66:52:7d:84:3b:
         77:5b:fb:2a:61:8e:66:49:e9:69:b3:85:d7:61:3c:13:f8:fa:
         c0:6c:4d:75:64:a6:4f:8d:8c:38:df:78:8c:4c:da:e6:a5:19:
         85:8d:f2:20:35:cf:25:d4:c2:e9:b4:6b:f1:18:d9:68:7a:26:
         7c:e3:fc:a6:03:55:49:67:3b:b9:63:46:d2:83:a2:19:ec:d1:
         28:eb:bc:d1:38:e7:73:70:b7:82:d4:38:7d:56:09:14:95:f5:
         d2:e0:a2:71:8f:9b:c9:49:5b:6b:97:2d:00:6f:37:63:9d:fd:
         cd:34:82:67:43:10:3d:fb:15:1b:ac:ce:e6:07:8e:c0:57:99:
         d2:17:ca:c7:bc:eb:01:91:d8:62:9c:4b:29:74:63:7a:ba:da:
         52:b2:c9:1f:b5:18:41:80:17:5e:a2:97:5a:94:0c:e4:f9:cb:
         4a:92:88:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:35 2024 by rpki-client on console-ams.rpki-client.org