Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/3E0EDBC83E0111ECA3AF5462C4F9AE02.roa
File:                     3E0EDBC83E0111ECA3AF5462C4F9AE02.roa (raw, json)
Hash identifier:          S1HXzhvFtsXdHX0pd9yiJFTv4vp0m5nc84WdbIZmysI=
Subject key identifier:   CF:D8:09:CB:5F:22:A5:68:66:67:08:22:8C:69:B5:7A:EC:16:4D:95
Certificate issuer:       /CN=A912C4DB/serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD
Certificate serial:       0B31
Authority key identifier: 75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/3E0EDBC83E0111ECA3AF5462C4F9AE02.roa
Signing time:             Sun 10 Dec 2023 19:27:01 +0000
ROA not before:           Sun 10 Dec 2023 19:27:01 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     139792
IP address blocks:        103.145.70.0/23 maxlen: 23
                          103.145.70.0/24 maxlen: 24
                          103.145.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl
                          rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2865 (0xb31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C4DB/serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD
        Validity
            Not Before: Dec 10 19:27:01 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65761105-711e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b2:a7:e4:64:ae:eb:d4:c8:9b:fe:2e:9d:ac:
                    1c:70:3b:6b:3b:14:85:78:d5:21:9e:2f:17:ca:e0:
                    c5:67:ab:e5:66:a9:2f:44:62:ea:07:b5:c9:23:a5:
                    45:84:60:38:e9:e0:20:ec:03:60:47:33:4b:16:16:
                    17:50:43:cd:f5:cf:fe:d6:e6:5c:fc:7c:fa:a6:50:
                    42:32:27:ce:b0:d0:32:67:44:72:3d:50:a4:3a:41:
                    2b:b1:6a:e2:fa:1f:68:40:a7:81:44:0d:ec:30:0a:
                    16:9c:21:e7:b3:62:9c:ce:67:cc:65:d4:bf:47:d8:
                    44:a8:78:98:46:93:24:50:b7:0a:fd:ab:8b:cf:33:
                    5c:70:da:d0:e2:43:4d:d3:d7:90:37:bc:0c:52:d8:
                    7c:75:e7:9f:91:df:42:91:ef:51:6c:8f:7f:6b:3e:
                    12:21:55:dd:d1:ad:bf:cb:0c:51:47:c9:e7:dc:a2:
                    c2:52:c5:70:ac:8b:5f:67:64:58:24:fb:a2:3d:93:
                    66:2a:83:a1:f2:a2:05:58:43:f4:61:7f:93:cb:db:
                    bc:50:14:04:39:f7:64:06:93:8a:5a:ae:50:b7:81:
                    4c:1a:e8:58:83:28:41:97:21:52:bc:7d:d6:82:15:
                    2c:f0:0f:cb:28:8a:d0:24:ca:6a:f0:5b:f9:45:31:
                    b7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D8:09:CB:5F:22:A5:68:66:67:08:22:8C:69:B5:7A:EC:16:4D:95
            X509v3 Authority Key Identifier:
                keyid:75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/3E0EDBC83E0111ECA3AF5462C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:21:1b:5d:a2:66:26:83:04:8c:7f:09:cd:ef:f6:f9:0e:46:
         ea:c9:ac:32:e1:8d:72:6a:ee:e5:c4:81:f6:d7:e8:69:28:5c:
         5c:89:ad:91:45:b1:7d:7d:02:66:8c:50:6c:9d:1a:1b:20:85:
         7b:65:bb:c6:2c:76:d8:c8:bc:63:bf:f6:a2:e8:bc:c5:9d:89:
         73:61:99:16:bd:c0:d1:3b:3c:4f:73:54:50:ca:71:d3:92:fb:
         f1:17:a4:cd:82:e9:8e:f4:c1:53:8c:4d:29:63:98:73:71:f1:
         43:be:71:84:8d:4b:ef:1b:f3:80:7f:c5:5b:12:73:45:8a:60:
         34:7b:2b:5d:95:37:a9:c9:95:31:6e:50:0a:63:d1:64:93:89:
         50:dd:af:7b:e0:80:2a:8f:cb:ae:f7:6a:57:d5:8d:16:4b:90:
         cd:23:b8:e5:b8:4d:5c:ef:ec:74:3e:78:b9:ca:4b:03:5f:49:
         22:ce:2e:08:93:e5:27:04:3f:c3:c1:af:1b:01:01:7e:e0:ca:
         5a:21:16:86:c7:85:40:6a:51:6a:81:d1:c7:86:07:49:53:e8:
         f4:f7:98:2d:7b:5e:5c:02:96:55:ba:4c:b8:b6:27:84:3a:66:
         bc:6a:5a:5e:0f:4b:1d:24:b6:00:66:7e:c9:fb:0f:ed:b0:1f:
         3e:f0:bb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org